Currently, the IPv4 protocol is heavily used by institutions, companies and individuals, but every day there is a higher number of devices connected to the network such as home appliances, mobile phones or tablets. Each machine or device needs to have its own IP address to communicate with other machines connected to Internet. This implies the need for multiple IP addresses for a single user and the current protocol begins to show some deficiencies due to IPv4 address space exhaustion. Therefore, for several years experts have been working on an IP protocol update: the IPv6 128-bit version can address up to about 340 quadrillion system devices concurrently. With IPv6, today, every person on the planet could have millions of devices simultaneously connected to the Internet. The choice of the IP protocol version affects the performance of the UMTS mobile network and the browsers as well. The aim of the project is to measure how the IPv6 protocol performs compared to the previous IPv4 protocol. It is expected that the IPv6 protocol generates a smaller amount of signalling and less time is required to fully load a web page. We have analysed some KPIs (IP data, signalling, web load time and battery) in lab environment using Smartphones, to observe the behaviour of both, the network and the device.  The main conclusion of the thesis is that IPv6 really behaves as expected and generates savings in signalling, although the IP data generated is larger due to the size of the headers. However, there is still much work as only the most important webpages and the applications with a high level of market penetration operate well over the IPv6 protocol. / Cada día existe un mayor número de dispositivos conectados a la red, tales como electrodomésticos, teléfonos móviles inteligentes o tabletas, por lo que la red debe evolucionar constantemente y ser capaz de proveer servicio a todos los usuarios. Cada equipo necesita tener su propia dirección IP para comunicarse con otras máquinas conectadas a Internet, por lo que es necesario tener un gran número de direcciones IP y la versión del protocolo actual comienza a mostrar algunas deficiencias (debido fundamentalmente al agotamiento del espacio de direccionamiento IPv4 y algunas funciones de seguridad que han quedado obsoletas). Desde hace varios años, los expertos están trabajando en una actualización del protocolo IP: la versión seis (llamada IPv6) que utiliza 128 bits para el direccionamiento pudiendo administrar simultáneamente hasta unos 340 trillones de dispositivos al mismo tiempo. La elección de la versión del protocolo IP afecta al comportamiento de la red móvil, ya que los expertos todavía están optimizando y realizando cambios en la arquitectura de red y en los dispositivos para soportar el protocolo IPv6. El objetivo del proyecto consiste en comparar y evaluar las diferentes versiones del protocolo IP utilizado, en gran medida, para acceder a la red de internet. La principal conclusión del proyecto es que IPv6 realmente se comporta como se espera y genera ahorros en la señalización, aunque los datos IP generados son mayores. Sin embargo, aún queda mucho trabajo por hacer, ya que sólo las páginas más importantes y las aplicaciones más utilizadas por los usuarios funcionan bien sobre el protocolo IPv6.

Komunikace předávaná skrze Internet zahrnuje komunikaci mezi pachateli těžké trestné činnosti. Státní zástupci schvalují cílené zákonné odposlechy zaměřené na podezřelé z páchání trestné činnosti. Zákonné odposlechy se v počítačových sítích potýkají s mnoha překážkami. Identifikátory obsažené v každém paketu jsou koncovým stanicím přidělovány po omezenou dobu, nebo si je koncové stanice dokonce samy generují a automaticky mění. Tato dizertační práce se zabývá identifikačními metodami v počítačových sítích se zaměřením na metody kompatibilní se zákonnými odposlechy. Zkoumané metody musejí okamžitě detekovat použití nového identifikátoru spadajícího pod některý z odposlechů. Systém pro zákonné odposlechy následně nastaví sondy pro odposlech komunikace. Tato práce se převážně zabývá dvěma zdroji identifikačních informací: sledováním mechanismu pro objevování sousedů a detekcí identity počítače na základě přesností měření času jednotlivých počítačů. V rámci dizertačního výzkumu vznikly grafy identit, které umožňují spojování identit s ohledem na znění povolení k odposlechu. Výsledky výzkumu je možné aplikovat v rámci zákonných odposlechů, síťové forenzní analýzy i ve vysokoúrovňových programově řízených sítích.

