Internet Protocol Version 6 Address Research Articles

Building IPv6 addressing scheme using Hybrid Duplicate Address Detection to prevent Denial of Service Attack

Internet Protocol version 6 (IPv6) address configuration is needed to meet the needs of current portable devices and wearable applications, where each device needs its own unique identification number. High complexity in Wireless Sensor Network (WSN) and Internet of Things (IoT) environments has increased challenges, such as low energy consumption and high overhead in IPv6 address configuration. The proposed IPv6 generation is based on a hybrid mathematical approach that retains the IP address’s confidentiality and prevents Denial of Service (DoS) attacks from new and existing nodes in the network. In this paper, the proposed hybrid protocol for DoS attacks from new and existing nodes is analyzed. It is evident from the results that the rate of successful configuration, overhead, and energy consumption is found to be better than the existing approach, namely, Programming Protocol-independent Packet Processors Duplicate Address Detection (P4DAD), match prevention technique, etc.

A Survey on Internet Protocol version 4 (IPv4)

Internet Protocol version 4 (IPv4) is an internetwork protocol that is active at the internet layer according to the TCP/IP model, it was developed in 1981 within a project managed by Defense Advanced Research Projects Agency. In the following years, the use of IPv4 grew to dominate data networks around the world, becoming the backbone of the modern Internet. In this survey, we highlight the operation of the protocol, explain its header structure, and show how it provides the following functions: Quality of service control, host addressing, data packet fragmentation and reassembly, connection multiplexing, and source routing. Furthermore, we handle both address-related and fragmentation-related implementation problems, focusing on the IPv4 address space exhaustion and explaining the short and long terms proposed solutions. Finally, this survey highlights several auxiliary protocols that provide solutions to IPV, namely address resolution, error reporting, multicast management, and security.

Contribution to Optimization and Evaluation of IPv6 Signals Based Constrained Devices Networks

Small Objects Networks is a wireless network that we used to define any type of network. These networks use the IPv6 protocol for communication. Indeed, it allows, via standardized and unified electronic identification systems, to identify directly, unambiguously physical objects and thus ability to retrieve, store, transfer, and process related data. In such a network, the IPv6 Neighbor Discovery protocol is used by an object to communicate with its neighbors in order to establish the relationship between the IPv6 (Internet Protocol Version 6) address and that MAC. Since the NDP (Neighbor Discovery Protocol) messages are relatively long and large, several operating parameters, such as power consumption, are affected accordingly which reduces the lifetime of the connected objects and adversely affects the proper functioning of the network. The goal of our paper is to reduce the use of these messages in 6lowpan networks to minimize energy consumption and maximize network lifetime… The results of our simulation show a big reduction of the signals used in the network compared to the standard NDP-RFC4861. Our algorithm also shows better performance in terms of energy consumption.

DHCPv6Auth: a mechanism to improve DHCPv6 authentication and privacy

Internet Protocol version 6 (IPv6) deployment continues to gain ground due to the increasing demand for IP addresses generated by the number of Internet facing devices, and it is compounded by the exhaustion of allocatable IPv4 addresses. Dynamic Host Configuration Protocol version 6 (DHCPv6) is used to allocate IPv6 addresses and distribute network configuration information to IPv6 hosts in a link-local network. However, DHCPv6 messages in transit expose identifiable information of the DHCPv6 client that could be used by malicious users to track their victims. Additionally, the lack of an authentication mechanism leaves IPv6 hosts vulnerable to rogue DHCPv6 server attacks. This paper introduces DHCPv6 Authentication (DHCPv6Auth) mechanism to prevent rogue DHCPv6 server attacks and protect the privacy of IPv6 hosts. DHCPv6Auth uses the Ed25519 digital signature algorithm for authentication and could be used in conjunction with Anonymity Profile mechanisms for privacy protection. The DHCPv6Auth mechanism was compared with other mechanisms in terms of processing time, prevention of rogue DHCPv6 server attack, and protection of users’ privacy. The results show that it requires less processing time and traffic overhead than other authentication mechanisms; is able to prevent rogue DHCPv6 server attacks; and provides better privacy protection for the IPv6 host than other authentication mechanisms to which it was compared.

The hidden standards war: economic factors affecting IPv6 deployment

Purpose The data communications protocol supporting the internet protocol version 4 (IPv4) is almost 40 years old, and its 32-bit address space is too small for the internet. A “next-generation” internet protocol version 6 (IPv6), has a much larger, 128-bit address space. However, IPv6 is not backward compatible with the existing internet. For 20 years, the internet technical community has attempted to migrate the entire internet to the new standard. This study aims to address important but overlooked questions about the internet’s technical evolution: will the world converge on IPv6? Will IPv6 die out? or will we live in a mixed world for the foreseeable future? Design/methodology/approach The research offers an economically-grounded study of IPv6’s progress and prospects. Many promoters of IPv6 sincerely believe that the new standard must succeed if the internet is to grow, and assume that the transition is inevitable because of the presumed depletion of the IPv4 address resources. However, by examining the associated network effects, developing the economic parameters for transition, and modeling the underlying economic forces, which impact network operator decisions, the study paints a more complex, nuanced picture. Findings The report concludes that legacy IPv4 will coexist with IPv6 indefinitely. IPv6 is unlikely to become an orphan. For some network operators that need to grow, particularly mobile networks where the software and hardware ecosystem is mostly converted, IPv6 deployment can make economic sense. However, the lack of backward compatibility with non-deployers eliminates many network effects that would create pressure to convert to IPv6. A variety of conversion technologies, and more efficient use of IPv4 addresses using network address translation, will support a “mixed world” of the two standards for the foreseeable future. Originality/value The authors’ conceptualization and observations provide a clearer understanding of the economic factors affecting the transition to IPv6.

Securisation of an IPv6 Address Obtaining with SLAAC in Home Networks

In this article, we present a new method based on the securisation of an IPv6 (Internet Protocol version 6) address obtaining with the SLAAC (Stateless Address Autoconfiguration) method in the domestic network. The particularity of our domestic network is the presence of several Multihoming Internet service providers. The peripherals of the Home Network domain, especially routers are in charge of the relay of auto configuration messages coming from various routers of internet access providers. Our method allows the routers of the Home Network domain to filter the announcements of autoconfigurations called RA (Router Advertisements) according to the IPv6 addresses sources contained in the messages of autoconfiguration. The decision to relay or reject these announcements is based on a trusted table built from the addressing information obtained from the NDP protocol. Our method also aims to optimize the traffic in the Home Network domain by organizing routers to give them specific roles for the relay of information for autoconfiguration.

Performance Evaluation of IPv4 and IPv6 over MPLS using OPNET

Over the last two decades, we have witnessed a rapid deployment of real-time applications on the Internet and many research works focus on Quality of Service (QoS), in particular using IPv4 (Internet Protocol Version 4). The inevitable exhaustion of the remaining IPv4 address pool has become progressively evident and as a result the evolution of Internet Protocol (IP) continues leading to the deployment of IPv6 QoS. Today, there is limited experience in the deployment of QoS for IPv6 traffic in MPLS backbone networks in conjunction with DiffServ (Differentiated Services) support. DiffServ itself does not have the ability to control the traffic flow whereas MPLS Traffic Engineering (TE) can control the traffic and can set up end-to-end routing path before data can be forwarded. Multi-Protocol Label Switching (MPLS) plays a key role in next generation networks by delivering QoS and traffic engineering features which is helpful in managing traffic when some links or paths are under and/or over utilized This paper presents a QoS performance study of some applications such as voice, video conferencing, mail and web over DiffServ with MPLS in IPv4/IPv6 networks using Optimized Network Engineering Tool (OPNET). The effectiveness of DiffServ and MPLS integration in IPv4/IPv6 network is illustrated and analyzed.

