Chapters

4 Routing in Low-Power IoT Networks

routing
iot
rpl
networking

4.5 Proving End-to-End Paths

4.5.1 Start With the Device That Must Be Reached

Prove Each Direction Before Calling It Connected

Picture a flood sensor that sends a warning to a control room. The warning arrives, but the reply that should silence the alarm never reaches the sensor. One successful message did not prove a working path. It proved only one trip in one direction.

Name the exact exchange before testing it. State who sends first, where the message should finish, how the reply returns, and how long the result may take. A gateway is the device that joins one network to another. Telemetry means the readings and status a device reports. Firmware is the code stored on the device. Test each of these flows separately when they use different routes or rules.

Now break one step at a time. Remove a route, block a reply, restart the gateway, or change the device address. Record which check finds the fault and who owns the repair. A green network icon is not enough evidence.

This simple path test does not prove every future condition. Loads, rules, and radio links can change. The deeper sections show how addresses, forward routes, return paths, and loop limits turn the first test into a reviewable connectivity record.

Connectivity is not proven by saying the network is up. Pick one constrained device and ask which traffic must reach it, which traffic must leave it, and which gateway or parent is responsible when the path changes.

That device-centered view keeps the design honest. It separates local radio reachability from routed IP reachability, and it shows whether the deployment has enough evidence for telemetry, commands, diagnostics, and recovery paths.

4.5.2 Overview: Connectivity Is a Whole-Path Claim

End-to-end connectivity means more than a sensor hearing its local gateway. A packet must have a usable source address, match a forwarding route at every hop, reach the intended destination, and have a valid path for the reply.

In IoT systems the path often crosses a constrained link, a border router, an IP backbone, and an application endpoint. A successful first-hop ping proves local reachability. It does not prove that upstream forwarding, firewall policy, translation, routed-prefix behavior, or the return path is correct.

Make the claim specific before testing. A telemetry upload, a cloud-to-device command, a firmware download, and an operator login can use different ports, policies, and return-state assumptions. Connectivity evidence is strongest when it names the exact flow, direction, source address, destination, and failure consequence. It should also name the next check when the path breaks.

The evidence boundary for Overview: Connectivity Is a Whole-Path Claim is visible in Figure 4.5. Study how end-to-end connectivity is proven by checking the named flow’s source address, hop-by-hop forwarding, border policy, upstream route, return path, and loop-limit evidence before carrying the claim into the next design or validation step.

Evidence map for an IoT sensor flow through a mesh parent, border router, upstream router, and application with forward route, border policy, return path, and loop-limit checks.
Figure 4.5: End-to-end connectivity is proven by checking the named flow’s source address, hop-by-hop forwarding, border policy, upstream route, return path, and loop-limit evidence.

Follow the evidence in Figure 4.5 from “Overview: Connectivity Is a Whole-Path Claim” to “End-to-End Connectivity Is a Path Claim.” When “Sensor” is included, the diagram shows how end-to-end connectivity is proven by checking the named flow’s source address, hop-by-hop forwarding, border policy, upstream route, return path, and loop-limit evidence; this is the specific relationship that Overview: Connectivity Is a Whole-Path Claim carries onward.

Address

The source needs an address that is valid for the intended scope. Private IPv4 and IPv6 unique local addresses are useful inside a deployment, but they need translation, proxying, or a routed return path for external services.

Forward Route

Each router needs a matching entry for the destination prefix. The entry can be connected, static, default, or maintained dynamically by a routing protocol.

Return Path

The destination, upstream router, gateway, or translation state must know how replies get back to the original conversation.

Loop Limit

TTL in IPv4 and Hop Limit in IPv6 stop packets from circulating forever. They reveal loops; they do not repair bad routes.

Use this contract when reviewing a routed design: source address, source route, first hop, gateway forwarding, upstream route, return path, and loop evidence. Missing any one of those can make an IoT workflow look intermittent even when the local radio link is healthy.

4.5.3 Practitioner: Prove the Path One Boundary at a Time

Start at the source and move outward. On a Linux-based node, inspect addressing and routes before changing gateway or upstream state:

ip addr show
ip route show
ping -c 3 192.168.10.1
traceroute -n 198.51.100.50

For a small gateway, imagine three interfaces: eth0 for sensors at 192.168.10.1/24, eth1 for management at 10.20.0.1/24, and eth2 for the uplink at 203.0.113.5/30 with upstream router 203.0.113.6. Connected routes appear automatically for directly attached prefixes. The off-link application endpoint needs either a default route or an explicit host route.

Requirement
Evidence
Example action
Local prefixes
Gateway has connected routes for sensor, management, and uplink networks.
ip addr show and ip route show
Off-link endpoint
Gateway knows where to send packets for the service.
ip route replace 198.51.100.50/32 via 203.0.113.6 dev eth2
Default path
Unmatched destinations leave through the upstream router.
ip route replace default via 203.0.113.6 dev eth2
Forwarding permission
Gateway is allowed to route between interfaces.
sysctl -w net.ipv4.ip_forward=1
Return handling
Replies can reach the sensor source address.
Use source translation, proxying, or a routed sensor prefix.

