This document discusses improving rerouting schemes for multiple link failures using interface-specific routing (ISR). It proposes using ISR combined with tunneling on demand (TOD) to cover most failures. ISR routes traffic based on the ingress interface of packets, avoiding the need for packet modifications. TOD is only activated when failures cannot be routed around with ISR alone. The document also discusses using elliptic curve-based Diffie-Hellman key exchange to encrypt data for added security.