A Connection Oriented Internet Architecture for Restricting Reachability

To aid security in the Internet, we propose a new connection oriented architecture to restrict reachability in the Internet to only those end hosts that explicitly request it. We first describe the various components of our architecture. Next, using qualitative arguments, and some preliminary computations, we show the benefits of our architecture. We also present viable strategies for minimizing connection state at routers, and discuss relevant security issues.