<?xml version="1.0" encoding="UTF-8"?>
  <?xml-stylesheet type="text/xsl" href="rfc2629.xslt" ?>
  <!-- generated by https://github.com/cabo/kramdown-rfc version 1.7.39 (Ruby 3.3.8) -->


<!DOCTYPE rfc  [
  <!ENTITY nbsp    "&#160;">
  <!ENTITY zwsp   "&#8203;">
  <!ENTITY nbhy   "&#8209;">
  <!ENTITY wj     "&#8288;">

]>


<rfc ipr="trust200902" docName="draft-yang-tvr-grc-based-routing-00" category="info" submissionType="IETF" xml:lang="en">
  <front>
    <title abbrev="GRC Based Routing">Geographic Based Dynamic Routing in LEO Satellite Networks</title>

    <author initials="F." surname="Yang" fullname="Feng Yang">
      <organization>China Mobile</organization>
      <address>
        <postal>
          <country>CN</country>
        </postal>
        <email>yangfeng@chinamobile.com</email>
      </address>
    </author>
    <author initials="P." surname="Du" fullname="Ping Du">
      <organization>China Satellite Network Group</organization>
      <address>
        <postal>
          <country>CN</country>
        </postal>
        <email>pingdu@ustc.edu</email>
      </address>
    </author>
    <author initials="M." surname="Xiao" fullname="Min Xiao">
      <organization>ZTE</organization>
      <address>
        <postal>
          <country>CN</country>
        </postal>
        <email>xiao.min2@zte.com.cn</email>
      </address>
    </author>

    <date year="2026" month="June" day="26"/>

    <area>RTG</area>
    <workgroup>rtgwg</workgroup>
    <keyword>LEO, satellite, routing, geographic coding, H3, dynamic topology, ephemeris, IP addressing</keyword>

    <abstract>


<?line 58?>

<t>This document proposes a dynamic routing mechanism for Low Earth Orbit(LEO) satellite networks based on geographic region coding. By decoupling IP addressing from physical location, the mechanism uses hierarchical geographic grid codes (inspired by Uber's H3 spatial index) as temporary IP addresses for satellites. Routing decisions are made based on the relative geographic position encoded in the destination address, rather than traditional prefix-based IP routing. Satellite ephemeris data is leveraged to pre-compute routing tables for discrete time slices, eliminating the need for real-time link-state flooding and enabling stable, predictable routing in highly dynamic satellite topologies.</t>



    </abstract>



  </front>

  <middle>


<?line 62?>

<section anchor="introduction"><name>Introduction</name>

<section anchor="background"><name>Background</name>

<t>Low Earth Orbit (LEO) satellite constellations, exemplified by Starlink <xref target="LEO"/> and OneWeb, are rapidly transforming global Internet access. Compared to traditional Geostationary Earth Orbit (GEO) satellites, LEO satellites offer significantly lower transmission delay (20-50 ms), higher bandwidth efficiency, and lower launch costs.</t>

<t>However, LEO satellite networks present unique technical challenges, most notably the highly dynamic nature of network topology. Satellites in LEO constellations travel at orbital velocities of approximately 7.5-7.8 km/s, completing an orbit in roughly 90 minutes. Each satellite typically maintains four inter-satellite links (ISLs): two intra-plane links (forward and backward along the same orbital plane) and two inter-plane links (left and right to adjacent orbital planes). Intra-plane ISLs remain relatively stable due to minimal relative motion between co-orbital satellites. In contrast, inter-plane ISLs face continuous topology changes because adjacent orbital planes are non-parallel, and satellites can only maintain stable inter-plane connections with co-directional neighboring satellites for limited time periods.</t>

</section>
<section anchor="problem-statement"><name>Problem Statement</name>

<t>The extreme dynamicity of LEO satellite networks renders traditional routing protocols fundamentally unsuitable:</t>

