Choke Points

In the previous section, all the L3 interconnections in each design were made by using basic routers. In today's designs, you have L3 switches and firewalls as other potential interconnection points. In addition, technologies such as IPsec, NIDS, and content filtering can help define the boundaries between these domains of trust. The combination of hardware and software that makes up a network transit point between two domains of trust is called a choke point.

Deciding which choke point is appropriate for a given trust boundary is a critical element in secure network design. Choosing too weak a security control devalues the creation of the trust domains to begin with. Choosing too strong a control adds capital, management, and usability costs that might not be justified.

One of the easiest ways to start down this decision process is to consider the trust delta (or difference) between the two domains. Figure 12-11 shows a simplified version of the domains of trust shown in Figure 12-8. Here only three domains are represented.

Continue reading here: ISP Router

Was this article helpful?

+1 0

Readers' Questions

  • Frodo
    What is chocking on networking?
    5 months ago
  • Selina Hornblower
    What is a network chokepoint?
    5 months ago
  • marhta
    Are chokepoints good or bad networking?
    5 months ago
  • adaldrida
    What is a choke point in networking?
    9 months ago
  • A choke point in networking refers to a bottleneck or a point in a network where the flow of data is limited or restricted. It is a specific location or device within a network infrastructure that has a limited capacity to handle the traffic passing through it. This can result in slow data transfer, congestion, increased latency, and reduced network performance. Choke points can occur at various levels in a network, such as routers, switches, gateways, or even software components. Identifying and optimizing or eliminating choke points is crucial to maintain an efficient and reliable network.
    • sointu
      What is choke point in network security?
      9 months ago
    • A choke point in network security refers to a specific location or component within a network where traffic is funneled and monitored, allowing for better control and security measures to be implemented. It is often strategically placed within a network to regulate and monitor the flow of data. Choke points are typically used to apply security policies and monitor network traffic for potential threats. They can be physical devices or virtual components that enforce security measures, such as firewalls, intrusion detection systems, or proxies. By directing all network traffic through these choke points, security administrators can analyze and filter the data, identify suspicious activities, and block malicious traffic. Choke points offer advantages in terms of improved network security, as they provide a centralized location for security monitoring and enforcement. They can help detect and prevent various cyber threats, such as unauthorized access, malware infections, and data breaches. Additionally, choke points can facilitate logging and auditing activities for better visibility into network traffic. However, it's important to note that choke points can also become a single point of failure if not properly designed and secured. Therefore, redundancy, scalability, and high availability measures should be implemented to prevent network disruptions and ensure continuous security monitoring.
      • Susanna
        What is a network chokepoints?
        12 months ago
      • Network chokepoints are points in a network where the flow of data is restricted and where the traffic is concentrated. These points are often seen in networks that have a multilevel architecture, such as a core switch and multiple access switches. Choke points can cause performance issues due to overloading or congestion.
        • Danielle Silva
          Is a choke point of control and monitoring?
          1 year ago
        • A choke point of control and monitoring is a point in a system at which important metrics or constraints can be monitored and restricted. This point is often used as a way to limit the flow of information, resources, or products in order to maintain desired performance levels. It is also used to protect sensitive data and resources by limiting access to authorized personnel.
          • Maria Nurmela
            What are choke points?
            1 year ago
          • Choke points are geographical areas, such as narrow straits or mountain passes, that are strategically important because they are relatively easy to defend and difficult to attack. Controlling a choke point gives a military or commercial advantage due to the ability to limit or control the flow of people and goods.