INTERNET PROTOCOL SECURITY (IPSEC) SIMPLIFICATION IN BORDER GATEWAY PROTOCOL (BGP)-CONTROLLED SOFTWARE-DEFINED WIDE AREA NETWORKS (SD-WANS)

摘要

A method implemented by a first edge node in an SD-WAN, the method comprises: establishing a secure management tunnel between an RR in the SD-WAN and the first edge node; advertising properties of the first edge node to the RR via the secure management tunnel for the RR to propagate the properties to a second edge node; establishing a first secure data channel with the second edge node; and exchanging first information with the second edge node. A method implemented by an RR in an SD-WAN, the method comprises: receiving first RTC NLRI from a first edge node in the SD-WAN; receiving second RTC NLRI from a second edge node in the SD-WAN; installing an outbound route filter based on the first RTC NLRI; and processing the second RTC NLRI based on the outbound route filter.