Diese Arbeit beschaeftigt sich mit Methoden fuer die Authentifizierung, Autorisation und das Accounting (AAA) im Zusammenhang mit dynamischen Hostkonfigurationsprotokollen auf Basis von IPv6. Die zustandlose (autom. Konfig.) und die zustandsgebundene Adresskonfiguration (DHCP) von IPv6 wird auf moegliche AAA Ansatzpunkte untersucht. Es wird eine DHCPv6 Beispielimplementation fuer Linux erstellt.

Στην εργασία αυτή μελετήθηκε το μελλοντικό δίκυο 4G UMTS με ΙΡ διασύνδεση στο δίκτυο πυρήνα. Επίσης μελετώ τα νέα πρωτόκολλα για mobile internet IPV4, IPV6 καθώς επίσης και την πολυμεσική δομή ΙΜS. / In this Maste thesis, study the 4G UMTS network with IP conection in the core network. So i analyze the new protocolls for mobile internet IPV4, IPV6 and the multimedia structure IMS

A l'origine conçus pour protéger le protocole de Découverte de Voisins (Neighbor Discovery Protocol, NDP) en IPv6, les adresses générées de manière cryptographique (Cryptographically Generated Addresses, CGA) et le protocole SEND (Secure Neighbor Discovery) doivent maintenant s'adapter au contexte de mobilité et à ses nouvelles fonctionnalités. Cette mobilité revêt de nombreuses formes : mobilité du noeud (Mobile IPv6, MIPv6), mobilité des routeurs (Network Mobility, NEMO) ou encore mobilité gérée par le réseau (Proxy Mobile IPv6). De nombreux changements doivent être opérés dans le protocole SEND : les opérations cryptographiques doivent être allégées pour les terminaux à faible capacité de calcul, les incompatibilités entre le partage d'adresse dans les protocoles de mobilité et le mécanisme de protection d'adresses de SEND doivent être corrigés, etc. Dans une première partie de cette thèse, nous présentons le protocole de Découverte de Voisins, les adresses CGA et le protocole de sécurité SEND. Nous étudions leurs limitations et, afin d'améliorer les performances, nous proposons l'utilisation de la cryptographie basée sur les courbes elliptiques (ECC). À travers une série de tests, nous mesurons l'impact de notre proposition. Par la suite, nous modifions les spécifications du protocole SEND afin de supporter de nouveaux algorithmes crytpographiques. Dans une deuxième partie, nous résolvons les incompatibilités entre le protocole SEND et les protocoles de mobilité (par ex. MIPv6) et entre le protocole SEND et les adresses anycast. Dans une dernière partie, nous présentons plusieurs contributions basées sur une utilisation dérivée des adresses CGA et du protocole SEND.

Users (or software agents) are served by multiple networked terminal devices, each of which may in turn have multiple network interfaces. This multi-homing at both ???user??? and ???device??? level presents new opportunities for mobility handling. Mobility may be handled by switching ongoing application data streams between devices, by utilising intermediary adaptation or connectivity enhancement services, or both. However this requires middleware support that is not provided by current systems. This thesis presents a set of integrated solutions to enable this kind of mobility handling, based on concept of Personal Networks (PN). Personal Networks (PN) consist of dynamic conglomerations of terminal and service devices tasked to facilitate the delivery of information to and from a single focal point, which may be a human user or software agent. This concept creates the potential to view mobility handling as a path selection problem, since there may be multiple valid terminal device and service proxy configurations that can successfully carry a given communication session from one PN to another PN. Depending on context, it may be necessary to switch between paths. To this end, this thesis proposes and evaluates a set of inter-dependent mechanisms to facilitate the discovery and use of different candidate end-to-end paths. The proposal comprises mechanisms for secure inter-device mobility using delegated cryptographic identifiers, autonomous service proxy selection and composition, and distributed resolution of cryptographic identifiers to lower layer addresses.

