<?xml version="1.0" encoding="UTF-8"?>
  <?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
  <!-- generated by https://github.com/cabo/kramdown-rfc version 1.7.39 (Ruby 3.3.8) -->


<!DOCTYPE rfc  [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">

]>


<rfc ipr="trust200902" docName="draft-yang-rtgwg-grc-based-routing-00" category="info" submissionType="IETF" xml:lang="en">
  <front>
    <title abbrev="GRC Based Routing">Geographic Based Dynamic Routing in LEO Satellite Networks</title>

    <author initials="F." surname="Yang" fullname="Feng Yang">
      <organization>China Mobile</organization>
      <address>
        <postal>
          <country>CN</country>
        </postal>
        <email>yangfeng@chinamobile.com</email>
      </address>
    </author>
    <author initials="P." surname="Du" fullname="Ping Du">
      <organization>China Satellite Network Group</organization>
      <address>
        <postal>
          <country>CN</country>
        </postal>
        <email>pingdu@ustc.edu</email>
      </address>
    </author>
    <author initials="M." surname="Xiao" fullname="Min Xiao">
      <organization>ZTE</organization>
      <address>
        <postal>
          <country>CN</country>
        </postal>
        <email>xiao.min2@zte.com.cn</email>
      </address>
    </author>

    <date year="2026" month="June" day="26"/>

    <area>RTG</area>
    <workgroup>rtgwg</workgroup>
    <keyword>LEO, satellite, routing, geographic coding, H3, dynamic topology, ephemeris, IP addressing</keyword>

    <abstract>


<?line 58?>

<t>This document proposes a dynamic routing mechanism for Low Earth Orbit(LEO) satellite networks based on geographic region coding. By decoupling IP addressing from physical location, the mechanism uses hierarchical geographic grid codes (inspired by Uber's H3 spatial index) as temporary IP addresses for satellites. Routing decisions are made based on the relative geographic position encoded in the destination address, rather than traditional prefix-based IP routing. Satellite ephemeris data is leveraged to pre-compute routing tables for discrete time slices, eliminating the need for real-time link-state flooding and enabling stable, predictable routing in highly dynamic satellite topologies.</t>



    </abstract>



  </front>

  <middle>


<?line 62?>

<section anchor="introduction"><name>Introduction</name>

<section anchor="background"><name>Background</name>

<t>Low Earth Orbit (LEO) satellite constellations, exemplified by Starlink <xref target="LEO"/> and OneWeb, are rapidly transforming global Internet access. Compared to traditional Geostationary Earth Orbit (GEO) satellites, LEO satellites offer significantly lower transmission delay (20-50 ms), higher bandwidth efficiency, and lower launch costs.</t>

<t>However, LEO satellite networks present unique technical challenges, most notably the highly dynamic nature of network topology. Satellites in LEO constellations travel at orbital velocities of approximately 7.5-7.8 km/s, completing an orbit in roughly 90 minutes. Each satellite typically maintains four inter-satellite links (ISLs): two intra-plane links (forward and backward along the same orbital plane) and two inter-plane links (left and right to adjacent orbital planes). Intra-plane ISLs remain relatively stable due to minimal relative motion between co-orbital satellites. In contrast, inter-plane ISLs face continuous topology changes because adjacent orbital planes are non-parallel, and satellites can only maintain stable inter-plane connections with co-directional neighboring satellites for limited time periods.</t>

</section>
<section anchor="problem-statement"><name>Problem Statement</name>

<t>The extreme dynamicity of LEO satellite networks renders traditional routing protocols fundamentally unsuitable:</t>

