Validating resource isolation between network slices in a mobile network

A router node configured for use in a network having a plurality of interconnected router nodes for routing packets according to segment routing (SR), the interconnected router nodes including a first plurality of router nodes of a first network slice and a second plurality of router nodes of a second network slice, each router node of the first network slice being configured to establish routes based on first path determination criteria associated with a first identifier and each router node of the second network slice being configured to establish routes based on second path determination criteria associated with a second identifier, the router node comprising:

• one or more processors;
• a plurality of network interfaces;
• the one or more processors being configured to validate isolation from network resources in the second network slice by:
• performing a validation procedure with respect to each one of a plurality of forwarding table entries of the router node, at least in part by:
• forwarding a probe message towards a target downstream router node according to a forwarding table entry of the plurality of forwarding table entries, the probe message including the first identifier;
• and
• when a response message is received from a receiving router node associated with the second identifier, which indicates a discrepancy with the first identifier of the router node, identifying a failure of isolation from network resources of the second network slice.

A method comprising:

• at a router node configured for use in a network having a plurality of interconnected router nodes for routing packets according to segment routing (SR), the interconnected router nodes including a first plurality of router nodes of a first network slice and a second plurality of router nodes of a second network slice, each router node of the first network slice being configured to establish routes based on first path determination criteria associated with a first identifier and each router node of the second network slice being configured to establish routes based on second path determination criteria associated with a second identifier, the router node being one of the first plurality of router nodes allocated to the first network slice and configured to validate isolation from network resources of the second network slice by:
• performing a validation procedure at least in part by:
• sending to an upstream router node a loopback probe message which includes a source address directed to a target downstream router node and a destination address directed to a loopback interface of the router node;
• receiving via the loopback interface the loopback probe message which is looped back from the upstream router node, the received loopback probe message including a destination address directed to the target downstream router node;
• making a copy of the received loopback probe message and inserting one or more network resource identifiers in a header of the copy, the one or more network resource identifiers including a queue identification for processing the received loopback probe message;
• and
• verifying whether the queue identification is associated with the first network slice.