Offering a Multicast Delivery Service in a Programmable Secure IP VPN Environment Lina ALCHAAL

Vincent ROCA

Michel HABERT

Netcelo S.A., Echirolles INRIA Rhone-Alpes, Planete ˆ ` project, France [email protected]

INRIA Rhone-Alpes, Planete ˆ ` project, France [email protected]

Netcelo S.A., Echirolles France [email protected]

ABSTRACT


        
!"#" "$%%"$%&'  %( *)+&,-. /0 132+"   *%456 "   &3 & 3"1 738 3' ),&% 313, "69:
%";0 ?$ 6 1@ %A3 '  ,% *, ( v33 -, %e " 33&$3%-{333# 31  3+ "v /L$1 #133"69g
,&"]D1EGF"], X 3 3  &%3' " 1v 31 3' 333"$"s"$-+"$ 3"` /!3"  -%, "$/!%3" 9z
3   @3& $, -(
 3@ >^M! &3% \  +3"Q4^QD1EGF" w%xŒy‘E+ '’ 'E33& Y-}~€NSE"$3,{ /T“h B-37Œet&3% .E  ' Md~^“hŒLEs 9 NSE"$3
0 "
1 /I ,>  3"4gJ3 % = /I 33/ $-+  6 
%"$3 I+33"! /* >IM3"f e}
>} !&%/( f  M&@MX&+ B@" 3 I,3O@  4K f4^&%-=" 33& XN3EAD1EGF~€D  &0 EG I  LFK3Y zd3,I+'  13,6Z6 
3f
0 7
13+ 6  -,9ONY`%"`
3 34^  OM' 3,I3+ 0 s   
Q
0 h/30   "h4^ 8B
K !+   %3/ &L%V
*b@‚>ƒf„…Nƒ†‡[ + @  &V4^L" 6 3,9!P* 3%3Iv
0 s&f   
{33 "@ +-33/" Z {0   3&Y  4^†
h/3%6-+13,d4" 3 I,%33"†3113 3Y 3+I,%$13+ "  3),&%   
 
=%3I3z40" 33& Y-,9

P* " "$&11
0 Q XD1EGFR" 3 I,%3{ 6I+/3Q~^OD1EGF?‚Es"  3" " L4†
LD{EF—/3>-,13+{ /@ ]  31,KI,%/3
0 33 "v
O3™ &6 Br /=%3%4^M @  T /
0 K 3MB3-=3™ & 3"K
X3/ X/3I+3 4I,/3L, \, " ' %-Q6 O%;
]  `
O  &;" 33&$%Y-e@ 0  313+ " 33 " B
] ttM%-f3&/` &
3,B,  %= /= 333" "03,  +& %"$Q
X3 -,  6 
X3-; 0  313,>Z'

30 3/[%4^6 "   &3 &$+X TJ"6‘z#v/%"$3&" " 1" 33 %7Œs
%16  %"s4 6 /B0 L& %, "$d$& %

  ,3%"L. " 33& !N3E(D1EGF83+I, 13+69QNYV" 33 %.ž `/36 %z& "6 Z+
`NDLa`bE$B,39tN=" 33 %=Ÿ = I=" 1="  
,M(% "{%133,6  %]9\‡]%0 %-V# +  ,/&3` 3Y  3/=$+"X /=`33&/,9 2.

LIMITATIONS OF TRADITIONAL MULTICAST ROUTING PROTOCOLS IN SECURE IP VPN ENVIRONMENTS

P*O™ "$v  /@ !/3>-VEGN3b1'‚b ~B‚60  " =b,/,vw ŸyZt  313%3,{L& %, "${ &  A  ,345{" ]  " ;  &"6Zs% ŽNSE.D1EGF3,I+ 13,>9…P*@&" 3/[¡  ( /@B 3/@ !/3>-=% 
`D{EF§3/ O/3I+33"6ZuY9 ,9dB
`
"$ "$& 1NSE"$3`=
 3&"$B13]3Y z9gP*3I30"$&3333/3/L450"$3I36 , , " "6‘ ¨ 
‚>33& Y- ‰ " "$+3  %"Q~ ‚ ‰  0  313+`13
' " ©4L
*‡$3+‚ªPc Rw¥yfN3EG" 3*1%313,> B "3&  3, %-V%-V/3™3/r4^MX&%, "$; // 3" " 3"@wxŸy9 
"L%";  3«"$%3* X&% , " L0 3>Zt31%