<t><list style="numbers" type="1">
  <t>Topology Dynamicity Breaks Traditional Routing  <vspace blankLines='1'/>
Traditional routing protocols such as OSPF <xref target="RFC2328"/>, IS-IS <xref target="RFC1195"/>, and BGP <xref target="RFC4271"/> were designed for static or low-dynamicity terrestrial networks. Their operational model relies on periodic or event-triggered synchronization of routing information across the entire network. In LEO satellite networks, this approach fails catastrophically:  <list style="symbols">
      <t>Massive state synchronization overhead: Frequent topology changes trigger continuous link-state flooding, consuming enormous bandwidth and processing resources.</t>
      <t>Convergence failure: With handovers occurring every 11-15 seconds and network scales reaching tens of thousands of satellites, traditional protocols cannot converge within the interval between topology changes. The network remains in a perpetual state of re-convergence.</t>
      <t>Routing loops and black holes: Rapid topology changes cause routing inconsistencies, leading to transient loops and packet loss.</t>
      <t>Resource exhaustion: Satellites have limited computational power, memory, and bandwidth. Processing hundreds of thousands of terrestrial routes while simultaneously managing constant topology updates exhausts these scarce resources.</t>
    </list></t>
  <t>Fixed IP Addressing Conflicts with Dynamic Topology  <vspace blankLines='1'/>
Traditional IP addressing binds prefixes to geographic regions. In LEO networks, the same geographic area is served by different satellites at different times. Using fixed IP prefixes would require updating prefix bindings across the entire network every 15 seconds, which is operationally infeasible.</t>
  <t>Predictable Motion Is Underutilized  <vspace blankLines='1'/>
Although satellite topology is highly dynamic, satellite motion follows entirely predictable orbital mechanics. Existing routing approaches fail to exploit this determinism, instead using stochastic methods designed for uncertain environments.</t>
  <t>Terrestrial Route Injection Overwhelms Satellites  <vspace blankLines='1'/>
The terrestrial Internet contains hundreds of thousands of BGP prefixes. Injecting these into the satellite network would cause each satellite to maintain massive routing tables, consume bandwidth for route synchronization, and exhaust onboard resources. Satellites would spend more resources learning routes than forwarding traffic.</t>
</list></t>

</section>
<section anchor="objectives"><name>Objectives</name>

<t>The proposed mechanism aims to:</t>

<t><list style="numbers" type="1">
  <t>Decouple addressing from physical location to hide satellite mobility from the routing system.</t>
  <t>Eliminate the need for network-wide routing state synchronization.</t>
  <t>Reduce onboard computational and memory requirements.</t>
  <t>Leverage predictable satellite ephemeris for pre-computed, time-sliced routing tables.</t>
  <t>Enable seamless integration between the dynamic satellite segment and the static terrestrial Internet.</t>
</list></t>

</section>
<section anchor="requirements-language"><name>Requirements Language</name>

<t>The key words "<bcp14>MUST</bcp14>", "<bcp14>MUST NOT</bcp14>", "<bcp14>REQUIRED</bcp14>", "<bcp14>SHALL</bcp14>", "<bcp14>SHALL
NOT</bcp14>", "<bcp14>SHOULD</bcp14>", "<bcp14>SHOULD NOT</bcp14>", "<bcp14>RECOMMENDED</bcp14>", "<bcp14>NOT RECOMMENDED</bcp14>",
"<bcp14>MAY</bcp14>", and "<bcp14>OPTIONAL</bcp14>" in this document are to be interpreted as
described in BCP 14 <xref target="RFC2119"/> <xref target="RFC8174"/> when, and only when, they
appear in all capitals, as shown here.</t>

<?line -18?>

</section>
</section>
<section anchor="terminology"><name>Terminology</name>

<t>This document uses the following additional terms:</t>

<t><list style="symbols">
  <t>DEV (Device): The user devices (e.g., laptop).</t>
  <t>Ephemeris: Precise orbital parameters that define a satellite's position as a function of time.</t>
  <t>GNSS: Global Navigation Satellite System.</t>
  <t>GRC (Geographic Region Code): A hierarchical spatial index code representing a geographic area on Earth's surface.</t>
  <t>GS (Ground Station): The satellite operator receiver.</t>
  <t>WR (Wifi Router):</t>
  <t>Intra-plane ISL: ISL between satellites in the same orbital plane.</t>
  <t>Inter-plane ISL: ISL between satellites in adjacent orbital planes.</t>
  <t>ISL (Inter-satellite link):</t>
  <t>PoP (Point of Presence):</t>
  <t>Segmented Longest Match: A modified longest prefix matching algorithm that operates on fixed-length segments rather than arbitrary prefix lengths.</t>
  <t>Time Slice: A discrete time interval during which the satellite topology is considered stable for routing purposes.</t>
  <t>UT (User Terminal): The user satellite receiver (e.g., Starlink terminal UT).</t>
</list></t>

</section>
<section anchor="architecture-overview"><name>Architecture Overview</name>

<section anchor="network-segmentation"><name>Network Segmentation</name>

<t>The overall architecture includes UT, user WR, UT, inter-satellite links, GS and PoP that connect satellite networks to the terrestrial Internet. Due to the high relative velocity between satellites and ground infrastructure, frequent handovers are required. For example, Starlink performs beam switching approximately every 15 seconds.</t>