<t><list style="numbers" type="1">
  <t>Topology Dynamicity Breaks Traditional Routing  <vspace blankLines='1'/>
Traditional routing protocols such as OSPF <xref target="RFC2328"/>, IS-IS <xref target="RFC1195"/>, and BGP <xref target="RFC4271"/> were designed for static or low-dynamicity terrestrial networks. Their operational model relies on periodic or event-triggered synchronization of routing information across the entire network. In LEO satellite networks, this approach fails catastrophically:  <list style="symbols">
      <t>Massive state synchronization overhead: Frequent topology changes trigger continuous link-state flooding, consuming enormous bandwidth and processing resources.</t>
      <t>Convergence failure: With handovers occurring every 11-15 seconds and network scales reaching tens of thousands of satellites, traditional protocols cannot converge within the interval between topology changes. The network remains in a perpetual state of re-convergence.</t>
      <t>Routing loops and black holes: Rapid topology changes cause routing inconsistencies, leading to transient loops and packet loss.</t>
      <t>Resource exhaustion: Satellites have limited computational power, memory, and bandwidth. Processing hundreds of thousands of terrestrial routes while simultaneously managing constant topology updates exhausts these scarce resources.</t>
    </list></t>
  <t>Fixed IP Addressing Conflicts with Dynamic Topology  <vspace blankLines='1'/>
Traditional IP addressing binds prefixes to geographic regions. In LEO networks, the same geographic area is served by different satellites at different times. Using fixed IP prefixes would require updating prefix bindings across the entire network every 15 seconds, which is operationally infeasible.</t>
  <t>Predictable Motion Is Underutilized  <vspace blankLines='1'/>
Although satellite topology is highly dynamic, satellite motion follows entirely predictable orbital mechanics. Existing routing approaches fail to exploit this determinism, instead using stochastic methods designed for uncertain environments.</t>
  <t>Terrestrial Route Injection Overwhelms Satellites  <vspace blankLines='1'/>
The terrestrial Internet contains hundreds of thousands of BGP prefixes. Injecting these into the satellite network would cause each satellite to maintain massive routing tables, consume bandwidth for route synchronization, and exhaust onboard resources. Satellites would spend more resources learning routes than forwarding traffic.</t>
</list></t>

</section>
<section anchor="objectives"><name>Objectives</name>

<t>The proposed mechanism aims to:</t>

<t><list style="numbers" type="1">
  <t>Decouple addressing from physical location to hide satellite mobility from the routing system.</t>
  <t>Eliminate the need for network-wide routing state synchronization.</t>
  <t>Reduce onboard computational and memory requirements.</t>
  <t>Leverage predictable satellite ephemeris for pre-computed, time-sliced routing tables.</t>
  <t>Enable seamless integration between the dynamic satellite segment and the static terrestrial Internet.</t>
</list></t>

</section>
<section anchor="requirements-language"><name>Requirements Language</name>

<t>The key words "<bcp14>MUST</bcp14>", "<bcp14>MUST NOT</bcp14>", "<bcp14>REQUIRED</bcp14>", "<bcp14>SHALL</bcp14>", "<bcp14>SHALL
NOT</bcp14>", "<bcp14>SHOULD</bcp14>", "<bcp14>SHOULD NOT</bcp14>", "<bcp14>RECOMMENDED</bcp14>", "<bcp14>NOT RECOMMENDED</bcp14>",
"<bcp14>MAY</bcp14>", and "<bcp14>OPTIONAL</bcp14>" in this document are to be interpreted as
described in BCP 14 <xref target="RFC2119"/> <xref target="RFC8174"/> when, and only when, they
appear in all capitals, as shown here.</t>

<?line -18?>

</section>
</section>
<section anchor="terminology"><name>Terminology</name>

<t>This document uses the following additional terms:</t>

<t><list style="symbols">
  <t>DEV (Device): The user devices (e.g., laptop).</t>
  <t>Ephemeris: Precise orbital parameters that define a satellite's position as a function of time.</t>
  <t>GNSS: Global Navigation Satellite System.</t>
  <t>GRC (Geographic Region Code): A hierarchical spatial index code representing a geographic area on Earth's surface.</t>
  <t>GS (Ground Station): The satellite operator receiver.</t>
  <t>WR (Wifi Router):</t>
  <t>Intra-plane ISL: ISL between satellites in the same orbital plane.</t>
  <t>Inter-plane ISL: ISL between satellites in adjacent orbital planes.</t>
  <t>ISL (Inter-satellite link):</t>
  <t>PoP (Point of Presence):</t>
  <t>Segmented Longest Match: A modified longest prefix matching algorithm that operates on fixed-length segments rather than arbitrary prefix lengths.</t>
  <t>Time Slice: A discrete time interval during which the satellite topology is considered stable for routing purposes.</t>
  <t>UT (User Terminal): The user satellite receiver (e.g., Starlink terminal UT).</t>
</list></t>

</section>
<section anchor="architecture-overview"><name>Architecture Overview</name>

