An apparatus, comprising: one or more processors; and one or more computer-readable non-transitory storage media coupled to the one or more processors and comprising instructions that, when executed by the one or more processors, cause the apparatus to perform operations comprising: determining a path through a plurality of provider nodes within a provider network ; determining that the path through the plurality of provider nodes within the provider network is secure, comprising: deriving information from each of the plurality of provider nodes from at least one of the following: interior gateway protocol, IGP, advertisements and a provider controller of the provider network ; determining a security level for each of the plurality of provider nodes based on the derived information; determining that the security level of each of the plurality of provider nodes is below a predetermined security constraint value; receiving, from a customer node , a Resource Reservation Protocol, RSVP, path message comprising an attribute for a security request; and routing the RSVP path message along the path of the plurality of provider nodes . one or more processors; and one or more computer-readable non-transitory storage media coupled to the one or more processors and comprising instructions that, when executed by the one or more processors, cause the apparatus to perform operations comprising: determining a path through a plurality of provider nodes within a provider network ; determining that the path through the plurality of provider nodes within the provider network is secure, comprising: deriving information from each of the plurality of provider nodes from at least one of the following: interior gateway protocol, IGP, advertisements and a provider controller of the provider network ; determining a security level for each of the plurality of provider nodes based on the derived information; determining that the security level of each of the plurality of provider nodes is below a predetermined security constraint value; receiving, from a customer node , a Resource Reservation Protocol, RSVP, path message comprising an attribute for a security request; and routing the RSVP path message along the path of the plurality of provider nodes . determining a path through a plurality of provider nodes within a provider network ; determining that the path through the plurality of provider nodes within the provider network is secure, comprising: deriving information from each of the plurality of provider nodes from at least one of the following: interior gateway protocol, IGP, advertisements and a provider controller of the provider network ; determining a security level for each of the plurality of provider nodes based on the derived information; determining that the security level of each of the plurality of provider nodes is below a predetermined security constraint value; deriving information from each of the plurality of provider nodes from at least one of the following: interior gateway protocol, IGP, advertisements and a provider controller of the provider network ; interior gateway protocol, IGP, advertisements and a provider controller of the provider network ; determining a security level for each of the plurality of provider nodes based on the derived information; determining that the security level of each of the plurality of provider nodes is below a predetermined security constraint value; receiving, from a customer node , a Resource Reservation Protocol, RSVP, path message comprising an attribute for a security request; and routing the RSVP path message along the path of the plurality of provider nodes . <EOS>