<figure anchor="arch" title="Reference architecture"><artwork align="center" type="ascii-art" name="Architecture"><![CDATA[
+---+   +---+   +--+   +---+     +---+   +--+   +---+   +----+
|DEV|<->|WR |<->|UT|<->|LEO|<--->|LEO|<->|GS|<->|PoP|<->|INET|
|   |   |   |   |  |   |Sat|     |Sat|   |  |   |   |   |    |
+---+   +---+   +--+   +---+     +---+   +--+   +---+   +----+
  ^               ^                        ^               ^
  |<-Terrestrial->|<----- Satellite -----> |<-Terrestrial->|
  |    Segment    |        Segment         |    Segment    |

- INET: Internet
]]></artwork></figure>

<t>The end-to-end network is logically divided into two segments:</t>

<t>Terrestrial Segment: From the DEV to the UT, and from the GS to the PoP and beyond. This segment uses traditional IP prefix-based routing (IPv4 <xref target="RFC791"/> or IPv6 <xref target="RFC8200"/>).</t>

<t>Satellite Segment: From the UT through the inter-satellite network to the GS. This segment uses geographic region coding for IP address, decoupling the destination address from the current physical location of the serving satellite. It is supposed the user traffic will be encapsulated in tunnel in this proposal.</t>

</section>
<section anchor="key-design-principles"><name>Key Design Principles</name>

<t><list style="numbers" type="1">
  <t>Address-Satellite Decoupling: the address of satellite is not fixed, but periodically changed per geographic region coding.</t>
  <t>Predictive Routing: Routing tables are pre-computed using satellite ephemeris data for each time slice, eliminating runtime route computation and flooding.</t>
  <t>Localized State: Each satellite only needs to know connectivity information for its own and adjacent orbital planes, not the entire network topology.</t>
  <t>Directional Forwarding: Routing decisions resolve to one of six directions: North, South, East, West, Down (to ground), or Up (to upper level shell).</t>
  <t>Centralized Route Computation: A ground control unit centrally computes time-sliced routing tables using global constellation ephemeris and distributes validated routing tables to satellites, reducing onboard computation and ensuring routing consistency.</t>
</list></t>

</section>
</section>
<section anchor="geographic-region-coding"><name>Geographic Region Coding</name>

<section anchor="hierarchical-grid-partitioning"><name>Hierarchical Grid Partitioning</name>

<t>The Earth's surface is partitioned into a hierarchical grid system. This document uses the H3 spatial index <xref target="H3"/> as a reference model, but other hierarchical geospatial indexing systems <bcp14>MAY</bcp14> be used.</t>

<t>The H3 system partitions the globe into 122 base (Level-0) hexagonal cells. Each Level-0 cell is subdivided into 7 Level-1 cells, each Level-1 cell into 7 Level-2 cells, and so on. This yields:</t>

<t><list style="symbols">
  <t>Level 0:                     122 regions</t>
  <t>Level 1: 122 x 7 =           854 regions</t>
  <t>Level 2: 122 x 7^2 =       5,978 regions</t>
  <t>Level 3: 122 x 7^3 =      41,846 regions</t>
  <t>Level 4: 122 x 7^4 =     292,922 regions</t>
  <t>Level 5: 122 x 7^5 =   2,050,454 regions</t>
  <t>Level 6: 122 x 7^6 =  14,353,178 regions</t>
</list></t>

<t>At Level 6, the smallest region has an area of 36 square kilometer, providing sufficient granularity for LEO satellite routing. In reality, make sure each cell has one satellite is the finest granularity. According to this address allocation schema, the satellite will have dynamic address and UT/GS will have fixed address.</t>

</section>
<section anchor="geographic-region-code-grc-format"><name>Geographic Region Code (GRC) Format</name>

<t>The GRC is encoded as a 32-bit value compatible with IPv4 addressing, enabling reuse of existing IPv4 forwarding hardware and software with minimal modifications. In case of IPv6, it can also be easily fit into 128 bits address.</t>

<figure anchor="region" title="Geographic Region Code"><artwork align="center" type="ascii-art" name="region"><![CDATA[
 0               1               2               3
 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Shell |   Level 0   |  L1 |  L2 |  L3 |  L4 |  L5 |  L6 |  IF |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

The 32-bit structure is organized as follows:
- Bits 0-3 (4 bits): Satellite shell index (0-15).
- Bits 4-10 (7 bits): Level-0 region index (0-121).
- Bits 11-13 (3 bits): Level-1 region index (0-6).
- Bits 14-16 (3 bits): Level-2 region index (0-6).
- Bits 17-19 (3 bits): Level-3 region index (0-6).
- Bits 20-22 (3 bits): Level-4 region index (0-6).
- Bits 23-25 (3 bits): Level-5 region index (0-6).
- Bits 26-28 (3 bits): Level-6 region index (0-6).
- Bits 29-31 (3 bits): Interface index (0-5) supports 6 directions.

