A system for controlling packet forwarding through a dual-homed connection between first and second network domains, the dual-homed connection including two peer nodes connected to the first and second network domains. A sub-ring network is instantiated in the first network domain, and includes at least two nodes connected in a linear topology between a pair of end-nodes. Each end-node corresponds with a respective one of the peer nodes. A virtual link through the second network domain for conveys traffic of the sub-ring network between the peer nodes, and closes the sub-ring network to define a ring topology. Each of the nodes of the sub-ring network is controlled to forward packets of the sub-ring network in accordance with a ring network routing scheme.