SDN軟體定義網路，是一種新的以軟體為基礎的網路架構及技術。最大的特點為將傳統二、三層網路設備的控制功能與設備本身數據轉發功能進行分離。由於分離後的控制功能集中統一管理，且其具有軟體設計的靈活性，因此，網路管理人員對底層設備的資源控制變得更加容易，進而大大提升網路自動化管理能力，並有效解決目前網路系統所面臨的如網路拓樸的靈活性差，規模擴充受限等問題。 近年來隨著寬頻上網，物聯網，雲端計算，移動裝置等新技術及新業務的快速發展，在愈來愈多各種型態連網裝置快速增加的情況下，同時也使人們對IP位址的需求日增。然而目前IPv4卻無法針對此需求，提供一個相對大量的位址，也因此對於IPv4到IPv6網路的升級有其迫切性與必要性。IPv4過渡到IPv6網路目前提出的方法有三種：Dual Stack、Tunneling以及Translation。Tunneling及Translation皆有其效能上的瓶頸，為過渡期間的應用技術。目前主要推動的技術為Dual Stack，在Dual Stack模式下，可以由IPv4網路逐步演進成IPv4與IPv6共存互通，最後再形成以IPv6為主的網路。現階段愈來愈多的IPv6設備與節點，為順利的連接舊的IPv4與新的IPv6網路，藉由具有Dual Stack能力的SDN交換機網路設備，將是個有效的解決方案，也將使得IPv6網路的管理及升級更具有彈性。SDN、IPv6為現今幾個熱門的研究議題，看似不同領域的電腦相關技術，然而若使上述幾種技術相互連結使用，將使得未來之網路環境更具備可擴充性、可管理性、靈活性與敏捷性。 為了解SDN交換機上的效能，本論文提出一個測試平台架構。利用Linux系統做為待測網路設備，並在待測網路設備上模擬Bridge、Router、Open vSwitch SDN交換機等不同環境。測試端為Linux系統，並使用Iperf測試軟體，透過對待測網路設備不同模擬環境下發送不同大小的封包做效能測試。實驗中同時也量測IPv4網路協定，以作為和傳統網路效能的比較。另外，也量測了SDN交換機同時在IPv4及IPv6雙協定的負載下，和單獨的IPv4協定或IPv6協定做效能上的差異比較。最後，也模擬同時在多主機下對待測網路設備進行封包的發送與接收，以測試SDN交換機在多主機下的負載狀況。 經由測量的數據分析，IPv6在Open vSwitch SDN交換機上運行效能幾乎等同於傳統的IPv4，也驗證IPv6在交換機上的可行性。此外，當SDN交換機同時運行在IPv4和IPv6雙協定環境下，在整體效能的表現上和單獨運行單協定相比幾近相同，也證明SDN交換機同時運行在雙協定下的可行性。由多主機負載的實驗數據分析，在以UDP協定做資料傳送時，愈多的主機因為資源的競爭問題愈大外，間接也會造成愈多packet loss。並且對較大的封包，packet loss的問題也愈嚴重，但相對來看，在以TCP協定做資料傳送時，total throughput的瓶頸則決定於網路卡的效能，即效能愈好的網路卡，愈能提升多主機環境下的total throughput。 / Software Defined Network (SDN) is a new software-based network architecture and technique. The main characteristic is to separate the control functions and the data forwarding functions of the traditional layer 2 or layer 3 network devices. Since the separated control functions can be centralized management with software design flexibility, thus network managers can control the underlying resource device easier, which greatly enhances the ability to automate network management as well as effectively resolves the problems confronted by conventional network system, such as lack of network topology flexibility, limited network scalability. In recent decades, along with broadband Internet access, Internet of Things, cloud computing, the rapid development of new technologies and the rapid increase of network devices, it has increased the demand for IP address to a great extent. While IPv4 can not meet the current demand to offer a relatively large number of addresses and thus it is urgent and essential to upgrade IPv4 to IPv6 network. Transition from IPv4 to IPv6 network currently is proposed in these three ways which respectively named Dual Stack, Tunneling, and Translation. Tunneling and Translation have their performance bottlenecks and only Dual Stack mode can be gradually evolved from IPv4 to IPv4 and IPv6 coexistence network, eventually toward the IPv6-based network. There are increasing numbers of IPv6 devices and nodes with the aim to connect IPv4 network to IPv6 network, through SDN switch with Dual Stack network which would be an effective solution. It makes the IPv6 network management and maintenance more flexible. IPv6 and SDN are two hot researching issues currently. If they can be linked with each other, it will be more scalable and flexible for the network environment in the future. In order to understand the effectiveness of the SDN switch, this paper presents a test platform architecture. Using Linux systems as a Device under Testing, we simulate Bridge, Router, Open vSwitch SDN switch network equipment on it. Test end is Linux system, and Iperf serves as a test software. Through simulation of the Device under Testing in different scenarios, we have performed many tests on different sizes of packets. The experiment also measures IPv4 network protocol and compares with traditional network. In order to compare with the performance of separate IPv4 or IPv6 protocol, the loading of SDN switch running both of IPv4 and IPv6 dual protocol is measured. Finally, simulation on multi-host is tested under Device under Testing in sending and receiving packet which is to test SDN switch under a multi-host loading conditions. Through the analysis of the measured data, the performance of IPv6 running on the Open Switch SDN switch is equivalent to that of the traditional IPv4. It also proves the feasibility and efficiency of IPv6 on the switch. In addition, when SDN switch running in IPv4 and IPv6 Dual Stack mode simultaneously, the overall performance is almost exactly the same as single IPv4 or IPv6 protocol, which proves the feasibility of SDN switch in Dual Stack mode. Based on the analysis of multiple-host loading, UDP protocols were used during data transfer. Apart from multi-hosts with more competition for resourcing issue, a packet loss will be aroused indirectly. We observed that larger packets can cause more packet loss. However, with TCP protocols during data transfer, total throughput bottleneck is determined by the effectiveness of the network card. Therefore, the better the effectiveness of the network card is, the higher total throughput can be provided in multi-host environment.