**Note**: The encoding above is illustrative. Implementations MAY
          use alternative bit allocations that preserve the 
          hierarchical property while fitting within 32 bits.
]]></artwork></figure>

</section>
<section anchor="segmented-longest-match"><name>Segmented Longest Match</name>

<t>Traditional IP routing uses longest prefix match with arbitrary prefix lengths (0-32 bits for IPv4). For GRC-based routing, a segmented longest match algorithm is used:</t>

<t><list style="symbols">
  <t>Match boundaries are fixed at specific bit positions corresponding to hierarchy levels: 11, 14, 17, 20, 23, 26, 29, and 32 bits.</t>
  <t>A routing table lookup attempts to match the destination GRC at each of these fixed lengths, starting from the longest (most specific) and falling back to shorter (less specific) matches.</t>
  <t>This approach is compatible with existing trie-based or TCAM-based forwarding hardware without modifications.</t>
</list></t>

</section>
</section>
<section anchor="satellite-address-binding"><name>Satellite Address Binding</name>

<section anchor="dynamic-address-assignment"><name>Dynamic Address Assignment</name>

<t>Satellites dynamically bind GRCs to their interfaces based on their current orbital position:</t>

<t><list style="numbers" type="1">
  <t>A satellite continuously determines its coordinates using onboard GNSS or ephemeris-based position calculation.</t>
  <t>The geographic coding module converts the satellite's coordinates into the corresponding GRC at the appropriate hierarchy level.</t>
  <t>When a satellite enters a new geographic region, it updates its interface addresses to reflect the new GRC.</t>
  <t>A satellite <bcp14>MAY</bcp14> bind multiple GRCs simultaneously (analogous to multiple IP addresses on a single interface), representing the multiple geographic regions it currently covers.</t>
</list></t>

</section>
<section anchor="interface-direction-mapping"><name>Interface Direction Mapping</name>

<t>Each satellite maintains 6 logical interfaces corresponding to directional ISLs:</t>

<t><list style="symbols">
  <t>North: Intra-plane link to the satellite ahead in the orbital direction.</t>
  <t>South: Intra-plane link to the satellite behind in the orbital direction.</t>
  <t>East: Inter-plane link to the satellite in the adjacent orbital plane to the east.</t>
  <t>West: Inter-plane link to the satellite in the adjacent orbital plane to the west.</t>
  <t>Down: Link to ground (UT or GS) or lower level shell.</t>
  <t>Up: Link from ground to satellite or upper level shell.</t>
</list></t>

<t>All interfaces are bound with a GRC-based address, and routing table determine the egress direction based on the destination GRC.</t>

</section>
</section>
<section anchor="time-sliced-routing"><name>Time-Sliced Routing</name>

<section anchor="ephemeris-based-pre-computation"><name>Ephemeris-Based Pre-computation</name>

<t>Satellite ephemeris data provides precise orbital parameters, enabling the prediction of each satellite's position at any future time. The routing system leverages this predictability as follows:</t>

<t><list style="numbers" type="1">
  <t>The orbital period is divided into discrete time slices. The duration of each time slice is a configuration parameter, typically set to be shorter than the minimum handover interval (range from seconds to minutes).</t>
  <t>A ground control unit computes the predicted positions and connectivity of all satellites for each time slice using constellation ephemeris.</t>
  <t>Based on these positions, the coverage area of each satellite is determined, and the set of GRCs served by each satellite is identified.</t>
  <t>For each satellite and each time slice, a routing table is centrally computed that maps destination GRCs to egress directions (North, South, East, West, Down, Up).</t>
  <t>The computed routing tables are validated and distributed to satellites prior to the corresponding time slice.</t>
  <t>Satellites locally store and activate the downloaded routing tables at time-slice boundaries.</t>
</list></t>

