Overlay management protocol for secure routing based on an overlay network

A non-transitory computer-readable medium having stored instructions which when executed by a system causes the system to perform a method for routing within a secure network, the method comprising:

• establishing an overlay domain to control routing between overlay edge routers based on an underlying transport network, wherein said establishing comprises running an overlay management protocol to exchange information within the overlay domain;
• in accordance with the overlay management protocol defining service routes that exist exclusively within the overlay domain wherein each overlay route includes information on at least service availability within the overlay domain;
• and
• selectively using the service routes to control routing between the overlay edge routers;
• wherein the said routing, is through the underlying transport network in a manner in which said overlay routes is shared with the overlay edge routers but not with the underlying transport network via the overlay management protocol.

A controller for a secure network, comprising:

• a processor;
• and
• a memory coupled to the processor, the memory storing instructions which when executed by the processor causes the controller to perform a method for routing comprising:
• establishing an overlay domain to control routing between overlay edge routers based on an underlying transport network, wherein said establishing comprises running an overlay management protocol to exchange information within the overlay domain;
• in accordance with the overlay management protocol defining service routes that exist exclusively within the overlay domain wherein each overlay route includes information on at least service availability within the overlay domain;
• and
• selectively using the service routes to control routing between the overlay edge routers;
• wherein the said routing is through the underlying transport network in a manner in which said overlay routes is shared with the overlay edge routers but not with the underlying transport network via the overlay management protocol.