Skip to content

Commit dd01fe2

Browse files
knmeynellnicorusti
andauthored
Clarifies the aim of the document. (#88)
* Clarifies the aim of the document. Clarifies the aim of the document. * security: reword goals * interop wording * Reworded Security Overview * security: accept Kevin's wording * Update draft-dekater-scion-dataplane.md --------- Co-authored-by: Nicola Rustignoli <nic@scion.org> Co-authored-by: Nicola Rustignoli <nicorusti@users.noreply.github.com>
1 parent 1da0d36 commit dd01fe2

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

draft-dekater-scion-dataplane.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -177,13 +177,12 @@ The SCION Data Plane fundamentally differs from today's IP-based data plane in t
177177

178178
SCION is a path-aware internetworking routing architecture as described in {{RFC9217}}. It allows endpoints and applications to select paths across the network to use for traffic, based on trusted path properties. SCION is an inter-domain network architecture and is therefore not concerned with intra-domain forwarding.
179179

180-
The data transmission order for SCION is the same as for IPv6 as defined in Introduction of {{RFC8200}}.
181180

182181
SCION has been developed with the following goals:
183182

184183
*Availability* - to provide highly available communication that can send traffic over paths with optimal or required characteristics, quickly handle inter-domain link or router failures (both on the last hop or anywhere along the path) and provide continuity in the presence of adversaries.
185184

186-
*Security* - to provide higher levels of trust in routing information in order to prevent traffic hijacking, reduce potential for denial-of-service and other attacks. Endpoints can decide the trust roots they wish to rely on, routing information can be unambiguously attributed to an AS, and packets are only forwarded along authorized path segments. A particular use case is to enable geofencing.
185+
*Security* - to introduce a new approach to inter-domain path security that leverages path awareness in combination with a unique trust model. The goal is to provide higher levels of trust in routing information to prevent traffic hijacking, and enable users to decide where their data travels based on routing information that can be unambiguously attributed to an AS, ensuring that packets are only forwarded along authorized path segments. A particular use case is to enable geofencing.
187186

188187
*Scalability* - to improve the scalability of the inter-domain control plane and data plane, avoiding existing limitations related to convergence and forwarding table size. The advertising of path segments is separated into a beaconing process within each Isolation Domain (ISD) and between ISDs which incurs minimal overhead and resource requirements on routers.
189188

@@ -197,7 +196,8 @@ SCION relies on three main components:
197196

198197
This document describes the SCION Data Plane component. It should be read in conjunction with the other components {{I-D.dekater-scion-pki}} and {{I-D.dekater-scion-controlplane}}.
199198

200-
The SCION architecture was initially developed outside of the IETF by ETH Zurich with significant contributions from Anapaya Systems. It is deployed in the Swiss finance sector to provide resilient connectivity between financial institutions. The aim of this document is to document the existing protocol specification as deployed, and to introduce new concepts that can potentially be further improved to address particular problems with the current Internet architecture.
199+
200+
The SCION architecture was initially developed outside of the IETF by ETH Zurich with significant contributions from Anapaya Systems. It is deployed in the Swiss finance sector to provide resilient connectivity between financial institutions. The aim of this document is to document the existing protocol specification as deployed, to encourage interoperability among implementations, and to introduce new concepts that can potentially be further improved to address particular problems with the current Internet architecture. This document is not an Internet Standards Track specification; it is published for informational purposes.
201201

202202
==Note (to be removed before publication): this document, together with the other components {{I-D.dekater-scion-pki}} and {{I-D.dekater-scion-controlplane}}, deprecates {{I-D.dekater-panrg-scion-overview}}. This document provides an extensive description of how the SCION Data Plane is implemented in order to facilitate understanding, but could potentially be split into separate documents if considered suitable for submission to the Internet Standards Process.==
203203

@@ -291,6 +291,7 @@ SCION emphasizes this separation as it is used exclusively for inter-domain forw
291291

292292
A complete SCION address is composed of the <ISD, AS, endpoint address> 3-tuple. The ISD-AS part is used for inter-domain routing. The endpoint address part is only used for intra-domain forwarding at the source and destination ASes. This implies that endpoint addresses are only required to be globally unique within each SCION AS. This means, for example, that an endpoint running a SCION stack using a {{RFC1918}} could directly communicate with another SCION endpoint using a {{RFC1918}} endpoint address in a different SCION AS.
293293

294+
The data transmission order for SCION is the same as for IPv6 as defined in Introduction of {{RFC8200}}.
294295

295296
### Intra-Domain Forwarding Process
296297

0 commit comments

Comments
 (0)