<section anchor="network-segmentation"><name>Network Segmentation</name>

<t>The overall architecture includes UT, user WR, UT, inter-satellite links, GS and PoP that connect satellite networks to the terrestrial Internet. Due to the high relative velocity between satellites and ground infrastructure, frequent handovers are required. For example, Starlink performs beam switching approximately every 15 seconds.</t>

<figure anchor="arch" title="Reference architecture"><artwork align="center" type="ascii-art" name="Architecture"><![CDATA[
+---+   +---+   +--+   +---+     +---+   +--+   +---+   +----+
|DEV|<->|WR |<->|UT|<->|LEO|<--->|LEO|<->|GS|<->|PoP|<->|INET|
|   |   |   |   |  |   |Sat|     |Sat|   |  |   |   |   |    |
+---+   +---+   +--+   +---+     +---+   +--+   +---+   +----+
  ^               ^                        ^               ^
  |<-Terrestrial->|<----- Satellite -----> |<-Terrestrial->|
  |    Segment    |        Segment         |    Segment    |

- INET: Internet
]]></artwork></figure>

<t>The end-to-end network is logically divided into two segments:</t>

<t>Terrestrial Segment: From the DEV to the UT, and from the GS to the PoP and beyond. This segment uses traditional IP prefix-based routing (IPv4 <xref target="RFC791"/> or IPv6 <xref target="RFC8200"/>).</t>

<t>Satellite Segment: From the UT through the inter-satellite network to the GS. This segment uses geographic region coding for IP address, decoupling the destination address from the current physical location of the serving satellite. It is supposed the user traffic will be encapsulated in tunnel in this proposal.</t>

</section>
<section anchor="key-design-principles"><name>Key Design Principles</name>

<t><list style="numbers" type="1">
  <t>Address-Satellite Decoupling: the address of satellite is not fixed, but periodically changed per geographic region coding.</t>
  <t>Predictive Routing: Routing tables are pre-computed using satellite ephemeris data for each time slice, eliminating runtime route computation and flooding.</t>
  <t>Localized State: Each satellite only needs to know connectivity information for its own and adjacent orbital planes, not the entire network topology.</t>
  <t>Directional Forwarding: Routing decisions resolve to one of six directions: North, South, East, West, Down (to ground), or Up (to upper level shell).</t>
  <t>Centralized Route Computation: A ground control unit centrally computes time-sliced routing tables using global constellation ephemeris and distributes validated routing tables to satellites, reducing onboard computation and ensuring routing consistency.</t>
</list></t>

</section>
</section>
<section anchor="geographic-region-coding"><name>Geographic Region Coding</name>

<section anchor="hierarchical-grid-partitioning"><name>Hierarchical Grid Partitioning</name>

<t>The Earth's surface is partitioned into a hierarchical grid system. This document uses the H3 spatial index <xref target="H3"/> as a reference model, but other hierarchical geospatial indexing systems <bcp14>MAY</bcp14> be used.</t>

<t>The H3 system partitions the globe into 122 base (Level-0) hexagonal cells. Each Level-0 cell is subdivided into 7 Level-1 cells, each Level-1 cell into 7 Level-2 cells, and so on. This yields:</t>

<t><list style="symbols">
  <t>Level 0:                     122 regions</t>
  <t>Level 1: 122 x 7 =           854 regions</t>
  <t>Level 2: 122 x 7^2 =       5,978 regions</t>
  <t>Level 3: 122 x 7^3 =      41,846 regions</t>
  <t>Level 4: 122 x 7^4 =     292,922 regions</t>
  <t>Level 5: 122 x 7^5 =   2,050,454 regions</t>
  <t>Level 6: 122 x 7^6 =  14,353,178 regions</t>
</list></t>

<t>At Level 6, the smallest region has an area of 36 square kilometer, providing sufficient granularity for LEO satellite routing. In reality, make sure each cell has one satellite is the finest granularity. According to this address allocation schema, the satellite will have dynamic address and UT/GS will have fixed address.</t>

</section>
<section anchor="geographic-region-code-grc-format"><name>Geographic Region Code (GRC) Format</name>

<t>The GRC is encoded as a 32-bit value compatible with IPv4 addressing, enabling reuse of existing IPv4 forwarding hardware and software with minimal modifications. In case of IPv6, it can also be easily fit into 128 bits address.</t>

<figure anchor="region" title="Geographic Region Code"><artwork align="center" type="ascii-art" name="region"><![CDATA[
 0               1               2               3
 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Shell |   Level 0   |  L1 |  L2 |  L3 |  L4 |  L5 |  L6 |  IF |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

