# SR/MPLS Security Framework

DevFeed: [SR/MPLS Security Framework](<https://devfeed.tech/articles/sr-mpls-security-framework-10992.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2024/04/sr-mpls-security-framework/>)

Published: 2024-04-09T07:10:00Z

Content type: article

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [SR-MPLS](<https://devfeed.tech/topics/sr-mpls.md>), [Security](<https://devfeed.tech/topics/security.md>), [networking](<https://devfeed.tech/topics/networking.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [hardening](<https://devfeed.tech/tags/hardening.md>), [routing](<https://devfeed.tech/tags/routing.md>), [security](<https://devfeed.tech/tags/security.md>), [sr-mpls](<https://devfeed.tech/tags/sr-mpls.md>)

## AI overview

This article explains that SR/MPLS security recommendations are largely the same as those for traditional MPLS because their core data-plane operation is similar. It recommends isolating routing protocols from customer-facing interfaces, protecting the transport backbone, using encryption and routing protocol authentication where appropriate, and hardening PE and P devices. It points to RFC 5920 and a related MPLS and VPN Architectures book for further detail.

## Source excerpt

A long-time friend sent me this question: I would like your advice or a reference to a security framework I must consider when building a green field backbone in SR/MPLS. Before going into the details, keep in mind that the core SR/MPLS functionality is not much different than the traditional MPLS: Read more ...