Building next generation, open, secure, reliable and scalable experimental IP networks

The emerging next generation of routers needs to support security and performance (QoS). To achieve this, the control plane has to be separated from data plane. This not only protects the control plane from attacks originating from the data plane, but also helps build a carrier-grade IP network with strong security, high reliability and availability, better QoS and scalability. In this paper an experimental IP network is proposed while a number of conventional PCs are running a variety of open source and in-house design router software, and interconnected by means of fast Ethernet point-to-point links. It is used to test the innovative network security research ideas and routing protocols, and implement international standards. This prototype can generate useful design guidelines for allowing smooth migration from today's best effort IP to secure, reliable, scalable next generation IP with high performance.