IPv6 Networks Research Articles

IPv6NC Network Coding Protocol Based on IPv6 Extension Headers

Subject of the research. The paper presents a new IPv6NC network coding protocol based on the use of IPv6 network protocol extension headers. Purpose. Development of a data transfer protocol based on the analysis of existing principles and models of network coding, as well as the use of IPv6 protocol extension headers to transfer network coding parameters. Methods. Analysis of existing principles and models of network coding, as well as the use of IPv6 extension headers for transmitting network coding parameters. Results. The paper describes application of developed protocol for different network coding approaches and presents network coding parameters to be transmitted in packet headers to perform network coding and guideline of their representation in the type-length-value format for standard IPv6 extension headers. Also the paper gives the structure of a special extension header for transmitting network coding parameters. Novelty. For the first time, IPv6 uses extension headers for networc coding. Practical relevance. The developed protocol is intended for the implementation of multicast transmission and relay with network coding in various data transmission systems.

Performance Evaluation of HTTP, DHCP and DNS Protocols of Data Packets for Vulnerabilities Using the Isolation Forest Algorithm

In the contemporary digital landscape, network security is paramount to safeguard data integrity and prevent unauthorized access as data have been structured in the network through protocols. In term of data structure IPv6 protocol has extended data size due to the robust addresses of 128 bits as compare to 32 bits of IPv4. Due to the improved security data structure of IPv6, the study focuses on identifying vulnerabilities in HTTP, DHCP, and DNS packets using the Isolation Forest algorithm approach, a machine-learning technique designed for anomaly detection. By analyzing packet lengths, size, payload and addressing, the study visualizes normal and anomalous behavior, providing insights into potential security threats in IPv4 network structure. The results highlight the effectiveness of Goodput, Quality of service and risk as essential factors in the network, using Little's theorem analysis and the Isolation Forest in detecting anomalies across these different network protocols, offering valuable implications for network security structures, due to IoT in recent networks. The time response determination in this paper explained details information on the time the treats entered the network, the duration of the vulnerabilities within the network, leading to a certain threshold, and traffic delay factors due to deviation of packet length and other social engineering activities. Sensitive multipurpose security devices are involved; MikroTik routers were configured and installed in the network under evaluation. Which the normal DPI technique was unable to effectively and efficiently addressed. ADPI principles and operations where the needed security measures adopted to detect those vulnerabilities which were eventually addressed and have contributed to recent measures of network security.

Early Address Detection: A Soft Vertical Handover Approach in Proxy Mobile IPv6

Study’s Excerpt Handover technique for Proxy Mobile IPv6 (PMIPv6) networks through a proactive IP address allocation approach is introduced. It significantly reduces handover-blocking probability and latency, thereby ensuring smoother transitions between WLAN and WiMAX domains. It is proved to be superior to velocity-aware handover methods. Full Abstract This study presents an enhanced handover technique for Proxy Mobile IPv6 (PMIPv6) networks aimed at improving mobility management in heterogeneous wireless environments. The proposed scheme introduces a proactive approach where the anchor Local Mobility Anchor (LMA) obtains IP addresses for the Mobile Node (MN) before it leaves the home network, facilitating faster handovers between Wireless Local Area Network (WLAN) and Worldwide Interoperability for Microwave Access (WiMAX) domains. The performance of the proposed scheme was evaluated through both mathematical analysis and network simulation, comparing it with a velocity-aware handover approach. Three key metrics were assessed: handover completion probability, handover latency, and packet loss ratio. Mathematical modeling demonstrated the scheme’s effectiveness in reducing handover-blocking probability and latency across various MN velocities. Simulation results, conducted using NS2.35, further established these findings, showing improvements in the number of successful handovers, reduced handover delay, and decreased packet loss compared to the velocity-aware approach. The study’s outcomes indicate that the proposed scheme offers a more efficient handover mechanism, particularly beneficial for maintaining service continuity in heterogeneous network environments.