The 32-bit structure is organized as follows:
- Bits 0-3 (4 bits): Satellite shell index (0-15).
- Bits 4-10 (7 bits): Level-0 region index (0-121).
- Bits 11-13 (3 bits): Level-1 region index (0-6).
- Bits 14-16 (3 bits): Level-2 region index (0-6).
- Bits 17-19 (3 bits): Level-3 region index (0-6).
- Bits 20-22 (3 bits): Level-4 region index (0-6).
- Bits 23-25 (3 bits): Level-5 region index (0-6).
- Bits 26-28 (3 bits): Level-6 region index (0-6).
- Bits 29-31 (3 bits): Interface index (0-5) supports 6 directions.

**Note**: The encoding above is illustrative. Implementations MAY
          use alternative bit allocations that preserve the 
          hierarchical property while fitting within 32 bits.
]]></artwork></figure>

</section>
<section anchor="segmented-longest-match"><name>Segmented Longest Match</name>

<t>Traditional IP routing uses longest prefix match with arbitrary prefix lengths (0-32 bits for IPv4). For GRC-based routing, a segmented longest match algorithm is used:</t>

<t><list style="symbols">
  <t>Match boundaries are fixed at specific bit positions corresponding to hierarchy levels: 11, 14, 17, 20, 23, 26, 29, and 32 bits.</t>
  <t>A routing table lookup attempts to match the destination GRC at each of these fixed lengths, starting from the longest (most specific) and falling back to shorter (less specific) matches.</t>
  <t>This approach is compatible with existing trie-based or TCAM-based forwarding hardware without modifications.</t>
</list></t>

</section>
</section>
<section anchor="satellite-address-binding"><name>Satellite Address Binding</name>

<section anchor="dynamic-address-assignment"><name>Dynamic Address Assignment</name>

<t>Satellites dynamically bind GRCs to their interfaces based on their current orbital position:</t>

<t><list style="numbers" type="1">
  <t>A satellite continuously determines its coordinates using onboard GNSS or ephemeris-based position calculation.</t>
  <t>The geographic coding module converts the satellite's coordinates into the corresponding GRC at the appropriate hierarchy level.</t>
  <t>When a satellite enters a new geographic region, it updates its interface addresses to reflect the new GRC.</t>
  <t>A satellite <bcp14>MAY</bcp14> bind multiple GRCs simultaneously (analogous to multiple IP addresses on a single interface), representing the multiple geographic regions it currently covers.</t>
</list></t>

</section>
<section anchor="interface-direction-mapping"><name>Interface Direction Mapping</name>

<t>Each satellite maintains 6 logical interfaces corresponding to directional ISLs:</t>

<t><list style="symbols">
  <t>North: Intra-plane link to the satellite ahead in the orbital direction.</t>
  <t>South: Intra-plane link to the satellite behind in the orbital direction.</t>
  <t>East: Inter-plane link to the satellite in the adjacent orbital plane to the east.</t>
  <t>West: Inter-plane link to the satellite in the adjacent orbital plane to the west.</t>
  <t>Down: Link to ground (UT or GS) or lower level shell.</t>
  <t>Up: Link from ground to satellite or upper level shell.</t>
</list></t>

<t>All interfaces are bound with a GRC-based address, and routing table determine the egress direction based on the destination GRC.</t>

</section>
</section>
<section anchor="time-sliced-routing"><name>Time-Sliced Routing</name>

<section anchor="ephemeris-based-pre-computation"><name>Ephemeris-Based Pre-computation</name>

<t>Satellite ephemeris data provides precise orbital parameters, enabling the prediction of each satellite's position at any future time. The routing system leverages this predictability as follows:</t>

<t><list style="numbers" type="1">
  <t>The orbital period is divided into discrete time slices. The duration of each time slice is a configuration parameter, typically set to be shorter than the minimum handover interval (range from seconds to minutes).</t>
  <t>A ground control unit computes the predicted positions and connectivity of all satellites for each time slice using constellation ephemeris.</t>
  <t>Based on these positions, the coverage area of each satellite is determined, and the set of GRCs served by each satellite is identified.</t>
  <t>For each satellite and each time slice, a routing table is centrally computed that maps destination GRCs to egress directions (North, South, East, West, Down, Up).</t>
  <t>The computed routing tables are validated and distributed to satellites prior to the corresponding time slice.</t>
  <t>Satellites locally store and activate the downloaded routing tables at time-slice boundaries.</t>
</list></t>