The size of the IoT network is expanding due to advancements in the IoT field, leading to increased interest in the multi-sink mechanism. The IPv6 Routing Protocol for Low-Power and Lossy Networks (RPL) is a representative IoT protocol that focuses on the Low-Power and Lossy Networks. However, research on comparing multi-sink strategies within the RPL network is limited. Therefore, this project aims to compare three common strategies: multiple-DODAG in one instance, virtual root, and multiple-instance. Using these strategies, we design and implement RPL networks and conduct simulations in various scenarios. Five different topologies are utilized in the experiments, considering different packet loss rates. Performance evaluation of each strategy is conducted using the Cooja simulator and Contiki-NG system, with a focus on the number of RPL control packets, Packet Delivery Ratio (PDR), and energy consumption. The results indicate that both the virtual root and multiple-DODAG strategies perform well with low packet loss, while the virtual root strategy outperforms the multiple-DODAG strategy with high packet loss. Additionally, the virtual root strategy incurs slightly higher energy costs than the multiple-DODAG strategy. Furthermore, the multiple-instance strategy demonstrates poor performance in most scenarios, except for the packet delivery ratio under high packet loss conditions. Besides the analysis, potential areas for future research on the RPL’s multi-sink mechanism are finally identified. / Storleken på IoT-nätverket expanderar på grund av framsteg inom IoT-området, vilket leder till ökat intresse för multi-sink-mekanismen. IPv6 Routing Protocol for Low-Power and Lossy Networks (RPL) är ett representativt IoT-protokoll som fokuserar på Nät med låg effekt och förluster. Forskningen om jämförelse av multi-sink-strategier inom RPL-nätverket är dock begränsad. Därför syftar detta projekt till att jämföra tre vanliga strategier: multiple - DODAG i en instans, virtuell rot och multi-instans. Med hjälp av dessa strategier designar och implementerar vi RPL-nätverk och genomför simuleringar i olika scenarier. Fem olika topologier används i experimenten, med olika packet loss rate. Prestationsutvärdering av varje strategi utförs med hjälp av Cooja-simulatorn och Contiki-NG-systemet, med fokus på antalet RPL control packets, Packet Delivery Ratio (PDR) och energiförbrukning. Resultaten indikerar att både virtuell rot och multiple-DODAG strategier fungerar bra vid låg datapaketförlust, medan den virtuella rotstrategin överträffar multiple-DODAG strategin vid hög datapaketförlust. Dessutom medför den virtuella rotstrategin något högre energikostnader än flera DODAG-strategin. Dessutom visar multi-instans-strategin dålig prestanda i de flesta scenarier, förutom när det gäller datapaketleveransförhållandet under höga datapaketförlustförhållanden. Utöver analysen identifieras slutligen potentiella områden för framtida forskning om RPL-protokollets multi-sink-mekanism.

In modern networks, the increasing volume of network traffic and the diverse range of services with varying requirements necessitate the implementation of more advanced routing decisions and traffic engineering. This academic study proposes a QoS adaptive mechanism called "Sepitto", which utilizes Segment routing protocols, specifically SRv6, to address network-traffic control and congestion avoidance. Sepitto leverages data-plane traffic to convey Linux Qdisc statistics, such as queue size, packet drops, and buffer occupancy, in each Linux-based virtual router. By incorporating this information, edge routers become aware of the current network status, enabling them to make informed decisions regarding traffic paths based on QoS classes. SRv6 is employed to direct traffic along desired paths, avoiding congested links and minimizing queuing delays and overall latency. Moreover, Sepitto offers network administrators an interface to customize decision-making processes based on their policies, assigning costs to network graph edges by associating the provided statistics to a certain cost. To incorporate these costs, the implementation employs the Dijkstra algorithm to determine the path with the lowest cost. Performance analysis of Sepitto reveals minimal overhead compared to traditional routing methods, while effectively mitigating network congestion. The results demonstrate that Sepitto reduces traffic round-trip time during congestion while maintaining differentiated treatment for various QoS classes. / I moderna nätverk kräver den ökande volymen av nätverkstrafik och det varierade utbudet av tjänster med olika krav att mer avancerade ruttbeslut och trafikhantering implementeras. Denna akademiska studie föreslår en QoS-anpassningsmekanism kallad Sepitto", som använder sig av Segment Routing-protokoll, specifikt SRv6, för att hantera nätverkstrafik och undvika trängsel. Sepitto utnyttjar dataplanttrafik för att överföra Linux Qdisc-statistik, såsom köstorlek, paketförluster och buffertbeläggning, i varje Linux-baserad virtuell router. Genom att införliva denna information blir kantrouter medvetna om den aktuella nätverksstatusen och kan fatta informerade beslut om trafikvägar baserat på QoS-klasser. SRv6 används för att styra trafiken längs önskade vägar, undvika överbelastade länkar och minimera köfördröjningar och övergripande latens. Dessutom erbjuder Sepitto nätverksadministratörer ett gränssnitt för att anpassa beslutsprocesser baserat på deras policy, genom att tilldela kostnader till nätverksgrafens bågar genom att associera de tillhandahållna statistiken till en viss kostnad. För att införliva dessa kostnader använder implementeringen Dijkstras algoritm för att bestämma vägen med lägst kostnad. Prestandaanalysen av Sepitto visar minimal överbelastning jämfört med traditionella rutteringsmetoder samtidigt som den effektivt motverkar nätverksträngsel. Resultaten visar att Sepitto minskar trafiklatensen under trängsel samtidigt som differentierad behandling bibehålls för olika QoS-klasser.

Approved for public release, distribution is unlimited / Internet Protocol version six (IPv6), the next generation Internet Protocol, exists sparsely in today's world. However, as it gains popularity, it will grow into a vital part of the Internet and communications technology in general. Many large organizations, including the Department of Defense, are working toward deploying IPv6 in many varied applications. This thesis focuses on the design and implementation issues that accompany a migration from Internet Protocol version four (IPv4) to IPv6 in the Monterey Security Enhanced Architecture (MYSEA). The research for this thesis consists of two major parts: a functional comparison between the IPv6 and IPv4 designs, and a prototype implementation of MYSEA with IPv6. The current MYSEA prototype relies on a subset of Network Address Translation (NAT) functionality to support the network's operation; and, due to the fact that IPv6 has no native support for NAT, this work also requires the creation of a similar mechanism for IPv6. This thesis provides a preliminary examination of IPv6 in MYSEA, which is a necessary step in determining whether the new protocol will assist with or detract from the enforcement of MYSEA policies. / Ensign, United States Navy

Nesta dissertação são apresentados os resultados obtidos na elaboração de um sistema de aquisição e controle de experimentos, utilizando uma rede local de computadores. É proposta uma infra-estrutura baseada em instrumentação virtual em uma rede utilizando sistema operacional aberto e o protocolo de comunicação IPv6, parte integrante da camada de rede do protocolo TCP/IP. São selecionadas as tecnologias e ferramentas para o desenvolvimento do Laboratório remoto que se adaptam à integração entre o hardware e software para possibilitar o controle de experimentos e equipamentos de forma remota. A maior abrangência deste projeto está no desenvolvimento do Laboratório remoto com ferramentas de código aberto, como o sistema operacional Linux, o servidor Apache - como servidor WEB e o protocolo IPv6, para a comunicação da camada de rede. A proposta global deste trabalho é contribuir com a preparação da infra-estrutura de um ambiente de sistema operacional aberto, utilizado para a aquisição de dados em redes remotas, e com isto promover a cooperação e o compartilhamento de instrumentos, não se limitando apenas à área acadêmica e de pesquisa, mas estendendo essas facilidades para outras áreas do conhecimento. Como resultado deste trabalho é disponibilizado um Laboratório Virtual que possibilita o controle de um ensaio experimental, através de uma rede local. / In this dissertation are showed the results got in the making of acquisition and controlling experiments system, using a LAN. It´s offered a infra-structure based in virtual instrumentation for a network applying open operational system and the communication protocol Ipv6, part which belongs to network layer of TCP/IP protocol. The technologies and tools, which are chosen for the development of remote Laboratory, adapt themselves to integration between hardware and software to making possible the experiments and equipments control remoting. The main purpose of this project consist in the development of remote Laboratory with open-code tools, as Linux operational system, Apache server - as WEB server and Ipv6, for network layer communication. The global proposal of this work is contribute to setting up infra-structure of an open operational system, utilized to data acquisition in remote network, promote the work jointly and sharing of instruments, not restricting only to academic or knowledge areas. Like resulting of this work is available a Virtual Laboratory, which allow the control of experimental assay, through a LAN.

Nesta dissertação são apresentados os resultados obtidos na elaboração de um sistema de aquisição e controle de experimentos, utilizando uma rede local de computadores. É proposta uma infra-estrutura baseada em instrumentação virtual em uma rede utilizando sistema operacional aberto e o protocolo de comunicação IPv6, parte integrante da camada de rede do protocolo TCP/IP. São selecionadas as tecnologias e ferramentas para o desenvolvimento do Laboratório remoto que se adaptam à integração entre o hardware e software para possibilitar o controle de experimentos e equipamentos de forma remota. A maior abrangência deste projeto está no desenvolvimento do Laboratório remoto com ferramentas de código aberto, como o sistema operacional Linux, o servidor Apache - como servidor WEB e o protocolo IPv6, para a comunicação da camada de rede. A proposta global deste trabalho é contribuir com a preparação da infra-estrutura de um ambiente de sistema operacional aberto, utilizado para a aquisição de dados em redes remotas, e com isto promover a cooperação e o compartilhamento de instrumentos, não se limitando apenas à área acadêmica e de pesquisa, mas estendendo essas facilidades para outras áreas do conhecimento. Como resultado deste trabalho é disponibilizado um Laboratório Virtual que possibilita o controle de um ensaio experimental, através de uma rede local. / In this dissertation are showed the results got in the making of acquisition and controlling experiments system, using a LAN. It´s offered a infra-structure based in virtual instrumentation for a network applying open operational system and the communication protocol Ipv6, part which belongs to network layer of TCP/IP protocol. The technologies and tools, which are chosen for the development of remote Laboratory, adapt themselves to integration between hardware and software to making possible the experiments and equipments control remoting. The main purpose of this project consist in the development of remote Laboratory with open-code tools, as Linux operational system, Apache server - as WEB server and Ipv6, for network layer communication. The global proposal of this work is contribute to setting up infra-structure of an open operational system, utilized to data acquisition in remote network, promote the work jointly and sharing of instruments, not restricting only to academic or knowledge areas. Like resulting of this work is available a Virtual Laboratory, which allow the control of experimental assay, through a LAN.

A iminente implantação do IPv6, pode ser uma solução para o crescente uso de dispositivos móveis, para ensejar a mobilidade e para solucionar problemas derivados do esgotamento de endereços IPv4. Contudo, para o provimento de mobilidade é necessário garantir conectividade ao usuário, permitindo uma utilização continuada de seus dispositivos quando em movimento, sem que ocorra a perda de conexão, de forma segura e transparente. Isto não é possível com a arquitetura TCP/IP atualmente implementada nas redes que estão operacionais, mesmo que utilizem o protocolo IPv6. Neste sentido, este trabalho visa estudar as propostas mais expressivas no provimento de mobilidade sobre IPv6, com vistas a evidenciar suas características e funcionalidades. Apresenta como resultado, uma análise desses protocolos, em especial no que tange ao tempo de troca de rede (handover) e facilidade de implementação. / The imminent deployment of IPv6, may be a solution to the growing use of mobile devices, to bring mobility and to solve problems arising from the exhaustion of IPv4 addresses. However, to provide mobility is necessary ensure connectivity for the user, allowing continued use of their devices while on the move, without loss of connection, securely and transparently. This is not possible with the TCP/IP architecture currently deployed in networks that are operating, even if used the IPv6 protocol. Thus, this work aims to study the most significant proposals in the provision of mobile IPv6, in order to contrast their features and functionalities. Presents as result, an analysis of these protocols, especially with respect to time network exchange (handover) and ease of implementation.

Dans cette thèse, nous nous intéressons à la mise en œuvre de Proxy Mobile IPv6 (PMIPv6) dans les réseaux sans fil hétérogènes, dont la topologie peut être arbitraire et spontanée. Nous proposons d'abord le concept de groupe autonome ou "cluster" qui permet le passage à l'échelle des réseaux. Ensuite nous proposons des extensions à PMIPv6, appelée Scalable Proxy Mobile IPv6 (SPMIPv6), qui prennent en compte de l'architecture en clusters au travers de l'interaction entre de multiples Local Mobility Anchors (LMAs). Nous évaluons l'aptitude à supporter le passage à l'échelle de SPMIPv6 dans un contexte de réseau maillé sans fil en faisant varier sa taille, la vitesse moyenne et la densité des terminaux mobiles. En outre, nous proposons des méthodes pour l'optimisation du routage dans SPMIPv6 pour réduire les latences des communications. Nous introduisons également un mécanisme de détection de mouvements des terminaux mobiles qui prend en compte de l'hétérogénéité des technologies d'accès. Nous implémentons l'ensemble des propositions sous Linux dans un environnement virtualisé. Nous expérimentons différents scénarios dans le mode émulation ainsi qu'en vrai grandeur pour évaluer des mesures différentes telle que le coût de signalisation, la latence de handover, la perte de paquets, le temps aller-retour (RTT), et variation de débit. Finalement, nous adressons le contexte de multi-domiciliation en proposant un concept appelé virtual Stream Control Transmission Protocol (vSCTP) et l'appliquons à l'architecture PMIPv6. Les premières simulations sous Ns-2 laissent entrevoir des bénéfices pour les scénarios d'agrégation de bande passante et les scénarios d'équilibrage de charge.

Nos travaux de thèse ont pour objectif la conception, la mise en Suvre et l'évaluation d'architectures pour la mobilité et la qualité de service (QoS) dans des systèmes satellites DVB-S2/RCS. Ces systèmes peuvent constituer une solution alternative efficace aux réseaux terrestres dans des zones reculées à faible densité de population mais ils doivent pour cela offrir les mêmes services tout en tenant compte de leurs caractéristiques spécifiques, en particulier leur long délai de transmission qui peut s'avérer problématique dans le cadre d'applications multimédias interactives. Notre première contribution a donc été de développer une architecture de QoS adaptée à ce type d'applications, utilisant le modèle DiffServ et se basant essentiellement sur l'interaction entre l'architecture liée au protocole d'initiation de session SIP et différentes entités du système satellite. La QoS peut alors être configurée de façon précise au niveau des STs, par le biais de l'outil TC, en analysant les descripteurs de session SDP compris dans les messages SIP et en déduisant leurs caractéristiques (débit, gigue max, délai max, etc...) soit localement si elles sont connues, soit à partir d'un service Web que nous avons développé. Nous avons ensuite proposé et développé une solution de mobilité basée sur SIP, adaptée au système satellite ainsi qu'à la solution de QoS précédemment décrite. Les performances de cette solution ont alors été comparées, en termes de temps d'interruption et de consommation de ressources, avec celles obtenues par Mobile IPv6 et certaines de ses extensions, démontrant ainsi de réelles améliorations pour le cas des applications multimédias interactives. Enfin, notre dernière contribution a été de développer deux architectures couplant QoS et mobilité, une spécifiquement conçue pour les applications interactives et basée sur la combinaison de notre solution de mobilité SIP avec notre architecture de QoS SIP et une autre basée sur Mobile IPv6 ou FMI Pv6 et sur l'interaction d'un QoS Agent mobile avec les entités de QoS du système satellite. Ces architectures ont été évaluées et comparées sur la plateforme d'émulation PLATINE développée dans le cadre du projet SATSIX.