ipv6-1（国外英文资料）.docVIP

ipv6-1 Network security improvement and new problems of IPv6 The shortage of IPv4 address resources has caused a series of security problems. Although IPv6 protocol has made many improvements in network security, its introduction has brought new security problems. Because the IPv4 address resource in our country is seriously insufficient, in addition to the use of CIDR, VLSM and DHCP technology to alleviate the address shortage problem, more is the use of private IP address with the network address translation (NAT/PAT) technology to solve this problem. For example, PSTN, ADSL, GPRS dial-up broadband users, and many of the campus network, enterprise network is the private IPv4 address, access to the Internet through the NAT technology, which not only greatly reduces the network transmission speed, and safety etc. it is difficult to be guaranteed. Fundamentally, the credibility of the Internet, the end to end connectivity damage, and the network does not force the use of IPSec brings security problems, so that the IPv4 network is facing various threats. IPv6 protocol has improved in network security The IP security protocol (IPSec) IPSec is an optional extension of IPv4, while IPv6 is an essential component. The IPSec protocol can seamlessly provide security features for IP, such as access control, authentication of data sources, data integrity checks, confidentiality guarantees, and anti replay (Replay) attacks. The new routing protocols, OSPFv3 and RIPng, use IPSec to encrypt and verify the routing information, so as to improve the performance of anti routing attacks. It should be noted that although IPSec can prevent a variety of attacks, but it can not resist Sniffer, DoS attacks, Flood attacks and application layer attacks. IPSec as a network layer protocol, can only be responsible for its lower network security, can not be responsible for its upper layer, such as Web, E-mail and FTP applications security. End to end security guarantees, IPv6s biggest advantage