</section>
<section anchor="routing-table-structure"><name>Routing Table Structure</name>

<t>The routing table for each time slice <bcp14>MUST</bcp14> support multi-path and multi-source reachability, containing entries of the form:</t>

<texttable align="center" title="GRC Routing Table with Multi-Path Support">
      <ttcol align='left'>Destination GRC (prefix)</ttcol>
      <ttcol align='left'>Egress Paths (Directions)</ttcol>
      <ttcol align='left'>Path Attributes (Priority/Weight/Next-Hop)</ttcol>
      <c>GRC-A/14</c>
      <c>Path 1: East Path 2: North</c>
      <c>Primary (Weight: 50) Backup  (Weight: 50)</c>
      <c>GRC-B/17</c>
      <c>Path 1: Down</c>
      <c>Local Ground Station</c>
</texttable>

<t>The egress direction is one of: North, South, East, West, Down, or Up. The next-hop field is optional and <bcp14>MAY</bcp14> be used for explicit next-hop specification in complex topologies.</t>

<t>To preserve the multi-source characteristics inherited from terrestrial protocols (e.g., BGP multi-homing), a single destination GRC prefix <bcp14>MAY</bcp14> resolve to multiple egress directions. The forwarding engine can execute Equal-Cost Multi-Path (ECMP), Unequal-Cost Multi-Path (UCMP), or Active-Standby switches based on the path attributes.</t>

</section>
<section anchor="routing-table-refresh"><name>Routing Table Refresh</name>

<t>At each time slice boundary:</t>

<t><list style="numbers" type="1">
  <t>The time-varying routing module retrieves the pre-computed routing table for the new time slice from the routing database.</t>
  <t>The module updates the forwarding information base (FIB) with the new routing table.</t>
  <t>The old routing table is retained briefly (e.g., for one additional time slice) to handle packets in flight that were forwarded based on
the previous table.</t>
  <t>The local GRC bindings are updated to reflect the satellite's new position.</t>
</list></t>

<t>This periodic refresh replaces the event-driven link-state updates of traditional routing protocols, providing deterministic and bounded routing updates.</t>

</section>
</section>
<section anchor="packet-forwarding"><name>Packet Forwarding</name>

<section anchor="encapsulation-and-tunneling"><name>Encapsulation and Tunneling</name>

<t>User traffic enters the satellite network at the UT and exits at a GS. The end-to-end flow is:</t>

<figure><artwork><![CDATA[
DEV->WR->UT->[Satellite Network]->GS->PoP->Internet
]]></artwork></figure>

<t>Step 1: The DEV sends an IPv4/IPv6 packet destined for a remote content server. The packet traverses the user's local network to the UT.</t>

<t>Step 2: The UT queries the Routing Database with the destination terrestrial IP. To preserve multi-source characteristics, the database <bcp14>MAY</bcp14> return a list of multiple candidate PoPs and their corresponding GS GRCs. The UT applies a multi-source selection policy (e.g., spatial proximity, load balancing, or primary/backup policy) to select one or more target GS GRCs, and encapsulates the user traffic into a tunnel.</t>

<t>Step 3: The encapsulated packet traverses the inter-satellite network. At each satellite hop, the forwarding engine extracts the destination GRC from the outer header, performs a segmented longest match lookup in the current time-slice routing table, and forwards the packet in the appropriate direction (North, South, East, West, Down or Up).</t>

<t>Step 4: The GS receives the encapsulated packet, terminates the tunnel, and forwards the inner packet to the PoP using standard IP routing.</t>

<t>Step 5: The PoP performs NAT (if required) and injects the packet into the terrestrial Internet.</t>

<t>Step 6: Return traffic follows the reverse path through the same GS, satellite network, and UT.</t>

</section>
<section anchor="forwarding-algorithm"><name>Forwarding Algorithm</name>

<t>The forwarding algorithm at each satellite is:</t>

<figure><artwork><![CDATA[
1. Receive packet from ingress interface.
2. Extract destination GRC from packet header.
3. Perform segmented longest match on destination GRC using 
   current time-slice routing table.
4. If match found:
     a. If egress direction is "Down":
        - Forward packet to ground link (GS or UT).
     b. Otherwise:
        - Forward packet to the corresponding ISL interface.
5. If no match found:
     - Drop packet and optionally generate an ICMP unreachable 
       message.
6. Update packet TTL/hop limit.
]]></artwork></figure>