ENHANCED ENCAPSULATED SECURITY PAYLOAD A NEW MECHANISM TO SECURE INTERNET PROTOCOL VERSION 6 OVER INTERNET PROTOCOL VERSION 4

A considerable amount of time will be needed before each system in the Internet can convert from Internet Protocol version 4 (IPv4) to Internet Protocol version 6 (IPv6). Three strategies have been proposed by the Internet Engineer Task Force (IETF) to help the transition from IPv4 to IPv6 which are dual stack, header translation and tunneling. Tunneling is used when two computers using IPv6 want to communicate with each other and the packet will travel through a region that uses IPv4. To pass through this region, IPv6 packet must be encapsulated in IPv4 packet to have an IPv4 address in order to make it IPv4 routing compatible. Internet Protocol security (IPsec) in transport mode carries the payload of the encapsulating packet as a plain data without any mean of protection. That is, two nodes using IPsec in transport mode to secure the tunnel can spoof the inner payload; the packet will be de-capsulated successfully and accepted. IETF mentioned this problem in many RFCs. According to RFC 3964 there is no simple way to prevent spoofing attack in IPv6 over IPv4 tunnel and longer term solutions would have to be deployed in both IPv4 and IPv6 networks to help identify the source of the attack, a total prevention is likely impossible. This study proposed a new spoofing defense mechanism based on IPsec’s protocol Encapsulated Security Payload (ESP). ESP’s padding area had been used to write the IPv6 source address of the encapsulated packet. Simulation is conducted based on two scenarios, one with spoofing attack and one without. The outcome proved that proposed mechanism has managed to eliminate spoofing threat in IPv6 over IPv4 tunnel.

Vehicular ad hoc networking based on the incorporation of geographical information in the IPv6 header

Several approaches can be identified in the domain of vehicular ad hoc networks (VANET). Internet Protocol version 6 (IPv6) networking and non-IP geographical networking can each fulfill a subset of the application requirements. In general, a combination of both techniques is proposed to meet all of the application requirements. In this case, packets of one VANET routing protocol are encapsulated inside packets of another. This tunneling, together with the position service required for non-IP geographical unicasting, makes such a combined solution rather complex, and hence more challenging to implement, debug, and maintain. In this article, a new VANET approach is presented that relies on the key assumptions that geo-anycast functionality is not required by the applications, and that geographic unicasting is not needed when IP-based unicasting is provided. This enables the adoption of an IPv6-only VANET solution, removing the need for tunneling and position services. New techniques are required to support IPv6-based geo-broadcasting. In this article, it is described how addresses should be assigned, how geographical data can be incorporated in the IPv6 address, how the other IPv6 header fields can be used to contain additional VANET information, and how routing should be handled to guarantee that no modifications are required to the application units. The implementation of the proposed techniques is described, and the correct functionality of the solutions is experimentally demonstrated. Finally, to prove the added value compared to current state-of-the-art propositions, the presented solution is stacked up against the recently released ETSI standards TS 102 636-4-1 (geographical addressing and forwarding) and TS 102 636-6-1 (transmission of IPv6 packets over GeoNetworking protocols).

A secure IPv6 address configuration scheme for a MANET

ABSTRACTWe propose a secure Internet Protocol version 6 (IPv6) address configuration scheme for a Mobile Ad Hoc Network. The scheme presents the architecture for a Mobile Ad Hoc Network and the hierarchical IPv6 address structure. In the architecture, a new node can acquire a unique IPv6 address from a proxy node within one‐hop scope without performing a duplicate address detection process, and the IP addresses occupied by failed nodes can be recovered automatically for reuse. On the basis of the hierarchical IPv6 address structure, each proxy node can acquire a unique address scope for assignment and assign a unique IP address for new nodes, so the address configuration task is distributed around proxy nodes. In addition, the transmission scope of the control packets for address configuration is controlled within one‐hop scope, so the address configuration cost is reduced, and the delay is shortened. The security of the proposed address configuration scheme is achieved through authentication. The paper analyzes the performance parameters of the proposed scheme and the existing schemes, and the analytical results show that the address configuration cost of the proposed scheme is lower and the delay is shorter. Copyright © 2012 John Wiley & Sons, Ltd.