</section>
<section anchor="routing-table-structure"><name>Routing Table Structure</name>

<t>The routing table for each time slice <bcp14>MUST</bcp14> support multi-path and multi-source reachability, containing entries of the form:</t>

<texttable align="center" title="GRC Routing Table with Multi-Path Support">
      <ttcol align='left'>Destination GRC (prefix)</ttcol>
      <ttcol align='left'>Egress Paths (Directions)</ttcol>
      <ttcol align='left'>Path Attributes (Priority/Weight/Next-Hop)</ttcol>
      <c>GRC-A/14</c>
      <c>Path 1: East Path 2: North</c>
      <c>Primary (Weight: 50) Backup  (Weight: 50)</c>
      <c>GRC-B/17</c>
      <c>Path 1: Down</c>
      <c>Local Ground Station</c>
</texttable>

<t>The egress direction is one of: North, South, East, West, Down, or Up. The next-hop field is optional and <bcp14>MAY</bcp14> be used for explicit next-hop specification in complex topologies.</t>

<t>To preserve the multi-source characteristics inherited from terrestrial protocols (e.g., BGP multi-homing), a single destination GRC prefix <bcp14>MAY</bcp14> resolve to multiple egress directions. The forwarding engine can execute Equal-Cost Multi-Path (ECMP), Unequal-Cost Multi-Path (UCMP), or Active-Standby switches based on the path attributes.</t>

</section>
<section anchor="routing-table-refresh"><name>Routing Table Refresh</name>

<t>At each time slice boundary:</t>

<t><list style="numbers" type="1">
  <t>The time-varying routing module retrieves the pre-computed routing table for the new time slice from the routing database.</t>
  <t>The module updates the forwarding information base (FIB) with the new routing table.</t>
  <t>The old routing table is retained briefly (e.g., for one additional time slice) to handle packets in flight that were forwarded based on
the previous table.</t>
  <t>The local GRC bindings are updated to reflect the satellite's new position.</t>
</list></t>

<t>This periodic refresh replaces the event-driven link-state updates of traditional routing protocols, providing deterministic and bounded routing updates.</t>

</section>
</section>
<section anchor="packet-forwarding"><name>Packet Forwarding</name>

<section anchor="encapsulation-and-tunneling"><name>Encapsulation and Tunneling</name>

<t>User traffic enters the satellite network at the UT and exits at a GS. The end-to-end flow is:</t>

<figure><artwork><![CDATA[
DEV->WR->UT->[Satellite Network]->GS->PoP->Internet
]]></artwork></figure>

<t>Step 1: The DEV sends an IPv4/IPv6 packet destined for a remote content server. The packet traverses the user's local network to the UT.</t>

<t>Step 2: The UT queries the Routing Database with the destination terrestrial IP. To preserve multi-source characteristics, the database <bcp14>MAY</bcp14> return a list of multiple candidate PoPs and their corresponding GS GRCs. The UT applies a multi-source selection policy (e.g., spatial proximity, load balancing, or primary/backup policy) to select one or more target GS GRCs, and encapsulates the user traffic into a tunnel.</t>

<t>Step 3: The encapsulated packet traverses the inter-satellite network. At each satellite hop, the forwarding engine extracts the destination GRC from the outer header, performs a segmented longest match lookup in the current time-slice routing table, and forwards the packet in the appropriate direction (North, South, East, West, Down or Up).</t>

<t>Step 4: The GS receives the encapsulated packet, terminates the tunnel, and forwards the inner packet to the PoP using standard IP routing.</t>

<t>Step 5: The PoP performs NAT (if required) and injects the packet into the terrestrial Internet.</t>

<t>Step 6: Return traffic follows the reverse path through the same GS, satellite network, and UT.</t>

</section>
<section anchor="forwarding-algorithm"><name>Forwarding Algorithm</name>

<t>The forwarding algorithm at each satellite is:</t>

<figure><artwork><![CDATA[
1. Receive packet from ingress interface.
2. Extract destination GRC from packet header.
3. Perform segmented longest match on destination GRC using 
   current time-slice routing table.
4. If match found:
     a. If egress direction is "Down":
        - Forward packet to ground link (GS or UT).
     b. Otherwise:
        - Forward packet to the corresponding ISL interface.
5. If no match found:
     - Drop packet and optionally generate an ICMP unreachable 
       message.
6. Update packet TTL/hop limit.
]]></artwork></figure>