Traceroute gives the quickest boundary clue. No first hop points to local addressing or route problems. A trace that stops at the gateway points to gateway forwarding, firewall policy, upstream reachability, or translation state. Repeated hop pairs point to a loop. Stars at the end do not always prove failure because some routers and endpoints filter ICMP while forwarding application traffic.

Sensor Evidence

Address, prefix, default route, first-hop ping, and the first visible traceroute hop.

Gateway Evidence

Route lookup, forwarding enabled, firewall policy, translation state, and logs for the attempted flow.

Upstream Evidence

Route back to the sensor prefix, application reachability, and whether ICMP filtering explains missing traceroute responses.

4.5.4 Under the Hood: Lookup, Return State, and RPL Boundaries

Routers do not need the whole path. Each hop performs a destination-prefix lookup, chooses the most specific matching entry, and forwards the packet to the selected next hop or directly connected interface. A host route such as 198.51.100.50/32 wins over 198.51.100.0/24, and both win over 0.0.0.0/0.

The return path is an independent requirement. A gateway that sends private IPv4 sensor addresses upstream usually needs source translation so replies map back to the sensor. A routed IPv6 design usually needs an upstream route for the delegated sensor prefix. A proxy design terminates the sensor-side protocol locally and starts a separate upstream conversation, which means the application workflow can succeed without direct sensor addressability.

Loop diagnosis relies on repeated evidence. If Router B sends gateway-bound traffic to Router C while Router C sends the same prefix back to Router B, traceroute can show the same two hops again and again:

1  192.168.5.1
2  192.168.4.1
3  192.168.5.1
4  192.168.4.1

TTL or IPv6 Hop Limit eventually expires, preventing endless circulation. The fix is route-state repair: remove the bad next hop, install a route that progresses toward the gateway, and retest until the repeated-hop evidence is gone.

RPL changes how IoT-side routes are maintained, not the connectivity contract itself. Nodes still need IPv6 addresses, upward traffic still needs a parent toward the DODAG root, downward traffic still depends on RPL mode, and the border router still needs upstream forwarding plus a return-path design outside the mesh.

Connected

Installed when an interface receives an address on a local prefix.

Static

Clear and testable for gateways, labs, and small stable topologies.

Default

Useful fallback for unmatched destinations, but dangerous if it hides a missing specific route.

RPL

Maintains routes in low-power IPv6 meshes where links, parents, and sleeping nodes change over time.

4.5.5 Summary

End-to-end IoT connectivity is a whole-path claim. A sensor needs a usable address, a route off its local link, gateway forwarding, upstream reachability, and a return path for replies. Traceroute, route-table lookup, gateway logs, and translation or routed-prefix evidence keep those checks separate.

Static routes are useful when the topology is small and stable. RPL becomes useful when low-power IPv6 routers need to maintain IoT-side routes as links and parents change. In both cases, the review question stays the same: can packets progress toward the destination and can responses get back?

4.5.6 Key Takeaway

Do not declare an IoT path healthy because the first hop responds. Prove address scope, forward routing, gateway policy, upstream route state, return handling, and loop behavior as separate pieces of evidence.

4.5.7 See Also

Routing Basics

Builds the next-hop and forwarding-table model used by this chapter.

Routing Tables

Explains prefix matching, connected routes, static routes, and defaults in more detail.

TTL and Loop Prevention

Shows how TTL and Hop Limit expose forwarding loops without repairing them.

RPL Core Concepts

Connects the end-to-end contract to low-power IPv6 routing state.

4.6 Summary

IoT routing has to be selected from the deployment constraints: power, memory, link quality, relay role, traffic direction, gateway dependency, and maintenance visibility. Static routes, RPL, and infrastructure routing all have valid places, but they prove different claims.

RPL fits constrained IPv6 meshes where nodes forward for one another and route repair matters. The review record should name the root, relay candidates, Objective Function, parent evidence, traffic directions, repair tests, and operations signals. A successful upward telemetry packet is useful evidence, but it does not automatically prove downward commands, return paths, or stability after parent repair.

4.7 Key Takeaway

Trust an IoT routing design only when the selected approach, parent rule, traffic direction, repair behavior, and route-health evidence match the constrained network it must operate in.

4.8 See Also

Routing Basics

Review next-hop forwarding, default routes, and loop limits before evaluating a constrained mesh.

End-to-End Connectivity

Connect route choice to gateway forwarding, return paths, and traceroute evidence.

RPL Core Concepts

Study DODAGs, Rank, DIO, DAO, and routing modes in more detail.

RPL DODAG Construction

Trace how parent selection and graph formation become reviewable route state.