Abstract: An approach for providing network security is disclosed. The system includes a first set of routing devices (e.g., routers, routing switches, etc.) operating redundantly within an autonomous system. The system also includes a second set of routing devices that are configured for redundant operation within the autonomous system and to communicate with another autonomous system. The sets of routing devices provide a communication path between the autonomous systems for transport of untrusted packets and trusted packets. Further, the system includes a security node (i.e., weighstation) configured to communicate with the sets of routing devices and to only receive the untrusted packets, wherein the untrusted packets are selectively forwarded to the other autonomous system.

Abstract: An approach for providing network security is disclosed. The system includes a first set of routing devices (e.g., routers, routing switches, etc.) operating redundantly within an autonomous system. The system also includes a second set of routing devices that are configured for redundant operation within the autonomous system and to communicate with another autonomous system. The sets of routing devices provide a communication path between the autonomous systems for transport of untrusted packets and trusted packets. Further, the system includes a security node (i.e., weighstation) configured to communicate with the sets of routing devices and to only receive the untrusted packets, wherein the untrusted packets are selectively forwarded to the other autonomous system.