Dual-stack Network Research Articles

Research on IPoE Perceptionless Authentication System Based on Dual-Stack Networks—Taking Yili Normal University as an Example

Research on IPoE Perceptionless Authentication System Based on Dual-Stack Networks—Taking Yili Normal University as an Example

Investigating Security Issues and Preventive Mechanisms in Ipv6 Deployment

Internet Protocols are utilized to empower the communication between the computing devices in the computer networks. IPv6 offers additional address space and more noteworthy security than IPv4. The progress from IPv4 to IPv6 has been finished through three primary change systems: dual-stack, tunneling, and translation. The IPv6 progress relies upon the similarity with the enormous introduced base of IPv4 nodes and routers just as keeping up with the security of the network from possible threats and vulnerabilities of both Internet protocols. This research identifies potential security issues in the transition mechanisms and proposing prevention mechanisms to the problems identified. Dual-Stack & Tunneling mechanisms were completely implemented in this research work and the security test was based on dual-stack network. A simulation has been designed by using GNS3 and the penetration test by the THC-IPv6 toolkit. After the implementation of simulation, IPv6 in the dual-stack mechanism was identified as vulnerable to DoS via RA flooding and IPv6 fragmentation attacks that shown the IPv6 security problems. Therefore, IPv6 ACLs and RA guards were proposed in order to protect from flooding attacks and VFR should be configured to prevent IPv6 fragmentation.

Off-Path TCP Hijacking Attacks via the Side Channel of Downgraded IPID

In this paper, we uncover a new off-path TCP hijacking attack that can be used to terminate victim TCP connections or inject forged data into victim TCP connections by manipulating the new mixed IPID assignment method, which is widely used in Linux kernel version 4.18 and beyond. Our attack has three steps. First, an off-path attacker can downgrade the IPID assignment for TCP packets from the more secure per-socket-based policy to the less secure hash-based policy, thus building a shared IPID counter that forms a side channel in the victim. Second, the attacker detects the presence of TCP connections by observing the side channel of the shared IPID counter. Third, the attacker infers sequence and acknowledgment numbers of the detected connection by observing the side channel. Consequently, the attacker can completely hijack the connection, e.g., resetting the connection or poisoning the data stream. We evaluate the impacts of our attack in the real world, and we uncover that more than 20% of Alexa top 100k websites are vulnerable to our attack. Our case studies of SSH DoS, manipulating web traffic, and poisoning BGP routing tables show its threat on a wide range of applications. Moreover, we demonstrate that our attack can be further extended to exploit IPv4/IPv6 dual-stack networks on increasing the hash collisions and enlarging vulnerable populations. Finally, we analyze the root cause and develop a new IPID assignment method to defeat this attack. We prototype our defense in Linux 4.18 and confirm its effectiveness in the real world.

Evaluation of Scheduling Algorithms for Multimedia Applications over Dual-Stack Network

This research has been dealing with a topic of dual-stack networks of issues providing Quality of Service (QoS) in (IPv4/IPv6) dual-stack environment and analysis of various applications such as FTP, voice and video of QoS in these networks.The future IP networks are relied upon to utilize IPv6 instead of IPv4, in light of the fact that IPv6 has been intended to fulfill the future system QoS necessities and IPv6 arrange offers huge points of interest over the current IPv4 organize. It will require a certain investment to change from IPv4 to IPv6. So that IPv4 and IPv6 will exist together amid the change period. In this examination, we embrace the Dual-Stack Transition Mechanism (DSTM) to think about system execution with scheduling algorithms applied QoS methods on (IPv4/IPv6) dual-stack traffic has been executed testbed created specifically for this study, with a view to validate the methods and evaluate the router’s overall execution. This paper is considered three queuing systems which are First In First Out (FIFO), Weighted Fair Queuing (WFQ) and Priority Queuing (PQ) as a comparative study to investigate their effects on real-time applications in (IPv4/IPv6) dual-stack networks support. Meet the simulation environment OPNET Modeler where the simulation results are collected and analyzed.The networks that have been styled consist of various pieces as a switch, device node, routers and servers. The performance metrics considered in this paperwork is jitter, end-to-end delay, traffic sent and received etc.