BCDM: An Early-Stage DDoS Incident Monitoring Mechanism Based on Binary-CNN in IPv6 Network

BCDM: An Early-Stage DDoS Incident Monitoring Mechanism Based on Binary-CNN in IPv6 Network

Evaluating the Advantages and Disadvantages of Transition Technologies for IPv6 in the Context of IPv4-as-a-Service

The shift towards IPv6 has led to the emergence of various IPv4-as-a-Service (IPv4aaS) transition technologies that allow the provisioning of IPv4 connectivity over IPv6 networks. The six main IPv4aaS mechanisms – 464XLAT, DS-Lite, Lightweight 4over6, MAP-E, MAP-T, and D4across6 – are compared in this study. We assess these protocols’ performance under a range of network situations using detailed simulation modeling in the ns-3 network simulator. With 100 nodes, we simulate an ISP-scale network architecture. We then configure several routing protocols, traffic patterns, connection delays, and implement each protocol according to its request for proposals. Different random seeds are used for each simulation run, and variables like packet sizes, routing protocols, and traffic loads are varied. The key performance parameters that are gathered are protocol overhead, packet loss, delay, and throughput. Important insights into the workings of each mechanism and how they tackle the problems of coexisting IPv4 and IPv6 under various network circumstances are provided by our thorough examination. The findings demonstrate how much better 464XLAT and D4across6 perform in most situations in terms of low latency, high throughput, minimal packet loss, and low overhead. This site may help network operators locate IPv4aaS solutions that meet their requirements and implementation procedures. Networking must alter transition technologies. This study improves comprehension of IPv4aaS protocols via trustworthy simulations.

Making stateless and stateful network performance measurements unbiased

The Benchmarking Working Group (BMWG) of the Internet Engineering Task Force (IETF) has defined a series of Requests for Comments (RFC) to standardize the benchmarking of network interconnect devices (e.g., bridges, routers, different IPv6 transition solutions). The paper points out that there are cases where the performance results are significantly different when a single IP address pair or multiple IP addresses are used. The cause of this phenomenon is rooted in the recent hardware and software advancements: Receive Side Scaling (RSS) makes it possible to distribute packet processing workload over multiple CPU cores. However, this may be implemented in two ways: the first way only includes the IP addresses into the hash function used to distribute the workload among the CPU cores, whereas the second one also includes the port numbers. RFC 4814 proposed an excellent solution for the second case by recommending the usage of pseudorandom port numbers during benchmarking; however, the first case was not handled properly, because no explicit recommendation was given regarding the usage of multiple IP addresses. This paper attempts to bridge this methodological gap; a practical solution is proposed for using pseudorandom IP addresses in various scenarios including the benchmarking of IPv4 and IPv6 routers and Network Address Translation from IPv6 Clients to IPv4 Servers (stateful NAT64) gateways. Its feasibility is shown by disclosing the details of its implementation in siitperf. Then the proposed solution is validated by both stateless and stateful tests. It is shown that the measurement results of the tests following the proposed solution can better characterize the true performance of the network interconnect devices that follow the first type of RSS implementation than the results of the tests using a single IP address pair.

Optimized Duplicate Address Detection for the Prevention of Denial-of-Service Attacks in IPv6 Network

In constrained IoT networks, Stateless Address Autoconfiguration (SLAAC) utilizes the Duplicate Address Detection (DAD) protocol to ensure the uniqueness of IPv6 addresses. However, the DAD employed in SLAAC is susceptible to various security vulnerabilities, including issues related to confidentiality, conflicting addresses, and spoofing attacks. Malicious nodes can exploit these weaknesses to perform Denial of Service (DoS) attacks by consistently claiming a tentative address, joining with conflicting address, or disclosing assigned address. Existing measures against DAD attacks have limitations, e.g. high computation, communication overhead, energy consumption, and major protocol modification. To address these challenges, this paper presents an innovative Optimized DAD (O-DAD) that is robust, scalable, and compliant with standard specifications. In O-DAD, the uniqueness of tentative IPv6 addresses is ensured in a way that neither new nor existing nodes have knowledge of each other's exact assigned addresses. O-DAD also hampers the ability of malicious nodes to spoof new/existing nodes. Experimental results demonstrate that the proposed solution effectively mitigates these attacks and exhibits superior performance in terms of Address Success Ratio (ASR), computational complexity, overhead, and energy consumption. When compared to Secure, Improved, and Standard DAD, the proposed scheme reduces overhead and energy by approximately 6%, 8%, and 15%, respectively.