With the huge amount of computers connected to the Internet the IP-addresses are starting to run out. The Internet Engineering Task Force, IETF, have decided that it is about time to exchange the old 32 bits Internet protocol, Ipv4, to a more modern 128 bits protocol called Ipv6. This thesis explores the possibility to install Ipv6 in different operating systems. By testing various operating systems and by set up criteria compare them to each other we give the reader a picture of how the installation is done. We also show which operating systems to prefer if you want to use IPv6. The chosen operating systems are different Windows versions and Linux RedHat versions. The result of our testing reveals that it does not really matter which of the more recent versions of the operating systems, Windows XP or Linux RedHat 7.2, you use since they have come quite far ahead in their Ipv6 development.

Over the last years, we have witnessed a rapid deployment of real-time applications on the Internet as well as many research works about Quality of Service (QoS) in particularly IPv4 (Internet Protocol version 4). The inevitable exhaustion of the remaining IPv4 address pool has become progressively evident. As the evolution of Internet Protocol (IP) continues, the deployment of IPv6 QoS is underway. Today, there is limited experience in the deployment of QoS for IPv6 traffic in MPLS backbone networks in conjunction with DiffServ (Differentiated Services) support. DiffServ itself does not have the ability to control the traffic which has been taken for end-to-end path while a number of links of the path are congested. In contrast, MPLS Traffic Engineering (TE) is accomplished to control the traffic and can set up end-to-end routing path before data has been forwarded. From the evolution of IPv4 QoS solutions, we know that the integration of DiffServ and MPLS TE satisfies the guaranteed QoS requirement for real-time applications. This thesis presents a QoS performance study of real-time applications such as voice and video conferencing over DiffServ with or without MPLS TE in IPv4/IPv6 networks using Optimized Network Engineering Tool (OPNET). This thesis also studies the interaction of Expedited Forwarding (EF), Assured Forwarding (AF) traffic aggregation, link congestion, as well as the effect of various performance metrics such as packet end-to-end delay, packet delay variation, queuing delay, throughput and packet loss. The effectiveness of DiffServ and MPLS TE integration in IPv4/IPv6 network is illustrated and analyzed. The thesis shows that IPv6 experiences more delay and loss performance than their IPv4 counterparts. / Author (1): Md. Tariq Aziz Address: C/O: Murshed Gularm, Nykarleby Gatan 134, 16474 Kista, Stockholm, Sweden Author (2): Mohammad Saiful Islam Address: Minnervavägen 22B, 371 43 Karlskrona, Sweden

