Router policy system
AssigneeVerizon Patent and Licensing Inc.
InventorsMark D. Carney, Harold J. Schiller, Dante J. Pacella
Life of this patent
Estimating the term…
Abstract
A router policy server may include a policy engine. The policy engine may receive, from a first router, a request for whether to accept or reject routing information received from a second router and determine whether a policy, associated with the second router, allows the second router to advertise the routing information. The policy engine may further instruct the first router to accept the routing information when the policy allows the second router to advertise the routing information and may instruct the first router to reject the routing information when the policy does not allow the second router to advertise the routing information or when no policy exists for the second router in association with the policy engine.
Claims20
A method comprising:
- managing, by a computing device, a routing table for a trusted network;
- receiving, by the computing device, a request for a first routing update from a first router device;
- determining, by the computing device, that the first router device corresponds to a trusted router device;
- determining, by the computing device, a policy associated with the first router device;
- selecting, by the computing device, routing information based on the determined policy;
- providing, by the computing device, the selected routing information to the first router device;
- receiving, by the computing device, a request for a second routing update from a second router device;
- determining, by the computing device, that the second router device corresponds to an untrusted router;
- and
- providing, by the computing device, partial information from the routing table to the second router device, based on determining that the router device corresponds to an untrusted router, wherein the partial information corresponds to less information than the selected routing information provided to the trusted router.
A computing device comprising:
- a memory storing instructions executable by a processor;
- and
- a processor configured to execute the instructions to:
- manage a routing table for a trusted network;
- receive a request for a first routing update from a first router device;
- determine that the first router device corresponds to a trusted router device;
- determine a policy associated with the first router device;
- select routing information based on the determined policy;
- provide the selected routing information to the first router device;
- receive a request for a second routing update from a second router device;
- determine that the second router device corresponds to an untrusted router;
- and
- provide partial information from the routing table to the second router device, based on determining that the router device corresponds to an untrusted router, wherein the partial information corresponds to less information than the selected routing information provided to the trusted router.
A non-transitory computer-readable memory device storing instructions executable by one or more processors, the non-transitory computer-readable memory device comprising:
- one or more instructions to manage a routing table for a trusted network;
- one or more instructions to receive a request for a first routing update from a first router device;
- one or more instructions to determine that the first router device corresponds to a trusted router device;
- one or more instructions to determine a policy associated with the first router device;
- one or more instructions to select routing information based on the determined policy;
- one or more instructions to provide the selected routing information to the first router device;
- one or more instructions to receive a request for a second routing update from a second router device;
- one or more instructions to determine that the second router device corresponds to an untrusted router;
- and
- one or more instructions to provide partial information from the routing table to the second router device, based on determining that the router device corresponds to an untrusted router, wherein the partial information corresponds to less information than the selected routing information provided to the trusted router.
Dependencies are inferred from the claim text.