AliasClassifier: A High-Performance Router Alias Classifier

The task of router alias resolution for IPv4 networks presents a formidable challenge in the realm of router-level topology inference. Despite the considerable potential exhibited by machine-learning-based alias-resolution methods for IPv4 networks, several constraints impede their effectiveness. These constraints include a low discovery rate of aliased IPs, a failure to account for router aggregation, and a dearth of valid features in current schemes. In this study, we introduce a novel alias resolver, AliasClassifier, which is based on the Random Forest model and the alias triangulation algorithm. This innovative model identifies the key six features from a set of four prevalent routing behaviors that are typically employed to distinguish aliased IPs from non-alienated IPs. Subsequently, the AliasClassifier aggregates aliased IP pairs into routers using an alias triangulation algorithm. Experimental results demonstrate that AliasClassifier excels in discovering aliased IPs in IPv4 networks, boasting a resolution accuracy as high as 94.8% and a recall rate of 40.4%. Its comprehensive performance significantly surpasses that of state-of-the-art alias resolvers such as TreeNET, MLAR, and APPLE. Furthermore, as a typical centralized alias parser, AliasClassifier’s deployment cost is remarkably low. Consequently, AliasClassifier emerges as an ideal tool for router alias resolution in large-scale IPv4 networks.

Exploring IP Address Allocation Methods: A Comprehensive Analysis

Over the past 25 years, the current version of the Internet Protocol (IPv4) has remained largely unchanged. Its robustness and ease of implementation have made it a staple in networking. As the groundwork for IPv6 deployment was laid in the early stages, IPv4-based networks began preparations for the transition. This transition progressed through stages: initially, both IPv4 and IPv6 coexisted, then IPv6 gradually took precedence, leading to the eventual withdrawal of IPv4 networks from the market. Throughout this evolution, researchers developed various transition mechanisms tailored to different network infrastructures and stages of evolution. This paper conducts a comprehensive examination of IPv4, including its smart saving techniques, aimed at delaying the shift from IPv4 to IPv6. Additionally, it delves into addressing schemes that are likely to remain unchanged in the future. Moreover, the paper highlights the limitations of IPv4, emphasizing the importance of fortifying the present IPv4 network infrastructure until IPv6 is fully realized

Leveraging IoT Harmonization: An Efficacious NB-IoT Relay for Integrating 6LoWPAN Devices into Legacy IPv4 Networks

Leveraging IoT Harmonization: An Efficacious NB-IoT Relay for Integrating 6LoWPAN Devices into Legacy IPv4 Networks

Leveraging the Synergy of IPv6, Generative AI, and Web Engineering to Create a Big Data-driven Education Platform

The rapid advancement of network technology in China has significantly accelerated the implementation of information technology in higher education. Through the utilization of computer technology, multimedia technology, big data technology, artificial intelligence technology, and network communication technology, the integration of these technologies in university teaching has become widespread. This paper presents an analysis and discussion on the utilization of the latest IPv6 network transmission protocol technology to enhance the application of data collection in university education, with a specific focus on gathering information related to university faculties. By leveraging web engineering and multimedia technology as fundamental components, the network facilitates the sharing of educational resources among students, thereby enabling the reform of management approaches, fostering educational progress in China, and establishing a comprehensive big data-driven education platform specifically tailored to colleges and universities. Additionally, the incorporation of big data visualization and analysis tools allows for easy retrieval of existing university educational information, facilitates the creation of data charts, and expedites the utilization of data for its inherent value. Finally, the proposed approach employs generative AI to collect and analyze feedback from students and educators, followed by the application of web engineering techniques to continuously enhance the online education platform based on this feedback.