</section>
<section anchor="handling-local-traffic"><name>Handling Local Traffic</name>

<t>If the destination GRC matches one of the GRCs currently bound to the local satellite, the packet is delivered to upper layer protocol.</t>

</section>
</section>
<section anchor="system-components"><name>System Components</name>

<section anchor="geographic-coding-module"><name>Geographic Coding Module</name>

<t>The geographic coding module is responsible for:</t>

<t><list style="symbols">
  <t>Converting satellite coordinates (latitude, longitude, altitude) into the corresponding GRC.</t>
  <t>Determining the set of GRCs covered by the satellite's footprint at the current position.</t>
  <t>Updating interface address bindings when the satellite enters new geographic regions.</t>
</list></t>

<t>The module <bcp14>MUST</bcp14> support real-time coordinate updates at a rate sufficient to track satellite motion (e.g., at least 1 Hz).</t>

</section>
<section anchor="time-varying-routing-module"><name>Time-Varying Routing Module</name>

<t>The time-varying routing module is responsible for:</t>

<t><list style="symbols">
  <t>Loading the pre-computed routing table for the current time slice from the routing database.</t>
  <t>Managing the transition between time slices, including FIB updates and table retention policies.</t>
  <t>Synchronizing with the satellite's onboard clock to ensure accurate time slice alignment.</t>
</list></t>

<t>The module <bcp14>SHOULD</bcp14> support graceful transitions that do not disrupt packets in flight.</t>

</section>
<section anchor="data-forwarding-module"><name>Data Forwarding Module</name>

<t>The data forwarding module is responsible for:</t>

<t><list style="symbols">
  <t>Receiving packets from ingress interfaces.</t>
  <t>Extracting destination GRCs and performing routing table lookups.</t>
  <t>Forwarding packets to the appropriate egress interfaces.</t>
  <t>Maintaining packet ordering within flows.</t>
</list></t>

<t>The module <bcp14>MUST</bcp14> support the segmented longest match algorithm and <bcp14>SHOULD</bcp14> leverage existing hardware forwarding engines (e.g., TCAMs) where available.</t>

</section>
<section anchor="routing-database"><name>Routing Database</name>

<t>The routing database stores:</t>

<t><list style="symbols">
  <t>Pre-computed routing tables for all time slices in the satellite's orbital period.</t>
  <t>Ephemeris data for all satellites in the constellation.</t>
  <t>Mapping between GRCs and geographic coordinates.</t>
  <t>Terrestrial-to-GRC Multi-Source Mapping Table: Maps a standard terrestrial IP prefix (IPv4/IPv6) to a set of candidate GRCs representing multiple terrestrial injection/egress points (PoPs/GSs).</t>
</list></t>

<t>The database is populated prior to satellite launch and <bcp14>MAY</bcp14> be updated via ground control uploads when constellation parameters change.</t>

</section>
</section>
<section anchor="integration-with-terrestrial-networks"><name>Integration with Terrestrial Networks</name>

<section anchor="border-gateway-function"><name>Border Gateway Function</name>

<t>The GS and PoP serve as the border between the satellite segment (GRC-based routing) and the terrestrial segment (IP prefix-based routing). The border gateway performs the following functions:</t>

<t><list style="numbers" type="1">
  <t>Ingress (Satellite to Terrestrial):
  <list style="symbols">
      <t>Terminates satellite tunnel encapsulation.</t>
      <t>Extracts the inner IP packet.</t>
      <t>Performs standard IP routing lookup using the destination IP address.</t>
      <t>Applies NAT if the satellite segment uses private addressing.</t>
    </list></t>
  <t>Egress (Terrestrial to Satellite):
  <list style="symbols">
      <t>Receives IP packets destined for satellite network users.</t>
      <t>Determines the target UT GRC. If the user network is multi-homed  (connected via multiple UTs for multi-source reliability), the gateway selects the optimal UT GRC list based on BGP metrics or geographic policies.</t>
      <t>Selects the ingress GS and encapsulates the packet into a satellite tunnel with GRC-based outer addressing.</t>
    </list></t>
</list></t>

</section>
<section anchor="dns-and-address-resolution"><name>DNS and Address Resolution</name>

<t>The DNS resolution process is unchanged from standard IP networks:</t>

<t><list style="numbers" type="1">
  <t>The DEV queries a DNS resolver for the content server's domain name.</t>
  <t>The resolver returns the server's IP address.</t>
  <t>The DEV sends packets to this IP address.</t>
  <t>The UT intercepts the packet and initiates the satellite routing process based on the destination's geographic region.</t>
</list></t>

