Solving the Ingress Filtering Issue in an IPv6 Multihomed Home Network

摘要

The common practice in the industry to have several connections to the Internet through different service providers is called multihoming. Multihoming increases the capabilities and the efficiency of the Internet connectivity, allowing end-site to benefit from redundancy, traffic engineering and load spreading. Primarily limited to the largest companies, multihoming is attracting more and more enterprises as well as private customers. The fast growth of multihoming demands is facing unresolved technical issues, especially in home networks, which are not specifically administrated. One of them is the ingress filtering policy, implemented by Internet Service Providers to prevent spoofed-address attacks. This security policy discards packets whose source address is not known by the service provider. This article presents an enhanced routing scheme in multihomed IPv6 terminal sites, which allows to deal with the ingress filtering policy in ISP edge routers. In that purpose, we describe a new mechanism for selecting the default route based on the source address of a packet. This proposal solves the ingress filtering issue without implying any changes in Internet Service Providersȁ9; policy or terminal nodes. Additionally, we show that the proposed mechanism is easily deployable and needs only a few changes in terminal site routers.