IPREDS: Efficient Prediction System for Internet-wide Port and Service Scanning

Internet-wide port and service scanning, a vital tool for network research, is unaffordable in time and network bandwidth consumption. However, scanning only a portion of ports and services may lead to erroneous research conclusions. Previous work has shortened scanning time by predicting potentially active ports and eliminating many invalid scan targets. Still, they suffer from inherent design flaws that compromise their performance in terms of prediction accuracy and efficiency. The vast, unevenly distributed, and noisy nature of active ports presents significant challenges for prediction systems. Meanwhile, service prediction work is still in a shortage state. In this work, we introduce IPREDS, the first efficient prediction system for Internet-wide port and service scanning. IPREDS uses its carefully designed decision model to utilize all input features and predict the scanning reward of each target in parallel, providing high coverage prediction results in minimal time. Our experiment results show that IPREDS can discover 87% of active ports across the entire IPv4 network within two hours, saving at least 87.26% of the total time and 59% of the packets sent compared to existing work. For service scanning, IPREDS finds 91% of all active services using only four handshakes on each active port and saves 85.9% time to find 69% of each active service compared to exhaustive service scanning.

Improving IP Video Surveillance Systems: The Shift to Digital Networks and Security Challenges

In the numerical era, video surveillance schemes have fast evolved from analog technologies to IP-based systems, enabling widespread deployment in various environments such as streets, train stations, workplaces, factories, and homes. The incorporation of intelligent applications like facial recognition, object tracking, and event detection has expanded the utility of surveillance networks, allowing for the management of thousands of cameras across large geographic areas. This change has been facilitated by advancements in Internet Protocol (IP) technology, shifting surveillance from analog systems using coaxial cables to packet-switching systems in IPv6 and IPv4 networks. However, the extensive adoption of IP-based systems has introduced several challenges, including increased vulnerability to cyber attacks, bandwidth demands, processing power requirements, and network security issues. This research discovers the evolution of video surveillance systems, the technical and security challenges posed by IP-based networks, and potential solutions for improving their efficiency and security.

Research on Improvement and Optimization Design of Mobile Switching in RPL Routing Protocol

In response to the shortcomings of the current RPL routing protocol, fully utilizing the idea of opportunistic routing, this study proposes an improved RPL routing protocol node mobility switching method to enhance the mobility support of wireless sensor IPv6 networks. Analyze existing RPL routing protocol solutions and identify their shortcomings; Analyze the challenges encountered in designing and improving routing protocols, and based on the specific application of RPL in 6LoWPAN technology, propose an overall design concept for the mobile switching method of an improved RPL routing protocol; Then, specific design will be carried out for the improved routing protocol mobile switching method, including mobile node detection, discovery and selection of the optimal parent node, link switching, etc; Finally, simulation implementation is carried out to verify its low energy consumption and low latency. Its research content involves disciplines such as the Internet of Things, computer simulation technology, and computer network technology, and has high theoretical and practical value.

Development of hybrid intrusion detection system based on Suricata with pfSense method for high reduction of DDoS attacks on IPv6 networks