</section>
<section anchor="handling-local-traffic"><name>Handling Local Traffic</name>

<t>If the destination GRC matches one of the GRCs currently bound to the local satellite, the packet is delivered to upper layer protocol.</t>

</section>
</section>
<section anchor="system-components"><name>System Components</name>

<section anchor="geographic-coding-module"><name>Geographic Coding Module</name>

<t>The geographic coding module is responsible for:</t>

<t><list style="symbols">
  <t>Converting satellite coordinates (latitude, longitude, altitude) into the corresponding GRC.</t>
  <t>Determining the set of GRCs covered by the satellite's footprint at the current position.</t>
  <t>Updating interface address bindings when the satellite enters new geographic regions.</t>
</list></t>

<t>The module <bcp14>MUST</bcp14> support real-time coordinate updates at a rate sufficient to track satellite motion (e.g., at least 1 Hz).</t>

</section>
<section anchor="time-varying-routing-module"><name>Time-Varying Routing Module</name>

<t>The time-varying routing module is responsible for:</t>

<t><list style="symbols">
  <t>Loading the pre-computed routing table for the current time slice from the routing database.</t>
  <t>Managing the transition between time slices, including FIB updates and table retention policies.</t>
  <t>Synchronizing with the satellite's onboard clock to ensure accurate time slice alignment.</t>
</list></t>

<t>The module <bcp14>SHOULD</bcp14> support graceful transitions that do not disrupt packets in flight.</t>

</section>
<section anchor="data-forwarding-module"><name>Data Forwarding Module</name>

<t>The data forwarding module is responsible for:</t>

<t><list style="symbols">
  <t>Receiving packets from ingress interfaces.</t>
  <t>Extracting destination GRCs and performing routing table lookups.</t>
  <t>Forwarding packets to the appropriate egress interfaces.</t>
  <t>Maintaining packet ordering within flows.</t>
</list></t>

<t>The module <bcp14>MUST</bcp14> support the segmented longest match algorithm and <bcp14>SHOULD</bcp14> leverage existing hardware forwarding engines (e.g., TCAMs) where available.</t>

</section>
<section anchor="routing-database"><name>Routing Database</name>

<t>The routing database stores:</t>

<t><list style="symbols">
  <t>Pre-computed routing tables for all time slices in the satellite's orbital period.</t>
  <t>Ephemeris data for all satellites in the constellation.</t>
  <t>Mapping between GRCs and geographic coordinates.</t>
  <t>Terrestrial-to-GRC Multi-Source Mapping Table: Maps a standard terrestrial IP prefix (IPv4/IPv6) to a set of candidate GRCs representing multiple terrestrial injection/egress points (PoPs/GSs).</t>
</list></t>

<t>The database is populated prior to satellite launch and <bcp14>MAY</bcp14> be updated via ground control uploads when constellation parameters change.</t>

</section>
</section>
<section anchor="integration-with-terrestrial-networks"><name>Integration with Terrestrial Networks</name>

<section anchor="border-gateway-function"><name>Border Gateway Function</name>

<t>The GS and PoP serve as the border between the satellite segment (GRC-based routing) and the terrestrial segment (IP prefix-based routing). The border gateway performs the following functions:</t>

<t><list style="numbers" type="1">
  <t>Ingress (Satellite to Terrestrial):
  <list style="symbols">
      <t>Terminates satellite tunnel encapsulation.</t>
      <t>Extracts the inner IP packet.</t>
      <t>Performs standard IP routing lookup using the destination IP address.</t>
      <t>Applies NAT if the satellite segment uses private addressing.</t>
    </list></t>
  <t>Egress (Terrestrial to Satellite):
  <list style="symbols">
      <t>Receives IP packets destined for satellite network users.</t>
      <t>Determines the target UT GRC. If the user network is multi-homed  (connected via multiple UTs for multi-source reliability), the gateway selects the optimal UT GRC list based on BGP metrics or geographic policies.</t>
      <t>Selects the ingress GS and encapsulates the packet into a satellite tunnel with GRC-based outer addressing.</t>
    </list></t>
</list></t>

</section>
<section anchor="dns-and-address-resolution"><name>DNS and Address Resolution</name>