IPoE based campus network IPv4/IPv6 dual-stack admission control design and implementation

With the expansion of the campus network, various security risks have appeared. Most campus networks have implemented AAA, but seldom implemented admission control, which decreases the efficiency of dynamic allocation of IP addresses and makes it possible for users to avoid traffic billing. In order to realize the admission control of IPv4/IPv6 dual-stack network in large-scale campus network, we design and implement IPoE-based dual-stack admission control for the campus network in Tsinghua University. In IPoE, users can obtain IP address by DHCP with Ethernet physical link access. Authentication is achieved through a variety of user authentication methods. IP packets are encapsulated in Ethernet and pass through the access network to BRAS devices. BRAS devices find the user's address assignment information based on the client hardware address and the current Vlan ID after receiving the client's DHCP confirmation request message. Our main contributions include: for the various application scenarios under unified IPv4/IPv6 network, session-level IPoE technology is proposed; with the application of different configuration template in different protocol stack, various account control policy is submitted to AAA servers to achieve multi-type, multi-scenario requirements; to deal with the risk in large scale campus network, BRAS, AAA server, DHCP server can cooperate to realize that only authorized users are permitted to obtain addresses, thus avoid the security threats from unauthorized users; to cope with the high load pressure under large-scale deployment, the whitelist of webportal configured on the BRAS side reduces the load on webportal servers. The actual deployment shows that the dual-stack access authentication system has achieved the design objectives and runs smoothly.

DsNet: Dual stack network for detecting diabetes mellitus and chronic kidney disease

Diabetes mellitus and chronic kidney disease are two severe chronic diseases in the world, affecting the quality of a patient’s life. However, detecting these two diseases often applies professional medical techniques such as a Fasting Plasma Glucose test and estimating the glomerular filtration rate (eGFR) measurement, which usually requires a blood test. Given the various inconveniences and risks in existing conventional diagnostic approaches, noninvasive healthcare systems based on intelligent electronic detection/prevention are preferred. To achieve this goal, we propose a progressively trainable network, i.e., dual stack network (DsNet), to distinguish patients with chronic kidney disease, diabetes mellitus from healthy people simultaneously through analyzing the facial images of candidates. The first stack subnetwork extracts high-level representative features from the facial images effectively. While the second stack subnetwork can further analyze the extracted high-level features from the first stack subnetwork, before classifying the two diseases from healthy individuals simultaneously. Extensive experiments on a dataset with 229 healthy samples, 236 diabetes, and 200 chronic kidney disease patients show that our proposed method generated the F1-score of 95.33%, 98.17%, and 94.67% for detecting chronic kidney disease, diabetes, and healthy samples respectively. Our proposed DsNet achieves significant improvements compared with other traditional noninvasive detection approaches.

An approach to creating wireless network interface amongst IPv4, IPv6 and dual stack networks

The networking community is colossally moving towards the IPv6 addressing abandoning the IPv4 address space. This occurs because of the enormous development of Internet utilization over the networks. Government has mandated from June 2006 onwards that all the devices would be IPv6 ready as the postponement in the organization of IPv6 would bring about the negative effect of future development and worldwide network. In this paper we are managing the effect of various interfaces like IPv4 just, IPv6 just and Dual stack instrument over remote systems with changing PHY and MAC layer interface with various wireless standards. The outcomes of results are simulated over Qualnet 5.1 test system with different parameters like throughput, delay, jitter and packet delivery ratio is been calculated.

