Validating the network paths taken by packets is critical in constructing a secure Internet architecture. Any feasible solution must both enforce packet forwarding along end-host specified paths and verify whether packets have taken those paths. However, the current Internet supports neither enforcement nor verification. Likely due to the radical changes to the Internet architecture and a long-standing confusion between routing and forwarding, only limited solutions for path validation exist in the literature. This survey article aims to reinvigorate research on the essential topic of path validation by crystallizing not only how path validation works but also where seemingly qualified solutions fall short. The analyses explore future research directions in path validation aimed at improving security, privacy, and efficiency.

中文翻译：

---

揭开互联网数据包转发的神秘面纱

验证数据包所采用的网络路径对于构建安全的 Internet 架构至关重要。任何可行的解决方案都必须沿终端主机指定的路径强制数据包转发，并验证数据包是否已通过这些路径。然而，当前的互联网既不支持强制执行也不支持验证。可能由于 Internet 架构的根本变化以及路由和转发之间长期存在的混淆，文献中仅存在有限的路径验证解决方案。这篇调查文章旨在通过明确路径验证的工作原理以及看似合格的解决方案的不足之处来重振对路径验证这一基本主题的研究。这些分析探索了旨在提高安全性、隐私性和效率的路径验证的未来研究方向。