<t>The GRC-based addressing is transparent to end hosts and applications.</t>

</section>
</section>
<section anchor="security-considerations"><name>Security Considerations</name>

<section anchor="spoofing-and-injection"><name>Spoofing and Injection</name>

<t>Because GRCs are derived from geographic coordinates rather than administratively assigned prefixes, an attacker could potentially inject false routing information if they gain control of a satellite or GS. Mitigations include:</t>

<t><list style="symbols">
  <t>Cryptographic authentication: Routing table updates and ephemeris data <bcp14>SHOULD</bcp14> be cryptographically signed by the constellation operator.</t>
  <t>Access control: Only authorized ground control stations <bcp14>SHOULD</bcp14> be able to modify routing databases.</t>
  <t>Anomaly detection: Satellites <bcp14>SHOULD</bcp14> monitor for anomalous routing behavior (e.g., sudden changes in forwarding patterns) and report to ground control.</t>
</list></t>

</section>
<section anchor="routing-database-integrity"><name>Routing Database Integrity</name>

<t>The pre-computed routing tables are critical to correct network operation. Compromise of the routing database could cause widespread black holes or loops. Protections include:</t>

<t><list style="symbols">
  <t>Secure storage: Routing databases <bcp14>SHOULD</bcp14> be stored in tamper-resistant hardware on satellites.</t>
  <t>Integrity verification: Checksums or digital signatures <bcp14>SHOULD</bcp14> be used to verify routing table integrity at load time.</t>
</list></t>

</section>
<section anchor="privacy-considerations"><name>Privacy Considerations</name>

<t>GRC-based routing encodes geographic information in packet headers. While this does not expose precise user locations (GRCs represent regions, not individual devices), traffic analysis could infer user coarse location. Operators <bcp14>SHOULD</bcp14> consider:</t>

<t><list style="symbols">
  <t>Encryption: IPsec or TLS <bcp14>SHOULD</bcp14> be used to protect user traffic content, though GRC headers remain visible for routing.</t>
  <t>Logging minimization: Forwarding devices <bcp14>SHOULD</bcp14> minimize logging of GRC-based forwarding decisions to reduce metadata exposure.</t>
</list></t>

</section>
</section>
<section anchor="iana-considerations"><name>IANA Considerations</name>

