Integration of Multiple IP Domains in Low-Cost and Security-Oriented Small Networks

Abstract

This paper has two main aims. The first is to reduce hardware management-related issues when working with complex networks, such as a lack of flexibility and scalability with regard to global configuration changes. The second is to create a communication library that provides programmable network function virtualization, helping to achieve the first aim. Specifically, we target low-cost, security-oriented networks that use broadband routers as L3 switches. When such networks have multiple IP domains between the external gateway and internal networks, domains that are lower in the hierarchy become more secure, but at the cost of flexibility. Our proposed system architecture aims to increase communication flexibility in such networks without requiring complex encapsulation and achieves this goal via a practical method that does not change the packet size. Finally, we conduct tests using an experimental implementation of the system, demonstrating its scalability.