<t>The DNS resolution process is unchanged from standard IP networks:</t>

<t><list style="numbers" type="1">
  <t>The DEV queries a DNS resolver for the content server's domain name.</t>
  <t>The resolver returns the server's IP address.</t>
  <t>The DEV sends packets to this IP address.</t>
  <t>The UT intercepts the packet and initiates the satellite routing process based on the destination's geographic region.</t>
</list></t>

<t>The GRC-based addressing is transparent to end hosts and applications.</t>

</section>
</section>
<section anchor="security-considerations"><name>Security Considerations</name>

<section anchor="spoofing-and-injection"><name>Spoofing and Injection</name>

<t>Because GRCs are derived from geographic coordinates rather than administratively assigned prefixes, an attacker could potentially inject false routing information if they gain control of a satellite or GS. Mitigations include:</t>

<t><list style="symbols">
  <t>Cryptographic authentication: Routing table updates and ephemeris data <bcp14>SHOULD</bcp14> be cryptographically signed by the constellation operator.</t>
  <t>Access control: Only authorized ground control stations <bcp14>SHOULD</bcp14> be able to modify routing databases.</t>
  <t>Anomaly detection: Satellites <bcp14>SHOULD</bcp14> monitor for anomalous routing behavior (e.g., sudden changes in forwarding patterns) and report to ground control.</t>
</list></t>

</section>
<section anchor="routing-database-integrity"><name>Routing Database Integrity</name>

<t>The pre-computed routing tables are critical to correct network operation. Compromise of the routing database could cause widespread black holes or loops. Protections include:</t>

<t><list style="symbols">
  <t>Secure storage: Routing databases <bcp14>SHOULD</bcp14> be stored in tamper-resistant hardware on satellites.</t>
  <t>Integrity verification: Checksums or digital signatures <bcp14>SHOULD</bcp14> be used to verify routing table integrity at load time.</t>
</list></t>

</section>
<section anchor="privacy-considerations"><name>Privacy Considerations</name>

<t>GRC-based routing encodes geographic information in packet headers. While this does not expose precise user locations (GRCs represent regions, not individual devices), traffic analysis could infer user coarse location. Operators <bcp14>SHOULD</bcp14> consider:</t>

<t><list style="symbols">
  <t>Encryption: IPsec or TLS <bcp14>SHOULD</bcp14> be used to protect user traffic content, though GRC headers remain visible for routing.</t>
  <t>Logging minimization: Forwarding devices <bcp14>SHOULD</bcp14> minimize logging of GRC-based forwarding decisions to reduce metadata exposure.</t>
</list></t>

</section>
</section>
<section anchor="iana-considerations"><name>IANA Considerations</name>

