电子学报 ›› 2014, Vol. 42 ›› Issue (4): 815-820.DOI: 10.3969/j.issn.0372-2112.2014.04.030

• 科研通信 • 上一篇    下一篇

基于Miredo的Teredo Relay性能与安全性分析优化

崔宇, 张宏莉, 田志宏, 方滨兴   

  1. 哈尔滨工业大学网络与信息安全技术研究中心, 黑龙江哈尔滨 150001
  • 收稿日期:2013-06-17 修回日期:2013-11-24 出版日期:2014-04-25
    • 通讯作者:
    • 崔宇
    • 作者简介:
    • 张宏莉 女,1973年生,吉林榆树人,哈尔滨工业大学计算机学院副院长、教授、博士生导师.主要研究方向:计算机网络与信息安全、网络测量、并行处理.
    • 基金资助:
    • 国家973重点基础研究发展计划 (No.2012BAH37B01); 国家自然科学基金 (No.61202457); 国家863高技术研究发展计划 (No.2011AA010705,2012AA012506,2012AA012502)

Performance and Security Improvement on Miredo Relay

CUI Yu, ZHANG Hong-li, TIAN Zhi-hong, FANG Bin-xing   

  1. Research Center of Network and Information Security, Harbin Institute of Technology, Harbin, Heilongjiang 150001, China
  • Received:2013-06-17 Revised:2013-11-24 Online:2014-04-25 Published:2014-04-25

摘要: 隧道是IPv4向IPv6过渡的一种方式,为处于IPv4网络中的IPv6孤岛提供IPv6互联网接入.本文对Teredo隧道的功能、流量和安全方面进行研究,着重分析了Teredo隧道中中继设备(relay)的工作原理,指出其节点状态管理机制存在的性能和安全性问题.以Miredo 中继设备为基础,提出了基于双层查找优化、状态集与时间链扩展、时间链更新优化的性能与安全性增强方法.实验结果表明,正常条件下,插入、更新和回收流程的平均时间缩短了50%-60%,提高了中继设备的转发和抗攻击能力.

关键词: IPv6, 隧道, Teredo, Miredo, relay

Abstract: Tunneling is one of the main mechanisms for transitioning from IPv4 to IPv6.It facilitates interconnection of IPv6 islands at the edge of IPv4 internet and solves the communication problems between IPv6 islands and IPv6 internet.In this paper the function,traffic and the security of Teredo Tunnel were studied.Additionally,the operating principle of Teredo relay was specifically analyzed.Performance and security problems on "peer status management" in the relay were pointed out.Based on the relay of widespread Teredo software for Linux, "Miredo",methods of two-level-trie,status-timelist-expand and optimize-timelist-update are presented to improve the performance and security of Teredo relay.Experimental results show that under normal conditions,time consumption for processes of inserting,updating and garbage-collecting reduces by 50%-60%,which enhances relay and anti-attack capability.

Key words: IPv6, tunnel, Teredo, Miredo, relay

中图分类号: