Solving the ingress filtering issue in an IPv6 multihomed home network

Etienne Gallet de Santerre (1) , Samih Jammoul (1) , Laurent Toutain (1)

1 RSM - Département Réseaux, Sécurité et Multimédia

The common practice in the industry to have several connections to the Internet through different service providers is called multihoming. Multihoming increases the capabilities and the efficiency of the Internet connectivity, allowing end-site to benefit from redundancy, traffic engineering and load spreading. Primarily limited to the largest companies, multihoming is attracting more and more enterprises as well as private customers. The fast growth of multihoming demands is facing unresolved technical issues, especially in home networks, which are not specifically administrated. One of them is the ingress filtering policy, implemented by Internet Service Providers to prevent spoofed-address attacks. This security policy discards packets whose source address is not known by the service provider. This article presents an enhanced routing scheme in multihomed IPv6 terminal sites, which allows to deal with the ingress filtering policy in ISP edge routers. In that purpose, we describe a new mechanism for selecting the default route based on the source address of a packet. This proposal solves the ingress filtering issue without implying any changes in Internet Service Providers’ policy or terminal nodes. Additionally, we show that the proposed mechanism is easily deployable and needs only a few changes in terminal site routers.

Mots clés: Multihoming; IPv6; Ingress filtering; Routing; Source address

Domaines: Réseaux et télécommunications [cs.NI]

Etienne Gallet de Santerre, Samih Jammoul, Laurent Toutain. Solving the ingress filtering issue in an IPv6 multihomed home network. ICN' 2010 : 9th International Conference on Networks, Apr 2010, Les Ménuires, France. ⟨hal-00486760⟩