The security of the MPLS protocol.
Security in MPLS and MPLS-VPN networks is maintained using a combination of the BGP protocol and an IP address resolution system.
VPN security is provided at the edge of the infrastructure, where packets received from the user are sent to the desired VPN network. In the backbone, the data of individual VPN networks is moved separately. This is achieved by adding a stack of MPLS tags before the IP header of the packet.
It is possible to increase the degree of security of an MPLS VPN using traditional means, for example, using authentication and encryption tools installed in customer networks. The MPLS VPN service can be easily integrated with other IP services, for example, providing Internet access to VPN users with firewall protection. The virtual router mechanism completely isolates the MPLS VPN routing tables from the global routing tables, which ensures the necessary levels of reliability and scalability of MPLS VPN solutions.
MPLS and MPLS VPN technology does not provide security through authentication or encryption. In other words, information is transmitted over the MPLS network using virtual channels in the clear. At the same time, the traffic of users entering different domains is isolated from each other by adding unique tags. Thus, attempts to intercept a packet or traffic flow cannot lead to an intruder breaking into the VPN. In the MRLS VPN network, a data packet entering the backbone is associated with a specific VPN network based on which interface the packet arrived at the router. Then the IP address is compared with the transmission table of a specific VPN. The routes assigned in the table relate only to the VN of the incoming packet. Therefore, the incoming interface defines a set of possible outgoing interfaces. This feature also prevents unauthorized data from entering the VPN network and unauthorized data from being transmitted from it.
Oleg Petukhov, lawyer in the field of international law and personal data protection, information security specialist security, protection of information and personal data.
Telegram channel: https://t.me/protectioninformation
Telegram Group: https://t.me/informationprotection1
Website: https://legascom.ru
Email: online@legascom.ru
#informationprotection #informationsecurity