Distributed Denial of Service (DDoS) attacks is a problem in computer networks. DDoS attacks pose a significant threat to internet networks as they cause congestion and disrupt the optimal functioning of servers. Detecting the source of these attacks is essential for effective protection. Therefore, in this study, we propose a hybrid strategy that combines Suricata, an intrusion detection system (IDS), with pfSense, a firewall, to address DDoS attacks. Suricata, the IDS, can identify the destination of the attack, which allows pfSense, the Firewall, to block the attack by dropping packets sent by the attacker. As a result, by leveraging this combined approach, we have observed significant improvements in the quality of service (QoS). The results of our study indicate a 1.08 % increase in throughput value, from 1881.97 bytes to 902.44 bytes, demonstrating improved efficiency in data transmission. Additionally, we observed a 57.32 % increase in the average total number of packets sent, from 1382 packets to 3238 packets, indicating better network performance. Furthermore, the proposed strategy significantly reduced delay and jitter values. The delay value decreased by 88.78 %, from 90.76 ms to 10.18 ms, and the jitter value decreased by 88.99 %, from 181.85 ms to 20.03 ms. These improvements signify a notable reduction in latency and packet timing variations, leading to a smoother network experience. Another crucial aspect we evaluated was the CPU utilization. The proposed strategy resulted in a substantial decrease in CPU utilization by 81.23 %, from 78.3 % to 14.7 %. The combination of pfSense and Suricata has proven to be a successful approach, providing robust protection against DDoS attacks, including those utilizing IPv6. This research can be implemented as a solution on a campus ad-hoc network with limited computers

RAVEN: Stateless Rapid IP Address Variation for Enterprise Networks

Enterprise networks face increasing threats against the privacy of their clients. Existing enterprise services like Network Address Translation (NAT) offer limited privacy protection, at the cost of requiring per-flow state. In this paper, we introduce RAVEN (Rapid Address Variation for Enterprise Networks), a network-based privacy solution that is complementary to application-layer defenses. RAVEN protects privacy by frequently changing the client's public IP address. With RAVEN, a client is not limited to using a single IP address at a given time, or even for a given connection. RAVEN goes further, breaking the association between packets that belong to the same connection by frequently changing the client's IP address within a single connection. RAVEN achieves this through a novel division of labor: the client uses a transport protocol, like QUIC, that supports seamless connection migration, and decides when to switch its IP address, while the enterprise network actually changes the client's IP address in a stateless manner at line rate and ensures end-to-end packet delivery. We implement RAVEN using QUIC and off-the-shelf programmable switches. We deploy RAVEN in a test IPv6 network and evaluate its defense against webpage fingerprinting attacks. Even with a strong adversary, the average precision of the best adaptive attacks drops from 0.96 to 0.84, with a 0.5% degradation in client throughput. When RAVEN changes IP addresses at unpredictable frequency, the precision of the best attacks falls to 0.78---the same effectiveness as WTF-PAD.

An Analysis of Neighbor Discovery Protocol Attacks

Neighbor Discovery Protocol (NDP) is a network protocol used in IPv6 networks to manage communication between neighboring devices. NDP is responsible for mapping IPv6 addresses to MAC addresses and discovering the availability of neighboring devices on the network. The main risk of deploying NDP on public networks is the potential for hackers or attackers to launch various types of attacks, such as address spoofing attacks, denial-of-service attacks, and man-in-the-middle attacks. Although Secure Neighbor Discovery (SEND) is implemented to secure NDP, its complexity and cost hinder its widespread deployment. This research emphasizes the potential hazard of deploying IPv6 networks in public spaces, such as airports, without protecting NDP messages. These risks have the potential to crash the entire local network. To demonstrate these risks, the GNS3 testbed environment is used to generate NDP attacks and capture the resulting packets using Wireshark for analysis. The analysis results reveal that with just a few commands, attackers can execute various NDP attacks. This highlights the need to protect against the potential issues that come with deploying IPv6 on widely accessible public networks. In addition, the analysis result shows that NDP attacks have behavior that can be used to define various NDP attacks.

