An apparatus, comprising: one or more processors; and one or more computer-readable non-transitory storage media coupled to the one or more processors and comprising instructions that, when executed by the one or more processors, cause the apparatus to perform operations comprising: determining a path through a plurality of provider nodes within a provider network; determining that the path through the plurality of provider nodes within the provider network is secure, comprising: deriving information from each of the plurality of provider nodes from at least one of the following: interior gateway protocol, IGP, advertisements and a provider controller of the provider network; determining a security level for each of the plurality of provider nodes based on the derived information; determining that the security level of each of the plurality of provider nodes is below a predetermined security constraint value; receiving, from a customer node, a Resource Reservation Protocol, RSVP, path message comprising an attribute for a security request; and routing the RSVP path message along the path of the plurality of provider nodes. one or more processors; and one or more computer-readable non-transitory storage media coupled to the one or more processors and comprising instructions that, when executed by the one or more processors, cause the apparatus to perform operations comprising: determining a path through a plurality of provider nodes within a provider network; determining that the path through the plurality of provider nodes within the provider network is secure, comprising: deriving information from each of the plurality of provider nodes from at least one of the following: interior gateway protocol, IGP, advertisements and a provider controller of the provider network; determining a security level for each of the plurality of provider nodes based on the derived information; determining that the security level of each of the plurality of provider nodes is below a predetermined security constraint value; receiving, from a customer node, a Resource Reservation Protocol, RSVP, path message comprising an attribute for a security request; and routing the RSVP path message along the path of the plurality of provider nodes. determining a path through a plurality of provider nodes within a provider network; determining that the path through the plurality of provider nodes within the provider network is secure, comprising: deriving information from each of the plurality of provider nodes from at least one of the following: interior gateway protocol, IGP, advertisements and a provider controller of the provider network; determining a security level for each of the plurality of provider nodes based on the derived information; determining that the security level of each of the plurality of provider nodes is below a predetermined security constraint value; deriving information from each of the plurality of provider nodes from at least one of the following: interior gateway protocol, IGP, advertisements and a provider controller of the provider network; interior gateway protocol, IGP, advertisements and a provider controller of the provider network; determining a security level for each of the plurality of provider nodes based on the derived information; determining that the security level of each of the plurality of provider nodes is below a predetermined security constraint value; receiving, from a customer node, a Resource Reservation Protocol, RSVP, path message comprising an attribute for a security request; and routing the RSVP path message along the path of the plurality of provider nodes.