MPLS Router Label Switching for Secure Network Connections
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
MPLS networks often lack secure connections, especially in geographically distributed locations, and existing solutions do not adequately address the need for secure network connections.
Innovation Solution
A system and method that maps an entry point directly to a router in an MPLS network, attaching MPLS labels to communication packets and using dedicated optical links and media converters to create a secure link, ignoring IP addresses to enhance security and reduce vulnerabilities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If MPLS networks are used for high bandwidth communication, then communication efficiency and cost are improved, but network security and availability in geographically distributed locations deteriorate
Solution Approach 1:
The network connection is segmented into two distinct parts: a secure physical layer using dedicated optical links for geographical distribution, and a logical layer using MPLS label switching for efficient packet routing. This segmentation allows each layer to optimize for its specific function while maintaining overall system security and efficiency.
Solution Approach 2:
MPLS labels serve as intermediaries that enable secure communication over the optical network without exposing IP addresses. The labels act as a mediator between the physical optical link and the logical packet routing, allowing the network to maintain security while achieving high bandwidth communication.
2Adaptability or versatility
If IP addresses are used for packet routing, then network flexibility and addressing capability are improved, but security vulnerabilities and exposure to attacks increase
Solution Approach 1:
The IP address information is extracted and removed from the packet routing decision process. Only MPLS labels are used for routing packets through the optical network, effectively taking out the vulnerable IP addressing layer from the security-critical transmission path while maintaining network flexibility through label-based routing.
Solution Approach 2:
MPLS labels serve as an intermediary that replaces direct IP address exposure. The labels provide the necessary routing information without revealing the actual IP addresses of source and destination, thus maintaining network flexibility while reducing security vulnerabilities to flooding attacks and address-based exploits.
Data Source
AI summary
A system and method for creating a secure link across an MPLS network is disclosed. An entry point into a communication system is mapped directly to a router in an MPLS network. The router attaches MPLS labels onto communication packets received from the entry point and transmits the packets across the MPLS network to a destination associated with the entry point. The router ignores any IP address contained in the packets when routing the packets through the MPLS network.