3
3†45  7 , B{s4^ EGN3b1'‚b~^4^†3'   3{3MX&+ BT31333-r
0 T] BI;X&% ' , "$L & % ‘e ,-7"$%& %\0 " 3/\V 6 1!/&%, '   s
3/ M"s'’" &  %"$% -X3" "s313,†
0  d" & %MO] " 3/LLB /&%,  %LO
3 3 '  ( "`0  %I1L& %, "$f &B =  ,3%"`/G9Oh
 " L 3  e, @,  %Y-; 3@‘#
%"K"{ `/%$3K3"$3)+&33X4 
`%6331L&,  %=3133-,9 h
X" , Y %%-= 3H+ @= // 3"$" 3/@,-= >I," %M'  r" 17"  3"V~^3B
3V ;" &" 3e4O
7 333I+ r"$% 3"e   &"  3/;
 /'’0  Y-Q"$% 3"6v "vD1E†´]F§,/3"6ZuY9 ,9d+/3"
0  , e3 4^ 8 6 1f4^ O  /% 9tƒf 
eD{E†´]F}+/f3 "  {{D1EGF"4^B
O" LL& %, "$v  &]ZuL%3%&/%


v" 3/% O"$%  /7 
sv%3&/ Ovs1 v 3' 33%I, !" B3" 9 ‰
36  
+-=4d%, 3 333 3/@D1EGF"%"
,&" 3 ,  3/Q45#, 
QL&% %, " #  &0ZM+ /% X ; v/%"$  %& % 4
3Y ,%  /; 1 KB
"$]4D1Es´]F(,/3"69zh
 " ,  %Y-14g
" & %!"3 , " 3/!
%33 = h3'  6 %š33/\~  &/=
`DF1˜`„t 0  313,>9 4.

IMPLEMENTATION ASPECTS

P*@
] BI%313+ 3/c
NYDXa`bE[$B,31 /c%, 3'

6  3/1%†% `E†„ª“t%,&2L3/ /3I,%3X~ ‚>3™ & Xž 9gP*&" 

!,/™3/(I3 "$%(4KB
=‡ 3,‚ªPc TN3EG" 3=%1313+6 ' Bw%¥yZ6
1¢Mìí>î £+¡u¤h%1313+6  14 %
LX&B, " K30 3/D1EF—%"$>Z"K0 " 3/
 ‚˜ ‰ EC~ ‚>%17˜g^33 ‰ %,  %M…EG  +3#3A"$3 I+3 B3
 -h
%
*J$"` >^Q /I ,6  3"`* 3 1"`4#%' B3 36 %%Y-Q" &"K7+ 
3/ X/3I,%3,‘L L&B, " 0 3s31% O4^ M * 3 %I" & 3v!B
v+,  " % e%"™ " X+ 3 33 3/r+-A
A|hE‡C0 M3L™% 3;wðy# &' % e
3/ X/3I+3; /"$3+fBe
XNDLaOb@EV/0 3109 NYDLaOb@EA%,,"4^1 fD1EGFœ3+  -=
0 @  
3"
L/3"$B0 ' B{L&% , " f // 3"$"s O/33%/vh
3
3ss†
v] 3 "
&/AI,%/36Á "K3 zZ{  b@EG“h‚>'’30 3/=%456 "   &3 & ,9 ‡]%] %-,Z&!   
*"
0  3"`" 1"$%1Y   %3"`%
7
 „03+ 6 %š33/—b&% , " A~B„b@Q  G 
—w%xxy9.NY—„b@Zd
 /0 6 4^ O  /  /=3,  g45&3 %"X  `3" 3] 6  3/0Z /7
3+  d0  K"f33,B %š33/7%7/"  3K3,  ]33' 13+ " 9Qh
!3,  s333, "=  *  6  3/V%. Y#'”3I3
36  
,-eh
%( & 1&"" -,"  3"1 /r $O&" 3/; {"$3 &L& %, "$]  33"69zNYXM&v   
 +Z6
#3,  u0  ]" 33,B %š33/!Q
DF1˜`„9h
 >^#/Jº”»d¼MÞûSZ 0  3"X‹ïüïïMZ  09zŒ–––9 w%ŒyfƒK9´]" 3\ /e®{9g´]3+
, 369gýOþs
ÿ
=ÿ ]ÿsúv¾Zgb 69 xððð9+Nƒ†‡}´]3)+&3"$h45L„013, "6Zz´]‡#„.ŒÖŸG‹9 w%žy!|#9+‡ÞÚÝSº`þsÞ¼MÛS à =ØMÚØ >ÝS×XÝSÚºÿ†Þ¼Mº’¼Sæ¼M Ù þ ;ÿŽÿ†Þ¼ (*) å^Ú + Z F>Iz9gŒ––Gx9+P* !\EG   3" " Z †/6 4^ '”3 4^'’@  M@ '’ '” >2,-+'’––9  2+# "f9 w%¥yf‡ 3,‚ªPc = ,9 %×XÝSÚº”Ø+º”å^¼MÚ¼ßø &ÿ 1 ù 0\ØMÚâQø 2fùAß ¼MÞ zå5Ú3Û (S9,
+  0‘ªªhX9 2," Ÿ Y9 ª4^ 33" ` ]ª9 w%‹y!|#9ga#%33" ]Z ‰ 9,“z0Z  9+•30 30Zza`9 ‰  16  ,Zg / ‰ 9gb %"69 45%»d¼MÞûß ¼MÞ`øBÿ…Ü$Ø+¾$Ý â ]å^Þº’Û,ØMÙzÿ†Þ6å SØ+º”Ý

