IPv6 Specific Issues to Track States of Network Flows
نویسندگان
چکیده
Connection tracking subsystem on Linux tracks states of network flows. It is utilized by packet filter for stateful filtering. In this paper, we propose solutions to issues that arise where connection tracking subsystem handles Routing Header and Mobile IPv6. We also describe how the current connection tracking subsystem handles IPv6 fragments without disturbing Path MTU discovery. As a result of the solutions, connection tracking subsystem can track the state of a network flow even if a path of the flow is changed and turned back, and it can protect nodes from the packets with spoofed addresses in IPv6 extension headers under firewall running stateful filter.
منابع مشابه
Security aspects in IPv6 networks - implementation and testing
IPv6 protocol, which should replace the actual IPv4 protocol, brings many new possibilities and improvements considering simplicity, routing speed, quality of service and security. In comparison to IPv4, IPv6 improves mechanisms for assuring a secure and confidential transfer of information. Despite these improvements, network security remains a very important issue since there are some securit...
متن کاملStatus of this Memo IPv6 Transition/Co-existence Security Considerations
The transition from a pure IPv4 network to a network where IPv4 and IPv6 coexist brings a number of extra security considerations that need to be taken into account when deploying IPv6 and operating the dual-protocol network and the associated transition mechanisms. This document attempts to give an overview of the various issues grouped into three categories: o issues due to the IPv6 protocol ...
متن کاملU . S . Naval Academy
Internet Protocol Version 6 (IPv6) has been proposed as a replacement to the current networking protocol, IPv4, used in the global Internet. IPv6 represents an entirely new protocol, incorporating improved routing capability, enhanced ability to support real-time audio and video traffic, better security and privacy, as well as a much larger address space. Technical challenges and operational re...
متن کاملIn-line Service Measurements: Exploiting IPv6 Extension Headers
The ability to measure, monitor and control the service quality experienced by network traffic is becoming increasingly important as multiple traffic types are aggregated onto IP networks. This paper introduces a novel measurement technique for assessing performance metrics (e.g. one-way packet loss, delay, delay variation, and ‘goodput’) of IPv6 network flows. By exploiting native IPv6 extensi...
متن کاملAnalysis of spatial flows of rural settlements in border regions (Case study: Gomishan county)
An examination of urban rural links in each location requires the analysis of streams linking urban and rural settlements. Such links under the heading of "flow of space" are embodied in the framework of a network approach and include flows of capital, persons, goods, information, innovation, technology, and so on. These flows include a process that, in appropriate conditions They can bring tog...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
عنوان ژورنال:
دوره شماره
صفحات -
تاریخ انتشار 2007