GWS-Geo: A graph neural network based model for street-level IPv6 geolocation

IP geolocation is a technique for inferring geolocation of a device based on characteristics of its IP addresses such as network measurements or queryable information. Traditional IPv4 geolocation methods are often inapplicable to IPv6 networks or produce unsatisfactory results due to the imperfection of network routing and the sparsity of IPv6 addresses. To improve the accuracy of IPv6 geolocation, we proposed GWS-Geo, a street-level IPv6 geolocation model based on Graph Neural Network(GNN). Our model includes preprocessing, pre-training, an improved GraphSAGE algorithm, and hierarchical classification. In the preprocessing step, we process node features and transform them into node embeddings, and transform landmarks’ latitude and longitude coordinates into area numbers. During pretraining, we assign weights to edges between IP addresses and input node information into the improved GraphSAGE algorithm. After pruning according to edge weights, the improved GraphSAGE executes graph convolution operations. Finally, we use hierarchical classification to divide the geolocation into finer granularity to obtain the location of the target IP address. Experimental results on three datasets (covering the Tokyo, New York, and Shanghai areas) show that the median error distance is within a range of 5.53km to 9.46 km, which is close to the level of street-level accuracy. Compared to popular geolocation algorithms such as SLG, IRLD, and MLP-Geo, our model reduces the median error distance by at least 15.99% and the average error distance by at least 16.36%.

Challenges and Mitigation Strategies for Transition from IPv4 Network to Virtualized Next-Generation IPv6 Network

The rapid proliferation of the Internet has exhausted Internet Protocol version 4 (IPv4) addresses offered by Internet Assigned Number Authority (IANA). The new version of the IP i.e. IPv6 was launched by Internet Engineering Task Force (IETF) with new features, such as a simpler packet header, larger address space, new anycast addressing type, integrated security, efficient segment routing, and better Quality of Services (QoS). Virtualized network architectures such as Network Function Virtualization (NFV) and Software Defined Network (SDN) have been introduced. These new paradigms have entirely changed the way of internetworking and provide a lot of benefits in multiple domains of applications that have used SDN and NFV. ISPs are trying to move from existing IPv4 physical networks to virtualized next-generation IPv6 networks gradually. The transition from physical IPv4 to software-based IPv6 is very slow due to the usage of IPv4 addresses by billions of devices around the globe. IPv4 and IPv6 protocols are different in format and behaviour. Therefore, direct communication between IPv4 and IPv6 is not possible. Both protocols will co-exist for a long time during transition despite the incompatibility issues. The core issues between IPv4 and IPv6 protocols are compatibility, interoperability, and security. The transition creates many challenges for ISPs during shifting the network toward a software-based IPv6 network. Packet traversing, routing scalability, the guarantee of performance, and security are the main challenges faced by ISPs. In this research, we focused on a qualitative and comprehensive survey. We summarize the challenges during the transition process, recommended appropriate solutions, and an in-depth analysis of their mitigations during moving towards the next-generation virtual IPv6 network

A Comparative Study on Routing Protocols: RIPng, OSPFv3 and EIGRPv6 and Their Analysis Using GNS-3

Routing of data packets is a critical process on the internet, and routing protocols play a vital role in enabling routers to connect to internetworks using Internet protocols. Internet applications use various routing protocols, such as RIPng, OSPFv3, EIGRPv6, etc., each with its own approach to routing packets. This study presents a basic comparative analysis of as RIPng, OSPFv3, EIGRPv6 protocols. RIPng is an IPv6 routing protocol that allows routers to exchange routing information and calculate the shortest path to a destination based on the number of hops required. OSPFv3 is an IPv6 routing protocol that allows routers to exchange routing information and calculate the shortest path to a destination based on the state of the network links and EIGRPv6 is an IPv6 routing protocol that allows routers to exchange routing information and calculate the shortest path to a destination using both distance-vector and link-state algorithms. The paper "A Comparative Study on Routing Protocols: RIPng, OSPFv3 and EIGRPv6 and Their Analysis Using GNS-3" presents a comparative study on the performance of RIPng, OSPFv3, and EIGRPv6, which are the IPv6 routing protocols equivalent to RIP, OSPF, and EIGRP in IPv4 networks.