<t>This document has no IANA actions.</t>

</section>


  </middle>

  <back>


<references title='References' anchor="sec-combined-references">

    <references title='Normative References' anchor="sec-normative-references">



<reference anchor="RFC791">
  <front>
    <title>Internet Protocol</title>
    <author fullname="J. Postel" initials="J." surname="Postel"/>
    <date month="September" year="1981"/>
  </front>
  <seriesInfo name="STD" value="5"/>
  <seriesInfo name="RFC" value="791"/>
  <seriesInfo name="DOI" value="10.17487/RFC0791"/>
</reference>
<reference anchor="RFC8200">
  <front>
    <title>Internet Protocol, Version 6 (IPv6) Specification</title>
    <author fullname="S. Deering" initials="S." surname="Deering"/>
    <author fullname="R. Hinden" initials="R." surname="Hinden"/>
    <date month="July" year="2017"/>
    <abstract>
      <t>This document specifies version 6 of the Internet Protocol (IPv6). It obsoletes RFC 2460.</t>
    </abstract>
  </front>
  <seriesInfo name="STD" value="86"/>
  <seriesInfo name="RFC" value="8200"/>
  <seriesInfo name="DOI" value="10.17487/RFC8200"/>
</reference>
<reference anchor="RFC2328">
  <front>
    <title>OSPF Version 2</title>
    <author fullname="J. Moy" initials="J." surname="Moy"/>
    <date month="April" year="1998"/>
    <abstract>
      <t>This memo documents version 2 of the OSPF protocol. OSPF is a link- state routing protocol. [STANDARDS-TRACK]</t>
    </abstract>
  </front>
  <seriesInfo name="STD" value="54"/>
  <seriesInfo name="RFC" value="2328"/>
  <seriesInfo name="DOI" value="10.17487/RFC2328"/>
</reference>
<reference anchor="RFC4271">
  <front>
    <title>A Border Gateway Protocol 4 (BGP-4)</title>
    <author fullname="Y. Rekhter" initials="Y." role="editor" surname="Rekhter"/>
    <author fullname="T. Li" initials="T." role="editor" surname="Li"/>
    <author fullname="S. Hares" initials="S." role="editor" surname="Hares"/>
    <date month="January" year="2006"/>
    <abstract>
      <t>This document discusses the Border Gateway Protocol (BGP), which is an inter-Autonomous System routing protocol.</t>
      <t>The primary function of a BGP speaking system is to exchange network reachability information with other BGP systems. This network reachability information includes information on the list of Autonomous Systems (ASes) that reachability information traverses. This information is sufficient for constructing a graph of AS connectivity for this reachability from which routing loops may be pruned, and, at the AS level, some policy decisions may be enforced.</t>
      <t>BGP-4 provides a set of mechanisms for supporting Classless Inter-Domain Routing (CIDR). These mechanisms include support for advertising a set of destinations as an IP prefix, and eliminating the concept of network "class" within BGP. BGP-4 also introduces mechanisms that allow aggregation of routes, including aggregation of AS paths.</t>
      <t>This document obsoletes RFC 1771. [STANDARDS-TRACK]</t>
    </abstract>
  </front>
  <seriesInfo name="RFC" value="4271"/>
  <seriesInfo name="DOI" value="10.17487/RFC4271"/>
</reference>
<reference anchor="RFC1195">
  <front>
    <title>Use of OSI IS-IS for routing in TCP/IP and dual environments</title>
    <author fullname="R. Callon" initials="R." surname="Callon"/>
    <date month="December" year="1990"/>
    <abstract>
      <t>This memo specifies an integrated routing protocol, based on the OSI Intra-Domain IS-IS Routing Protocol, which may be used as an interior gateway protocol (IGP) to support TCP/IP as well as OSI. This allows a single routing protocol to be used to support pure IP environments, pure OSI environments, and dual environments. This specification was developed by the IS-IS working group of the Internet Engineering Task Force. [STANDARDS-TRACK]</t>
    </abstract>
  </front>
  <seriesInfo name="RFC" value="1195"/>
  <seriesInfo name="DOI" value="10.17487/RFC1195"/>
</reference>
<reference anchor="RFC2119">
  <front>
    <title>Key words for use in RFCs to Indicate Requirement Levels</title>
    <author fullname="S. Bradner" initials="S." surname="Bradner"/>
    <date month="March" year="1997"/>
    <abstract>
      <t>In many standards track documents several words are used to signify the requirements in the specification. These words are often capitalized. This document defines these words as they should be interpreted in IETF documents. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements.</t>
    </abstract>
  </front>
  <seriesInfo name="BCP" value="14"/>
  <seriesInfo name="RFC" value="2119"/>
  <seriesInfo name="DOI" value="10.17487/RFC2119"/>
</reference>
<reference anchor="RFC8174">
  <front>
    <title>Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words</title>
    <author fullname="B. Leiba" initials="B." surname="Leiba"/>
    <date month="May" year="2017"/>
    <abstract>
      <t>RFC 2119 specifies common key words that may be used in protocol specifications. This document aims to reduce the ambiguity by clarifying that only UPPERCASE usage of the key words have the defined special meanings.</t>
    </abstract>
  </front>
  <seriesInfo name="BCP" value="14"/>
  <seriesInfo name="RFC" value="8174"/>
  <seriesInfo name="DOI" value="10.17487/RFC8174"/>
</reference>



    </references>

    <references title='Informative References' anchor="sec-informative-references">

<reference anchor="LEO" target="https://ieeexplore.ieee.org/document/10294034">
  <front>
    <title>Measuring a Low-Earth-Orbit Satellite Network</title>
    <author initials="J." surname="Pan, J Zhao and L Cai">
      <organization></organization>
    </author>
    <date year="2023"/>
  </front>
</reference>
<reference anchor="H3" target="https://h3geo.org/">
  <front>
    <title>H3: Uber's Hexagonal Hierarchical Spatial Index</title>
    <author initials="" surname="Uber Technologies">
      <organization></organization>
    </author>
    <date year="2023"/>
  </front>
</reference>


    </references>

</references>


<?line 444?>

<section anchor="acknowledgments"><name>Acknowledgments</name>

<t>The authors would like to thank the IETF Routing Area working group for their valuable feedback on this work.</t>

</section>


  </back>

<!-- ##markdown-source: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-->

</rfc>