Effect Of Packet Delay Variation On Video/Voice Over Diffserv-Mpls In Ipv4/Ipv6 Networks

Over the last years, we have witnessed a rapid deployment of real-time applications on the Internet as well as many research works about Quality of Service (QoS), in particular IPv4 (Internet Protocol version 4). The inevitable exhaustion of the remaining IPv4 address pool has become progressively evident. As the evolution of Internet Protocol (IP) continues, the deployment of IPv6 QoS is underway. Today, there is limited experience in the deployment of QoS for IPv6 traffic in MPLS backbone networks in conjunction with DiffServ (Differentiated Services) support. DiffServ itself does not have the ability to control the traffic which has been taken for end-to-end path while a number of links of the path are congested. In contrast, MPLS Traffic Engineering (TE) is accomplished to control the traffic and can set up end-to-end routing path before data has been forwarded. From the evolution of IPv4 QoS solutions, we know that the integration of DiffServ and MPLS TE satisfies the guaranteed QoS requirement for realtime applications. This paper presents a QoS performance study of real-time applications such as voice and video conferencing in terms of Packet Delay Variation (PDV) over DiffServ with or without MPLS TE in IPv4/IPv6 networks using Optimized Network Engineering Tool (OPNET). We also study the interaction of Expedited Forwarding (EF), Assured Forwarding (AF) traffic aggregation, link congestion, as well as the effect of performance metric such as PDV. The effectiveness of DiffServ and MPLS TE integration in IPv4/IPv6 network is illustrated and analyzed. This paper shows that IPv6 experiences more PDV than their IPv4 counterparts.

Potential Impacts on Communications from IPv4 Exhaustion & IPv6 Transition

The Internet is in transition. The original address space, IPv4, is nearly exhausted; the Internet is in the progress of migrating to the new IPv6 address space. The Internet Protocol version 4 (IPv4) developed in the late 1970s has the capacity for about 4 billion unique addresses. It would have been hard to imagine in the 1970s that 4 billion addresses were not going to be enough. But by the early 1990s, Internet engineers recognized that the supply of addresses was relatively limited compared to likely demand, and they set to work designing a successor to IPv4. They developed a new Internet Protocol, IPv6, with a vastly increased address space: 340 trillion trillion trillion addresses. Broadband Internet access has become essential to the United States and the rest of the world. The exhaustion of IPv4 addresses and the transition to IPv6 could result in significant, but not insurmountable, problems for broadband Internet services. In the short term, to permit the network to continue to grow, engineers have developed a series of kludges. These kludges include more efficient use of the IPv4 address resource, conservation, and the sharing of IPv4 addresses through the use of Network Address Translation (NAT). While these provide partial mitigation for IPv4 exhaustion, they are not a long-term solution, increase network costs, and merely postpone some of the consequences of address exhaustion without solving the underlying problem. Some of these fixes break end-to-end connectivity, impairing innovation and hampering applications, degrading network performance, and resulting in an inferior version of the Internet. These kludges require capital investment and ongoing operational costs by network service providers, diverting investment from other business objectives. Network operators will be confronted with increased costs to offer potentially inferior service. The short term solutions are necessary because there is not enough time to completely migrate the entire public Internet to native IPv6 where end users can communicate entirely via IPv6. Network protocol transitions require significant work and investment, and with the exhaustion of IPv4 addresses looming, there is insufficient time to complete the full IPv6 transition. But the short-term solutions are problematic. The solution to the solution is to complete the transition to a native IPv6 network. A native IPv6 network will restore end-to-end connectivity with a vastly expanded address space, will improve network performance, and should decrease costs. Completing the transition of the public Internet to IPv6 will take time.

