control plane protection