基于Miredo的Teredo Relay性能与安全性分析优化

doi:10.3969/j.issn.0372-2112.2014.04.030

电子学报 ›› 2014, Vol. 42 ›› Issue (4): 815-820.DOI: 10.3969/j.issn.0372-2112.2014.04.030

基于Miredo的Teredo Relay性能与安全性分析优化

崔宇, 张宏莉, 田志宏, 方滨兴

哈尔滨工业大学网络与信息安全技术研究中心, 黑龙江哈尔滨 150001

收稿日期:2013-06-17 修回日期:2013-11-24 出版日期:2014-04-25
- 通讯作者:
- 崔宇
- 作者简介:
- 张宏莉 女，1973年生，吉林榆树人，哈尔滨工业大学计算机学院副院长、教授、博士生导师.主要研究方向：计算机网络与信息安全、网络测量、并行处理.
- 基金资助:
- 国家973重点基础研究发展计划 (No.2012BAH37B01）; 国家自然科学基金 (No.61202457）; 国家863高技术研究发展计划 (No.2011AA010705，2012AA012506，2012AA012502）

Performance and Security Improvement on Miredo Relay

CUI Yu, ZHANG Hong-li, TIAN Zhi-hong, FANG Bin-xing

Research Center of Network and Information Security, Harbin Institute of Technology, Harbin, Heilongjiang 150001, China

Received:2013-06-17 Revised:2013-11-24 Online:2014-04-25 Published:2014-04-25

摘要/Abstract

摘要： 隧道是IPv4向IPv6过渡的一种方式，为处于IPv4网络中的IPv6孤岛提供IPv6互联网接入.本文对Teredo隧道的功能、流量和安全方面进行研究，着重分析了Teredo隧道中中继设备（relay）的工作原理，指出其节点状态管理机制存在的性能和安全性问题.以Miredo 中继设备为基础，提出了基于双层查找优化、状态集与时间链扩展、时间链更新优化的性能与安全性增强方法.实验结果表明，正常条件下，插入、更新和回收流程的平均时间缩短了50%-60%，提高了中继设备的转发和抗攻击能力.

关键词: IPv6, 隧道, Teredo, Miredo, relay

Abstract: Tunneling is one of the main mechanisms for transitioning from IPv4 to IPv6.It facilitates interconnection of IPv6 islands at the edge of IPv4 internet and solves the communication problems between IPv6 islands and IPv6 internet.In this paper the function,traffic and the security of Teredo Tunnel were studied.Additionally,the operating principle of Teredo relay was specifically analyzed.Performance and security problems on "peer status management" in the relay were pointed out.Based on the relay of widespread Teredo software for Linux, "Miredo",methods of two-level-trie,status-timelist-expand and optimize-timelist-update are presented to improve the performance and security of Teredo relay.Experimental results show that under normal conditions,time consumption for processes of inserting,updating and garbage-collecting reduces by 50%-60%,which enhances relay and anti-attack capability.

Key words: IPv6, tunnel, Teredo, Miredo, relay

中图分类号:

TP393.08

崔宇, 张宏莉, 田志宏, 方滨兴. 基于Miredo的Teredo Relay性能与安全性分析优化[J]. 电子学报, 2014, 42(4): 815-820.

CUI Yu, ZHANG Hong-li, TIAN Zhi-hong, FANG Bin-xing. Performance and Security Improvement on Miredo Relay[J]. Acta Electronica Sinica, 2014, 42(4): 815-820.

参考文献

[1] Huang Shiang-Ming,Wu Quincy,Lin Yi-Bing.Enhancing Teredo IPv6 tunneling to traverse the symmetric NAT[J].Communication Letters,2006,10(5):408-410.

[2] 吴贤国,刘敏,李忠诚.面向NAT用户的IPv6 隧道技术研究[J].计算机学报,2007,30(1):1-9. Wu Xian-Guo,Liu Min,Li Zhong-Cheng.Research on the IPv6 tunneling technology designed for network address translator users[J].Chinese Journal of Computers,2007,30(1):1-9.(in Chinese)

[3] Thaler Dave.RFC6081(Teredo extensions)[S].IETF RFC,2011.

[4] Malone David.Observations of IPv6 addresses[A].Proceedings of the 9th Passive and Active Measurement Conference (PAM)[C].Berlin:Springer-Verlag,2008.21-30.