S-curve networks and an approximate method for estimating degree distributions of complex networks

In the study of complex networks almost all theoretical models have the property of infinite growth, but the size of actual networks is finite. According to statistics from the China Internet IPv4 (Internet Protocol version 4) addresses, this paper proposes a forecasting model by using S curve (logistic curve). The growing trend of IPv4 addresses in China is forecasted. There are some reference values for optimizing the distribution of IPv4 address resource and the development of IPv6. Based on the laws of IPv4 growth, that is, the bulk growth and the finitely growing limit, it proposes a finite network model with a bulk growth. The model is said to be an S-curve network. Analysis demonstrates that the analytic method based on uniform distributions (i.e., Barabási-Albert method) is not suitable for the network. It develops an approximate method to predict the growth dynamics of the individual nodes, and uses this to calculate analytically the degree distribution and the scaling exponents. The analytical result agrees with the simulation well, obeying an approximately power-law form. This method can overcome a shortcoming of Barabási-Albert method commonly used in current network research.

Fast restorable prefix-preserving IP address anonymization for IPv4/IPv6

To protect the privacy of end users and the security of networks, prefix-preserving anonymization has been proposed before traffic traces being made publicly available by data providers. However, existing anonymization algorithms don't perform well for IPv6 address anonymization and many of these anonymization schemes don't have corresponding reversible algorithms which are necessary because sometimes the traces owners want to know the original information from the research results when serious attacks happened. In this paper, we propose a fast restorable anonymization algorithm (FRAA) based on divisional anonymization scheme and use reversible tree for recovery as well as a reference model for traffic traces publishing. We further analyze the security properties of FRAA and compare its performance against previous well known studies. Experimental results show that FRAA performs better for both internet protocol version 4 (IPv4) and internet protocol version 6 (IPv6) anonymization and the recovery process of FRAA has the same computation complexity with the anonymization process. With the reference model, traffic traces owner can make traffic traces publicly in a reliable and secure way.

Research on network address mapping algorithm in IPv6 private network

Internet protocol version 6 (IPv6)-to-IPv6 network address translation (NAT66) is a new technology, which is proposed to provide the address independence benefit associated with IPv4-to-IPv4 NAT (NAT44) while minimizing the problems. Some corporate network managers may deploy NAT66 in their internal IPv6 network to hide their topology, to utilize multi-homing and so on. This paper introduces the checksum-neutral two-way network address mapping algorithm used in ANT66 to solve the problem of network translation from an IPv6 address to another in global systems engineering (GSE) mode and implements it both in a Linux host and a customer-provided equipment (CPE) router with netfilter/iptables. Meanwhile, this paper gives the experimental results in IPv6 network to show the performance.

Mobile IPv6-based ad hoc networks: its development and application

The Internet protocol version 6 (IPv6)-enabled network architecture has recently attracted much attention. In this paper, we address the issue of connecting mobile ad hoc networks (MANETs) to global IPv6 networks, while supporting IPv6 mobility. Specifically, we propose a self-organizing, self-addressing, self-routing IPv6-enabled MANET infrastructure, referred to as IPv6-based MANET. The proposed self-organization addressing protocol automatically organizes nodes into tree architecture and configures their global IPv6 addresses. Novel unicast and multicast routing protocols, based on longest prefix matching and soft state routing cache, are specially designed for the IPv6-based MANET. Mobile IPv6 is also supported such that a mobile node can move from one MANET to another. Moreover, a peer-to-peer (P2P) information sharing system is also designed over the proposed IPv6-based MANET. We have implemented a prototyping system to demonstrate the feasibility and efficiency of the IPv6-based MANET and the P2P information sharing system. Simulations are also conducted to show the efficiency of the proposed routing protocols.