An approach to creating wireless network interface amongst IPv4, IPv6 and dual stack networks

An approach to creating wireless network interface amongst IPv4, IPv6 and dual stack networks

Path Aware Transport Layer Solution for Mobile Networks

The revolutionary Fifth Generation (5G) network technology has already been deployed in many countries to provide end-to-end quality-of-service for a wide variety of services, applications, and users with extremely diverse requirements. To accomplish the same, 5G architecture has enabled Multi-Connectivity (MC) in mobile devices, which aggregates various radio resources and enables simultaneous connectivity. Moreover, the current mobile devices are equipped with multiple network interfaces (Wi-Fi/Cellular) as well as dual-stack networks (IPv4/IPv6) support. But, their performance degrades significantly due to variation in network path quality. The current design of the Internet protocol suite has not adapted well to utilize these multiple interfaces for providing better network reliability. Hence, we propose a client only software solution called Path Aware Transport (PAT), which explores communication paths between client and server and adapts to the dynamics of the network to migrate from one Transmission Control Protocol (TCP) connection to another without hampering the user experience. PAT is prototyped and evaluated in 5G using the ns3 simulator. Moreover, it is implemented in the Samsung flagship mobile device with Android Pie. PAT significantly improves the content downloading time up to 20% and the page loading time up to 29% consistently.

Reducing User Perceived Latency in Smart Phones Exploiting IP Network Diversity

The Fifth Generation (5G) wireless networks set its standard to provide very high data rates, Ultra-Reliable Low Latency Communications (URLLC), and significantly improved Quality of Service (QoS). 5G networks and beyond will power up billions of connected devices as it expands wireless services to edge computing and the Internet of Things (IoT). The Internet protocol suite continues its evolution from IPv4 addresses to IPv6 addresses by increasing the adoption rate and prioritizing IPv6. Hence, Internet Service Providers (ISP's) are using the address transition method called dual-stack to prioritize the IPv6 while supporting the existing IPv4. But this causes more connectivity overhead in dual-stack as compared to the single-stack network due to its preference schema towards the IPv6. The dual-stack network increases the Domain Name System (DNS) resolution and Transmission Control Protocol (TCP) connection time that results in higher page loading time, thereby significantly impacting the user experience. Hence, we propose a novel connectivity mechanism, called NexGen Connectivity Optimizer (NexGenCO), which redesigns the DNS resolution and TCP connection phases to reduce the user-perceived latency in the dual-stack network for mobile devices. Our solution utilizes the IP network diversity to improve connectivity through concurrency and intelligent caching. NexGenCO is successfully implemented in Samsung flagship devices with Android Pie and further evaluated using both simulated and live-air networks. It significantly reduces connectivity overhead and improves page loading time up to 18%.

Dual-Stack Network Management Through One-Time Authentication Mechanism

The exhaustion of IPv4 addresses has led to the rapid implementation of IPv6. However, the design of IPv6 is incompatible with that of its predecessor IPv4 and slows down the development of the IPv4-to-IPv6 migration. Several transitioning mechanisms have been proposed to attain the compatibility of IPv4 and IPv6 to bridge the gap between these two heterogeneous protocols. The two protocols would need to coexist continually before IPv6 completely takes over IPv4. However, the existing captive portal authentication systems generally do not support IPv4/IPv6 dual-stack authentication and lack one-time dual-stack authentication solutions. Upgrading the authentication system has become an urgent problem to be addressed. This study presents dual-stack network management strategies using a novel one-time authentication mechanism for large and complex dual-stack network environments. The proposed authentication system resolves the inconvenience of separate IPv4 and IPv6 authentication and effectively improves the compatibility of the two protocols. Furthermore, authenticating both IPv4 and IPv6 increases the traceability of traffic logs when security attacks occur. The proposed solution is deployed in a campus dormitory environment, and the feasibility and stability are successfully verified.