<t>This document has no IANA actions.</t>

</section>


  </middle>

  <back>


<references title='References' anchor="sec-combined-references">

    <references title='Normative References' anchor="sec-normative-references">



<reference anchor="RFC791">
  <front>
    <title>Internet Protocol</title>
    <author fullname="J. Postel" initials="J." surname="Postel"/>
    <date month="September" year="1981"/>
  </front>
  <seriesInfo name="STD" value="5"/>
  <seriesInfo name="RFC" value="791"/>
  <seriesInfo name="DOI" value="10.17487/RFC0791"/>
</reference>
<reference anchor="RFC8200">
  <front>
    <title>Internet Protocol, Version 6 (IPv6) Specification</title>
    <author fullname="S. Deering" initials="S." surname="Deering"/>
    <author fullname="R. Hinden" initials="R." surname="Hinden"/>
    <date month="July" year="2017"/>
    <abstract>
      <t>This document specifies version 6 of the Internet Protocol (IPv6). It obsoletes RFC 2460.</t>
    </abstract>
  </front>
  <seriesInfo name="STD" value="86"/>
  <seriesInfo name="RFC" value="8200"/>
  <seriesInfo name="DOI" value="10.17487/RFC8200"/>
</reference>
<reference anchor="RFC2328">
  <front>
    <title>OSPF Version 2</title>
    <author fullname="J. Moy" initials="J." surname="Moy"/>
    <date month="April" year="1998"/>
    <abstract>
      <t>This memo documents version 2 of the OSPF protocol. OSPF is a link- state routing protocol. [STANDARDS-TRACK]</t>
    </abstract>
  </front>
  <seriesInfo name="STD" value="54"/>
  <seriesInfo name="RFC" value="2328"/>
  <seriesInfo name="DOI" value="10.17487/RFC2328"/>
</reference>
<reference anchor="RFC4271">
  <front>
    <title>A Border Gateway Protocol 4 (BGP-4)</title>
    <author fullname="Y. Rekhter" initials="Y." role="editor" surname="Rekhter"/>
    <author fullname="T. Li" initials="T." role="editor" surname="Li"/>
    <author fullname="S. Hares" initials="S." role="editor" surname="Hares"/>
    <date month="January" year="2006"/>
    <abstract>
      <t>This document discusses the Border Gateway Protocol (BGP), which is an inter-Autonomous System routing protocol.</t>
      <t>The primary function of a BGP speaking system is to exchange network reachability information with other BGP systems. This network reachability information includes information on the list of Autonomous Systems (ASes) that reachability information traverses. This information is sufficient for constructing a graph of AS connectivity for this reachability from which routing loops may be pruned, and, at the AS level, some policy decisions may be enforced.</t>
      <t>BGP-4 provides a set of mechanisms for supporting Classless Inter-Domain Routing (CIDR). These mechanisms include support for advertising a set of destinations as an IP prefix, and eliminating the concept of network "class" within BGP. BGP-4 also introduces mechanisms that allow aggregation of routes, including aggregation of AS paths.</t>
      <t>This document obsoletes RFC 1771. [STANDARDS-TRACK]</t>
    </abstract>
  </front>
  <seriesInfo name="RFC" value="4271"/>
  <seriesInfo name="DOI" value="10.17487/RFC4271"/>
</reference>
<reference anchor="RFC1195">
  <front>
    <title>Use of OSI IS-IS for routing in TCP/IP and dual environments</title>
    <author fullname="R. Callon" initials="R." surname="Callon"/>
    <date month="December" year="1990"/>
    <abstract>
      <t>This memo specifies an integrated routing protocol, based on the OSI Intra-Domain IS-IS Routing Protocol, which may be used as an interior gateway protocol (IGP) to support TCP/IP as well as OSI. This allows a single routing protocol to be used to support pure IP environments, pure OSI environments, and dual environments. This specification was developed by the IS-IS working group of the Internet Engineering Task Force. [STANDARDS-TRACK]</t>
    </abstract>
  </front>
  <seriesInfo name="RFC" value="1195"/>
  <seriesInfo name="DOI" value="10.17487/RFC1195"/>
</reference>
<reference anchor="RFC2119">
  <front>
    <title>Key words for use in RFCs to Indicate Requirement Levels</title>
    <author fullname="S. Bradner" initials="S." surname="Bradner"/>
    <date month="March" year="1997"/>
    <abstract>
      <t>In many standards track documents several words are used to signify the requirements in the specification. These words are often capitalized. This document defines these words as they should be interpreted in IETF documents. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements.</t>
    </abstract>
  </front>
  <seriesInfo name="BCP" value="14"/>
  <seriesInfo name="RFC" value="2119"/>
  <seriesInfo name="DOI" value="10.17487/RFC2119"/>
</reference>
<reference anchor="RFC8174">
  <front>
    <title>Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words</title>
    <author fullname="B. Leiba" initials="B." surname="Leiba"/>
    <date month="May" year="2017"/>
    <abstract>
      <t>RFC 2119 specifies common key words that may be used in protocol specifications. This document aims to reduce the ambiguity by clarifying that only UPPERCASE usage of the key words have the defined special meanings.</t>
    </abstract>
  </front>
  <seriesInfo name="BCP" value="14"/>
  <seriesInfo name="RFC" value="8174"/>
  <seriesInfo name="DOI" value="10.17487/RFC8174"/>
</reference>



    </references>

    <references title='Informative References' anchor="sec-informative-references">

<reference anchor="LEO" target="https://ieeexplore.ieee.org/document/10294034">
  <front>
    <title>Measuring a Low-Earth-Orbit Satellite Network</title>
    <author initials="J." surname="Pan, J Zhao and L Cai">
      <organization></organization>
    </author>
    <date year="2023"/>
  </front>
</reference>
<reference anchor="H3" target="https://h3geo.org/">
  <front>
    <title>H3: Uber's Hexagonal Hierarchical Spatial Index</title>
    <author initials="" surname="Uber Technologies">
      <organization></organization>
    </author>
    <date year="2023"/>
  </front>
</reference>


    </references>

</references>


<?line 444?>

<section anchor="acknowledgments"><name>Acknowledgments</name>

<t>The authors would like to thank the IETF Routing Area working group for their valuable feedback on this work.</t>

</section>


  </back>

<!-- ##markdown-source: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-->

</rfc>