úÝSº”»†¼MÞûS¾$Z,‡309zŒ–––9+Nƒ†‡}´]3)+&3"$h4^ML„0113+ "6Z ´]‡h„.Œ‹¥Ÿ9 wïyKF19,•1 %)+I," X / ‰ 9+¯`3 L-, %" 9+NY1313+ 

+ 3 3-!32,
]  ,Z+,9+N8  7d¾$Ý>Ú6å (94hÚÚÛ,ØMÙ :ÝæS½MÚå^æØM Ù 0t¼MÚ6ß ÝSÞÝ>ÚæÝSZ  &!Œ––M–9 wðyKD19  3"$\ /\‚9gb1,„h ,9 ‰ " /=] 3™% 36‘ ‰ 3:  
 33 & f45&" 3 '’%3I3z0 3h,  & ,9,NY 7d¾$Ý>Ú;å (.@å^Úº”Ý>< Þ 0z¼+Ú>ß$ÝSÞÝSÚæÝ =ØM Ú >å^?Ý S¼ @0tØMÙäå ß ¼MÞÚå^ØMZ 0  M3"XŒÖðüŒ¥ðZ  09gxððMž9 wx–y{‚9,¯f3,X /\´v9 ‰  ,%" 09 ÝæSÛuÞå5º )A4hÞæS½+å^º”ÝæSº’Û,ÞÝvß ¼MÞ º’½MÝXø Úº’ÝSÞÚÝSºÿ†Þ¼Mº’¼Sæ¼MÙ Z,F>Iz9gxððMï9+NYƒsh‡}´]3),&3" 4^ „013, "6Zz´0‡h„.ŒŸ–xM9 wxxy{‚9,¯f3"$
0 BIA /\‚9gEd &9g„t3, 6 %š33/=L& , " 69+NC  Bº”½ ø ÚEº D@0t¼MÚ6ß ÝSÞÝ>Úæ$ÝX¼+Ú@úÝSº’»d¼MÞûXÿ†Þ¼Mº’¼Sæ¼MÙäA ¾ ”*ø 0túv$ ÿ F GG :¼MÞ¼MÚº’¼ @0tØMÚØ+âMØMZg˜s369zxððð9 wxŒy{²f9+¯`" &69gý#Û,å5Ù âMå^Ú XØMÚ< â ;ØMÚHØ Så^Ú ]å5Þº”ÛuØMÙgÿsÞ;å SØMº’Ý úÝSº”»†¼MÞûS¾$9  
=Pc%3 - Iœ‚>"vNY,9Z+N3‚|tF –'’Ÿ‹x'ŒðÖŒ¥'’ŸZgxðMðï9 wxžy{²f9g˜"X /  9g²f9g„0%3 3)z9 JSÝSÞ Så5ÝS»Ž¼@ ß ;Û,Ù五å5æ$ØM¾ºså5Ú dÿ†úv¾Z+‡I3 I,'’––9  2,# "K9 wxŸy ‰ 9z´0,/  &3š,Z  9ga`   3YZ  9,¯! 6 " Zg /\´v9gEå5¾$º’ØMÚæ$Ý Ý$æSº’¼Me Þ =ÛuÙ º’å^æØM¾$º †¼MÛuº”å5dÚ ÿ†Þ¼Mº’¼Sæ¼MÙ Z,F>Iz9gxðïMï9g´]‡#„ x–‹ÖMZg|#|zF›‚>X„Zg‚>6 4^ /=¬%I3 "$%-+9