Policy enforcement in stub autonomous domains

Abstract

Interconnection across administrative boundaries prompts the need for comprehensive policy enforcement (i.e., access control) with respect to inter-domain packet traffic. Due to the nature of the communication services they provide, stub and transit domains require different mechanisms for policing inter-domain traffic. This paper addresses the design of a policy enforcement mechanism geared specifically towards stub domains. With the aid of some basic concepts borrowed from Visa protocol[5], a much more powerful mechanism is developed and analyzed. Protocol implementation and experimental results are discussed.