[5] Defeche Martin,Vyncke Eric.Measuring IPv6 traffic in BitTorrent networks[OL].http://tools.ietf.org/html/draft-defeche-ipv6-traffic-in-p2p-networks-00,2012.

[6] Zander Sebastian,Andrew LH Lachlan,Armitage Grenville.Investigating the IPv6 Teredo tunneling capability and performance of internet clients [J].ACM SIGCOMM Computer Communication Review,2012,42(5):13-20.

[7] Hoagland James.The Teredo protocol:tunneling past network security and other security implications[R].Cupertino:Symantec,2007.

[8] Hogg Scott,Vyncke Eric.IPv6 security[M].Indianapolis:Pearson Education,Cisco Press,2008.

[9] Frankel Shelia,Graveman Richard,Pearce John,Rooks Mark.Guidelines for the secure deployment of IPv6[R].Gaithersburg:National Institute of Standards and Technology,2010.80-119.

[10] [JP3]Thaler Dave,Krishnan Suresh,Hoagland James.RFC5991(Teredo security updates)[S].IETF RFC,2010.

[11] P Shanmugaraja,D Balamurugan,S Chandrasekar.An approach to secure Teredo tunneling technology[J].International Journal of Engineering Research & Technology (IJERT),2013,2(3):1-6.

[12] F Gont,W Liu.Security implications of IPv6 on IPv4 networks[OL].http://tools.ietf.org/html/draft-ietf-opsec-ipv6-implications-on-ipv4-nets-05,2013.

[1]	唐登洪, 席晓莉, 范倩莹. 基于隧道多散射信道的车载通信系统建模[J]. 电子学报, 2021, 49(5): 887-893.
[2]	薛丹, 苑玮琦. 基于空间拓扑和形态相似关系的长裂缝拼接算法[J]. 电子学报, 2021, 49(4): 672-678.
[3]	王则林, 吴志健, 尹兰. IPV6环境下的高维大规模包匹配算法[J]. 电子学报, 2013, 41(11): 2181-2186.
[4]	贾宗璞;王红梅;刘淑芬. 乒乓切换在移动IPv6扩展协议中的性能分析[J]. 电子学报, 2009, 37(3): 592-597.
[5]	杨水根;秦雅娟;周华春;张宏科. 基于身份与位置分离的嵌套移动网络路由优化机制[J]. 电子学报, 2008, 36(7): 1261-1267.
[6]	董平;杨冬;秦雅娟;张宏科. 新一代互联网移动管理机制研究[J]. 电子学报, 2008, 36(10): 1916-1922.
[7]	周华春;张宏科;秦雅娟. 一种代理移动IPv6认证协议[J]. 电子学报, 2008, 36(10): 1873-1880.
[8]	李维, 刘斌, 郗颖, 林伟, 唐毅. 基于多域并行编码的高速IPv6流分类[J]. 电子学报, 2007, 35(5): 976-981.
[9]	吴贤国, 刘敏, 李忠诚. IPv6隧道代理机制研究[J]. 电子学报, 2007, 35(2): 354-357.
[10]	贾宗璞;王红梅;刘淑芬. 基于移动节点在PAR和NAR间频繁切换的预测式快速移动IPv6新方案[J]. 电子学报, 2007, 35(12): 2380-2383.
[11]	李振强;郑东去;马严;. TSB:一种多阶段IPv6路由表查找算法[J]. 电子学报, 2007, 35(10): 1859-1864.
[12]	黄永峰, 张珂. 基于经验值的分层PMTU探测算法[J]. 电子学报, 2007, 35(10): 1865-1869.
[13]	吴建平, 李星, 崔勇, 徐恪, 王晓峰. 4over6:基于非显式隧道的IPv4 跨越IPv6互联机制[J]. 电子学报, 2006, 34(3): 454-458.
[14]	沈波, 刘云, 张宏科. 一种新的WLAN环境下移动IPv6的低时延切换方法[J]. 电子学报, 2005, 33(4): 590-595.
[15]	洪佩琳, 覃振权, 李津生. 无线网络中移动IPv6头标压缩的研究与实现[J]. 电子学报, 2004, 32(S1): 26-29.

基于Miredo的Teredo Relay性能与安全性分析优化

Performance and Security Improvement on Miredo Relay

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics