SCION

Path Control And Multipath Routing

SCION enables the sender to determine the routing of data packets. With the multipath feature, senders can choose multiple paths simultaneously for data transmission, enhancing network resilience, efficiency, and reliability. Even if one path fails, data can instantly switch to another route, maintaining uninterrupted service.

Isolation Domains

SCION's architecture uses Isolation Domains (ISD) to group Autonomous Systems (AS) for secure and reliable network communication. Each AS requires a specific certificate to join an ISD, ensuring network access and routing are strictly regulated, with enforced policies maintaining secure and efficient data flow. This also helps contain the effects of routing attacks and misconfiguration, improving overall network resilience.

Cryptographic Path Visualization And Authentication

SCION allows users to visualize and authenticate their data's route using cryptographic methods. This explicit trust mechanism ensures secure and transparent data transmission across the network. Routes in SCION are cryptographically verified, ensuring the authenticity and integrity of routing information and protecting against route hijacking attacks.

Ip-In-Scion Tunneling

SCION uses an IP/UDP underlay for packet transmission, resulting in an overhead of 24 bytes for IPv4 and 48 bytes for IPv6. The SCION protocol defines the SCION MTU as the underlay MTU minus the overhead bytes, allowing for IP traffic tunneling through the SCION network.

Trust Root Configuration (Trc)

For a host within an AS to obtain paths to a remote ISD, it must have the valid Trust Root Configuration (TRC) for that ISD and any ISDs it needs to traverse to reach the destination. The TRC of an ISD defines the trusted entities within an ISD, such as the core ASes and the Certificate Authorities.