Multi-layered packet security
View Patent ↗Methods and media for multi-layered packet security control are described. In one embodiment, a header of a packet is modified to include an identifier that identifies a manner in which the packet should be subject to a particular set of a plurality of sets of rules. The particular set of rules dictates how the packet is to be handled. Further, in one embodiment, the packet is communicated to a routing component, and the routing component is configured to reference the identifier to determine which, if any, of the plurality of sets of rules to apply to the packet.
1. One or more non-transitory computer-readable media (“media”) having computer-useable instructions embodied thereon that, when executed by a processor, cause the processor to perform steps for enabling multi-layered packet security, the steps comprising:
modifying, using a first routing component, a header of a packet to include an identifier that identifies a manner in which a second routing component should subject the packet to a particular set of a plurality of sets of rules, wherein the particular set dictates whether the packet is to be forwarded; and
communicating the packet to the second routing component, which is configured to reference the identifier to determine which, if any, of the plurality of sets of rules to apply to the packet, wherein the second routing component also is configured to modify the header of the packet to include an additional identifier that identifies a manner in which the packet should be subject to an additional particular set of an additional plurality of sets of rules, wherein the additional particular set further dictates how the packet is to be handled, and wherein the modified header includes the identifier and the additional identifier.
2. The media of claim 1 , wherein the manner in which the packet should be subject to the particular set of the plurality of sets of rules includes not subjecting the packet to any of the plurality of sets of rules.
3. The media of claim 1 , wherein the particular set of the plurality of sets of rules is unavailable to the second routing component and wherein the second routing component is configured to apply a default set of rules to the packet.
4. The media of claim 1 , wherein a network host modifies the header of the packet and communicates the packet to the first routing component.
5. The media of claim 1 , wherein an edge routing component modifies the header of the packet and communicates the packet to the first routing component.
6. The media of claim 1 , wherein the second routing component advertises a maximum transmission unit less than a maximum packet size allowed by a network on which the second routing component operates, ensuring the header of the packet can be modified to include the additional identifier without exceeding the maximum packet size.
7. A method of enabling multi-layered packet security, the method comprising:
receiving, at a routing component having a plurality of available sets of rules, a packet including an identifier that identifies a manner in which the routing component should subject the packet to a particular set of a plurality of sets of rules, wherein the particular set dictates whether the packet is to be forwarded;
referencing, using the routing component, the identifier to determine which, if any, of the plurality of sets of rules to apply to the packet;
applying, using the routing component, the particular set, if any, of the plurality of sets of rules to the packet, wherein the routing component is configured to modify a header of the packet to include an additional identifier that identifies a manner in which the packet should be subject to an additional particular set of an additional plurality of sets of rules, wherein the additional particular set further dictates how the packet is to be handled, and further wherein the modified header includes the identifier and the additional identifier; and
communicating the packet to a routing component.
8. The method of claim 7 , wherein applying the particular set of the plurality of sets of rules, if any, to the packet includes not subjecting the packet to any of the plurality of sets of rules.
9. The method of claim 7 , wherein applying the particular set of the plurality of sets of rules, if any, to the packet includes:
determining that the particular set of the plurality of sets of rules is unavailable; and
applying a default set of rules to the packet.
10. The method of claim 7 , wherein the packet is received from a network host.
11. The method of claim 7 , wherein the packet is received from a routing component.
12. The method of claim 7 , wherein the routing component advertises a maximum transmission unit less than a maximum packet size allowed by a network on which the routing component operates, ensuring the header of the packet can be modified to include the additional identifier without exceeding the maximum packet size.
13. One or more non-transitory computer-readable media (“media”) having computer-usable instructions embodied thereon that, when executed by a processor, cause the processor to perform steps for enabling multi-layered packet security, the method comprising:
receiving, at a first routing component, a packet including a first identifier that identifies a first manner in which the first routing component should subject the packet to a first particular set of a first plurality of sets of rules, wherein the first particular set dictates how the packet is to be handled;
referencing, using the first routing component, the first identifier to determine which, if any, of the first plurality of sets of rules to apply to the packet;
applying, using the first routing component, the first particular set of the first plurality of sets of rules, if any, to the packet;
modifying, using the first routing component, a header of the packet to include, in addition to the first identifier, a second identifier that identifies a second manner in which a second routing component should subject the packet to a second particular set of a second plurality of sets of rules, wherein the second particular set further dictates how the packet is to be handled; and
communicating, using the first routing component, the packet to the second routing component, wherein the second routing component is configured to reference the second identifier to determine which, if any, of the second plurality of sets of rules to apply to the packet.
14. The media of claim 13 , wherein applying the first particular set of the first plurality of sets of rules, if any, to the packet includes not subjecting the packet to any of the first plurality of sets of rules.
15. The media of claim 13 , wherein applying the first particular set of the first plurality of sets of rules, if any, to the packet includes:
determining that the first particular set of the first plurality of sets of rules is unavailable; and
applying a default set of rules to the packet.
16. The media of claim 13 , wherein the second routing component is configured to modify the header of the packet to include a third identifier that identifies a third manner in which the packet should be subject to a third particular set of a third plurality of sets of rules, wherein the third particular set further dictates how the packet is to be handled.
17. The media of claim 16 , wherein the second routing component advertises a maximum transmission unit less than a maximum packet size allowed by a network on which the second routing component operates, ensuring the header of the packet can be modified to include the third identifier without exceeding the maximum packet size.