Abstract: Various exemplary embodiments relate to a network device configured to hide network topological information, the network device including: a network interface configured to communicate with other devices in a network; a memory; and a processor in communication with the network interface and the memory, the processor configured to: receive a message; identify in the message one or more Attribute Value Pairs (AVPs) with network information; define a local network identity; and evaluate a plurality of messages to determine whether one of a source of the message and a destination of the message are included in the local network identity.