摘要
随着IPv6网络商用化的进行和大面积部署,IPv6相关的研究正在成为新的研究热点.相对于IPv4而言,IPv6地址有128比特,因此其生成、使用、安全等方面的情况也要比IPv4复杂得多,而对IPv6地址结构的深入了解,是进行IPv6地址规划、IPv6网络测量、IPv6网络安全以及下一代互联网网络体系结构等方面研究的基础.涉及IPv6地址结构方面的互联网标准数量众多、内容涵盖面广,这些都不利于全面了解IPv6地址结构.本文总结了目前IPv6地址结构相关的标准,包括IPv6全球单播地址结构、IPv6组播地址结构、IPv6任播地址结构等,在简要介绍各种地址结构的基础上,特别介绍了IPv6地址结构中几个和IPv4显著不同的地方.首先, IPv6地址通常可以分成子网前缀和接口标识两个部分,与IPv4相比IPv6增加了接口标识生成方案,而且IPv6接口标识的生成方案与IPv6安全和隐私保护紧密相关;其次,IPv6、IPv4将长期共存,因此过渡技术必不可少,而过渡技术中的地址结构与普通IPv6地址有所不同;最后, IPv6网络中多宿主机的情况更加普遍,导致了广泛存在的地址选择问题.针对这一问题,除了通过建立IPv6网络的源地址选择策略和目的地址选择策略来解决之外,定位符与身份标识分离也提供了一种解决思路.随着IPv6的进一步广泛部署,物联网中的IPv6地址结构以及IPv6地址安全方面的研究得到了越来越多的关注.物联网的广泛应用促使IPv6加速部署,但由于物联网本身的一些特点如最大报文长度较短、要求能耗较低等,物联网中IPv6的接口标识生成方案通常要保证所生成的接口标识便于压缩.另一个得到越来越多重视的研究方向是IPv6地址安全,与IPv4网络的情况有所不同,IPv6网络欠缺大规模使用的安全经验,大量支持IPv6的设备对IPv6协议的实现也只实现了基本功能,而由于IPv6较IPv4有更为复杂的应用场景,因此IPv6网络的安全问题逐渐成为一个突出的问题.本文对这些方面的研究进行了简要的介绍.
With the commercialization and wide deployment of IPv6 network, IPv6 related research is becoming a new research hotspot. Compared with IPv4, IPv6 address has 128 bits;its generation, application and security are much more complicated. The understanding of IPv6 address structure is of great value in researches like IPv6 address planning, network measurement, network security and next generation Internet architecture. There are a number of RFC standards related to IPv6 address structure;these standards cover a wide range of topics, which makes it difficult to understand the IPv6 address structure comprehensively. This paper summarizes current IPv6 address structure related standards, including IPv6 global unicast address structure, IPv6 multicast address structure, IPv6 anycast address structure. Based on the brief introduction of various address structures, several significant differences between IPv4 and IPv6 address structures are introduced. Firstly, IPv6 addresses can be divided into two parts: subnet prefix and interface identifier. Compared with IPv4, IPv6 interface identifier has its own generation method, and IPv6 interface identifier generation scheme is close related to IPv6 address security and privacy. Secondly, IPv6 and IPv4 will coexist for a long time;therefore transition technology is widely deployed. IPv6 address in transition technology is often different from that in normal situation. Finally, multihoming is more common in IPv6 networks, which results in the difficulty in address selection. To deal with this problem, one approach is to establish source address selection policy and destination address selection policy. Another solution is locator/identifier separation related schemes. With the further deployment of IPv6, IPv6 address structure in the Internet of Things, and IPv6 address security have absorbed growing research interest. The widespread application of the Internet of Things has accelerated the deployment of IPv6. However, due to the limitation of the Internet of Things itself, such as the smaller MTU and limited energy capacity, generation scheme usually needs to ensure that the generated interface identifier is easy to compress. Another research topic is IPv6 address security. Unlike IPv4, IPv6 lacks security experience in large - scale application. Moreover, a large number of devices only support IPv6 in a basic manner, but IPv6 has more complicated application scenarios than IPv4. The IPv6 security situation has worsened for the above reasons;this article provides a brief introduction on these aspects.
作者
张千里
姜彩萍
王继龙
李星
ZHANG Qian-Li;JIANG Cai-Ping;WANG Ji-Long;LI Xing(Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing 100084)
出处
《计算机学报》
EI
CSCD
北大核心
2019年第6期1384-1405,共22页
Chinese Journal of Computers
基金
国家重点研发计划项目(2017YFB0503703)资助~~