Nor Effendy Othman, Rosilah Hassan, Abdul Hadi Abd Rahman, Dahlila Putri Dahnil Sikumbang, Khairul Azmi Abu Bakar

Mobility management nowadays plays a ­critical role in delivering a seamless and quality service to millions of users worldwide and it is transparent from the user's involvement. The current state of implementation and the introduction of transition is not focused on the implementation of mobility scenario communications protocol IPv4 over IPv6 protocol-based networks. The growing trend toward mobile access drives the development of mobility management in a dual-stack network environment. Implementation of IP mobility allows mobile users to roam from one network to another without causing significant network interruption. However, the existing implementation of dual-stack mobility does not provide an efficient platform for handling handover scenarios that leads to sub-optimal mobility experience. This study presents the implementation of the Distributed Mobility Management Proxy Mobile IPv6 (DMM PMIPv6) protocol on a dual-stack platform. This protocol was developed based on the concept of network in which the pointer is placed near the user's mobility or mobile node. The distributed control plane and the data infrastructure between entities are located on the edge of the access network which basically reduce the burden on the signalling process thus improving the handover performance. Therefore this study was initiated on existing protocol architecture for the implementation of mobility in the dual-stack scenario. This study proposes a dual-stack implementation of mobility based on DMM PMIPv6 protocol through IPv4 Home Address Mobility Support scenario that allows the mobile node capable of dual-stack and IPv4-based to communicate in IPv6-based network, in order to provide a better performance in terms of handover compared to the previous research implementations. DMM PMIPv6 Dual-Stack protocol testbed was implemented to investigate the handover performance. The results show that the mechanism provides better handover performance compared to the previous studies using PMIPv6 Dual-Stack implementation, thus able to provide a seamless connection to the user.

Measuring YouTube Content Delivery over IPv6

We measure YouTube content delivery over IPv6 using ∼100 SamKnows probes connected to dual-stacked networks representing 66 different origin ASes. Using a 34-months long (Aug 2014-Jun 2017) dataset, we show that success rates of streaming a stall-free version of a video over IPv6 have improved over time. We show that a Happy Eyeballs (HE) race during initial TCP connection establishment leads to a strong (more than 97%) preference over IPv6. However, even though clients prefer streaming videos over IPv6, we observe worse performance over IPv6 than over IPv4. We witness consistently higher TCP connection establishment times and startup delays (∼100 ms or more) over IPv6. We also observe consistently lower achieved throughput both for audio and video over IPv6. We observe less than 1% stall rates over both address families. Due to lower stall rates, bitrates that can be reliably streamed over both address families are comparable. However, in situations, where a stall does occur, 80% of the samples experience higher stall durations that are at least 1s longer over IPv6 and have not reduced over time. The worse performance over IPv6 is due to the disparity in the availability of Google Global Caches (GGC) over IPv6. The measurements performed in this work using the youtube test and the entire dataset is made available to the measurement community.

Analysis of IPv6 through Implementation of Transition Technologies and Security Attacks

IPv6 provides more address space, improved address design, and greater security than IPv4. Different transition mechanisms can be used to migrate from IPv4 to IPv6 which includes dual stack networks, tunnels and translation technologies. Within all of this, network security is an essential element and therefore requires special attention. This paper analyses two transition technologies which are dual stack and tunnel. Both technologies are implemented using Cisco Packet Tracer and GNS3. This work will also analyse the security issues of IPv6 to outline the most common vulnerabilities and security issues during the transition. Finally, the authors will design and implement the dual stack, automatic and manual tunnelling transition mechanisms using Riverbed Modeler simulation tool to analyse the performance and compare with the native IPv4 and IPv6 networks.

Configuration analysis and recommendation: Case studies in IPv6 networks

Unraveling the characteristics of configurations can offer deep insights into networks. There are many analyses of IPv4 configurations, while few works are focusing on configurations of IPv6. In this paper, we conduct a first-ever study on IPv6 configurations based on the configuration snapshots of a pure IPv6 network – CERNET2 and a dual-stack network – Internet2. We find that configuration commands of IPv6 are a bit more complicated than IPv4 because of the complexity of IPv6 addresses. Configuration command lines of IPv6 are less abundant than IPv4, attributing to the smaller network scale of IPv6 compared with IPv4. Configurations of IPv6 are less complicated than IPv4 in views of referential dependence, but present a higher growth rate than IPv4, which is caused by fast development of IPv6. More importantly, we propose a framework for network configuration recommendation (FNCR) for the studied networks according to our analysis methods and results. Overall, although IPv6 is smaller in scale and less mature than IPv4 currently, it has been experiencing fast development as the next generation networks. Hence understanding configuration characteristics and enhancing configuration management are essential for IPv6 networks.

Study on Migration from IPv4 to IPv6 of a Large Scale Network

This work mainly addresses the design a large scale network using dual stack mechanisms. We concentrated on the most imperative theoretical notions of the IPv6 protocol, such as IP addressing, address allocation, routing with the OSPF and BGP protocols and routing protocols performance in dual stack network using GNS3 simulations and Wireshark Network protocol analyzer. It is evaluate a real large-scale network environment utilizing accessible end-to-end estimation methods that focuses on a large-scale IPv4 and IPv6 backbone and made performance the IPv4 and IPv6 network. In this paper, we compiled IPv6 address planning in a large scale network, performance metrics of each network in terms of time sequence graph, round trip time, TCP throughput, TCP connection time and the number of TCP connections per second that a client can establish with a remote server. It is found that, a minor degradation in the throughput of the TCP, TCP response time and a lower packet loss rate are arise in a real large scale dual stack network. We also showed a concise case study on relationship between RTT and network topology, which is cooperative to develop the performance of IPv6 networks. The result shows the proposed scheme for network migration from IPv4 to IPv6 is more reliable than other existing schemes.

On the Migration of a Large Scale Network from IPv4 to IPv6 Environment

This work mainly addresses the design a large scale network using dual stack mechanisms. We focused on the most important theoretical concepts of the IPv6 protocol, such as addressing, address allocation, routing with the OSPF and BGP protocols and routing protocols performance in dual stack network using GNS3 and Wireshark simulators. we have a tendency to measure a perfect model and a true large-scale network atmosphere victimization out there end-to-end activity techniques that focuses on a large-scale IPv4 and IPv6 backbone and created performance the IPv4 and IPv6 network. In this paper, we compiled IPv6 address planning in large scale network, performance statistics of each network in terms of TCP throughput, delay jitters, packet loss rate, and round trip time. It is found that, a minor degradation within the throughput of the TCP, delay jitter, a lower packet loss rate, and a rather longer round trip time are occurred in a real large scale dual stack network.

Design of Three-dimensional Interchange Network Based on IPv4/IPv6 Network

The present universities are deploying IPv6 campus network actively, protecting the existing investment and equipment need a gradual transition process safely. In order to achieve the fast communication between IPv4 /IPv6 hybrid network, a BRT three-dimensional interchange system is proposed. By introducing kinds of technologies and communication solutions in this paper, the system is realized by building the BRT IPv6 channel in Dual-stack network， and finally designed that achieves the network fast intercommunication in IPv4 and IPv6 hybrid campus network, as well as resolves IPv6 occupying IPv4 communication channel in dual-stack network to increase the network burden question.

An Efficient Service Discovery System for Dual-Stack Cloud File Service

Cloud services have attracted much attention in recent years as networking systems for the information connection devices of organizations or enterprises around the world have become increasingly sophisticated. Cloud services also provide a variety of services for users, including virtual hosting services, storage services, and Web application services. Distributed computing and the peer-to-peer (P2P) network are two important elements in cloud computing. However, the huge numbers of information devices currently in use present some new problems, such as the lack of IPv4 protocol addresses. Therefore, the IPv6 protocol was proposed. During the transition period from pure IPv4 to pure IPv6, IPv4 and IPv6 will coexist on the Internet. To link independent dual-stack P2P networks around the world, we herein propose a mechanism to improve the service discovery in dual-stack cloud file service, thus decreasing the amount of protocol translation and improving the efficiency of the bandwidth and load balance. From the simulation results, we conclude that the proposed mechanism can achieve higher connection success rate, efficient bandwidth, and a lower connection build time. Our paper indicates that the connection success rate and efficient bandwidth outperforms the other schemes by approximately 20% and 24%, respectively.

IPv6 이관, IPv6 기반의 OSPFv3 라우팅, IPv4/IPv6 듀얼 스택 네트워크와 IPv6 네트워크: 모델링, 시뮬레이션

이 논문의 목적은 시뮬레이션 소프트웨어인 OPNET Modeler의 IPv6 Planning and Operations를 이용하여 IPv6 이관, IPv6 기반의 OSPFv3 라우팅 실험, OSPFv3 라우팅에 대한 IPv4/IPv6 듀얼 스택 네트워크와 IPv6 네트워크 Ping 실험을 가상망으로 모델링 후 종단간 라우팅 순환경로 관찰과 Ping 실험을 시뮬레이션하여 그 특성을 분석한 연구이다. 거대한 유무선 통합망을 토대로 한 IPv6 배치는 연구 과제 중 하나이며 이전문헌의 연구자들이 향후 연구로 남겨 놓은 OSPFv3와 EIGRP에 대한 성능 매트릭 분석을 IPv4/IPv6 환경 내에서 수행 계획과 어떻게 하면 종단간 IPv6 성능을 향상할 수 있는지를 탐색할 계획을 들 수 있다. 또한 IPv4 네트워크 상에 연구를 수행했으나 종단간 IPv6 기반의 OSPFv3 가상망 연구 수행은 없었던 점을 들 수 있다. 따라서 우리는 이전문헌의 연구를 이어서 IPv6 이관, IPv6 기반의 OSPFv3 라우팅, IPv4/IPv6 듀얼 스택 네트워크와 IPv6 네트워크에 대한 모델링, 시뮬레이션을 수행하였다. 머지않은 미래에 본격적인 IPv6 활용 이전, IPv6 기반의 가상망을 IPv6 Planning and Operations 이용한 IPv6 이관 여부, 종단간 IPv6 기반의 OSPFv3에 대한 라우팅 순환 경로 탐색, OSPFv3 라우팅에 대한 IPv4/IPv6 듀얼 스택 네트워크와 IPv6 네트워크 Ping 실험으로 앤드유저 관점에 대한 IPv6 망 설계와 배치시 도움을 받을 것이다. 시뮬레이션 결과, 모델링된 종단간 가상망에 대한 최적 경로를 관찰할 수 있었고 인터넷 서비스 품질을 보장하는 VC 서버가 HTTP 서버보다 더 빠른 Ping 응답 시간을 보인 점을 알 수 있었다. The objective of this paper is to analyze and characterize to simulate routing observations on end-to-end routing circuits and a ping experiment of a virtual network after modeling, such as IPv6 migration, an OSPFv3 routing experiment based on an IPv6 environment, and a ping experiment for IPv4/IPv6 dual-stack networks and IPv6 network for OSPFv3 routing using IPv6 planning and operations in an OPNET Modeler. IPv6 deployment based largely on the integrated wired and wireless network was one of the research tasks at hand. The previous studies' researchers recommended that future research work be done on the explicit features of both OSPFv3 and EIGRP protocols in the IPv4/IPv6 environment, and more research should be done to explore how to improve the end-to-end IPv6 performance. Also, most related work was performed with an IPv4 environment but lacked studies related to the OSPFv3 virtual network based on an end-to-end IPv6 environment. Hence, this research continues work in previous studies in analyzing IPv6 migration, an OSPFv3 routing experiment based on IPv6, and a ping experiment for IPv4/IPv6 dual-stack networks and IPv6 network for OSPFv3 routing. In the not too distant future, before enabling the default IPv6, it would help to understand network design and deployment based on an IPv6 environment through IPv6 planning and operations for the end-user perspective such as success or failure of connection on IPv6 migration, exploration of an OSPFv3 routing circuit based on an end-to-end IPv6 environment, and a ping experiment for IPv4/IPv6 dual-stack networks and IPv6 network for OSPFv3 routing. We were able to observe an optimal route for modeling of an end-to-end virtual network through simulation results as well as find what appeared to be a fast ping response time VC server to ensure Internet quality of service better than an HTTP server.