Problemområde: Idag har Internet blivit var mans egendom. Detta innebär tyvärr en hel del problem. Det tydligaste vi står inför idag är att IP-adresserna håller på att ta slut. För att bli av med problemet används olika temporära lösningar ("lappningsteknik") men även en permanent lösning utvecklas, nämligen Ipv6 (Internet Protocol version 6).Det nya protokollet löser adressbristen men har även många andra funktioner så som säkerhet och bättre routinglösningar. Vi ställde oss då frågan varför har ingen övergång skett trots dessa fördelar. Frågeställning: Var i övergången mellan IPv4 och IPv6 står vi idag? Varför har inte övergången mellan IPv4 och IPv6 redan skett? Vilka är de största anledningarna och vilka fler möjliga finns det? Slutsats: Arbetet visar att tiden för en övergång ännu inte är inne. Huvudanledningarna är att det saknas produkter och en allmän anledning för en migration.

This thesis has compared the Mobile IPv4 and Mobile IPv6 to find out which of them performs better when it comes to send datagram from the correspondent node to the mobile node. The tests that were made to measure performance were latency, TCP/UDP throughput, loss and delay, as well as time measurement for connectivity loss for the mobile node while roaming. The tests were done using Cisco equipments and Microsoft Windows 7 Professional OS. Due to the hardware and software used, the route of datagram was the same in both scenarios since Cisco routers and Microsoft Windows 7 OS does not support route optimization for Mobile IPv6. The results showed that Mobile IPv4 performed better in all the tests done.

Det nuvarande kommunikationsprotokollet på Internet, IPv4, utvecklades tidigt under 70-talet och används idag av datorer och andra enheter för att kommunicera med varandra. Det nästan 40 år gamla protokollet räcker endast till drygt fyra miljarder adresser och med tanke på Internets explosionsartade tillväxt har en global adressbrist uppkommit i dagens värld. Fler enheter ansluter sig till Internet och krav ställs på fler IP-adresser samt en förbättrad säkerhet. Vi står idag inför en stegvis övergång till det nya protokollet på Internet, IPv6. Denna nya version löser problemet med adressbristen och har inbyggda säkerhetsfunktioner samt andra fördelar. Trots att nyhetsvärlden och flera entusiastiska organisationer har uppmärksammat de tekniska fördelarna med IPv6 under en längre tid finns det i dagens läge en ointresserad marknad och flera företag har inte påbörjat arbetet ännu. Rapporten undersöker vad som hindrar företagen i Västra Götalandsregionen att påbörja migreringsarbetet mot IPv6. Resultatet pekar på ett nutida samhällsproblem inom IT-världen. Behovet av IPv6 är lågt och få har börjat planera för en övergång. Flera är positivt inställda till NAT-tekniken, som har motverkat adressbristen sedan slutet av 90-talet. Internetleverantörerna ställer inga krav och migreringsarbetet kan komma att bli mycket kostsamt och tidskrävande till en början, men samtidigt öppna upp för nya affärsmöjligheter inom IT-branschen. Vidare kan tydligare statliga direktiv behövas för IPv6, vilket var en avgörande faktor för utvecklingen i Asien.