Rapporten beskriver arbetet och resultaten av en prestandajämförelse mellan Teredo och 6to4, som används för att tunnla IPv6-trafik över publika IPv4-nätverk. Detta gjordes då ingen tidigare forskning hittats som jämför dessa tekniker ur prestandasynpunkt. Tre separata testmiljöer, en vardera för Teredo, 6to4 och 6to4 bakom NAT, sattes upp i en labbmiljö. I varje testmiljö skickades genererad trafik i åtta omgångar mellan två klienter, som samlade in testdata. Insamlad testdata bearbetades med formler för Throughput, End to End Delay, Round Trip Time och Jitter och ett medelresultat för varje räknades ut. Medelresultaten ställdes mot varandra i tabeller och grafer för överskådlig presentation och analys. Resultaten för End to End Delay ströks från prestandajämförelsen på grund av låg tillförlitlighet. Slutsatsen var att 6to4 presterade bättre än 6to4 bakom NAT vad gäller Throughput, Round Trip Time och Jitter i de tester som utförts. Orsaken till detta var den extra fördröjning som NAT gav när paket skickades och togs emot i testmiljön för 6to4 bakom NAT. På grund av skillnader i testmiljön hade resultaten för Teredo inte den tillförlitlighet som krävdes för att dra någon slutsats om teknikens prestanda gentemot 6to4 eller 6to4 bakom NAT.

IPv6 har, till skillnad från tidigare versioner av protokollet, inbyggt stöd för redundans hos gatewayenheter. Vid nyttjande av ett flertal gatewayenheter kan det, med hjälp av Neighbor Unreachability Detection, ske automatisk övergång till en ny gatewayenhet utifall att den aktiva skulle gå ur funktion. Innan IPv6 har man varit tvungen att förlita sig på externa lösningar för att uppnå denna redundans. Den huvudsakliga fråga som ställs i rapporten är om det inbyggda stödet för gatewayredundans i IPv6 är tillräckligt snabbt för att kunna nyttjas självständigt, utan att förlita sig på externa lösningar. För att kunna ta fram ett värde om vad som var ”tillräckligt snabbt” har vi, genom att läsa tidigare forskning om användares upplevelse av fördröjningar, kommit fram till att en fördröjning ej får överstiga tio sekunder. Rapporten undersöker även ifall det finns externa lösningar för gatewayredundans som arbetar tillräckligt snabbt, samt om det finns andra situationer där man kan föredra en extern lösning framför Neighbor Unreachability Detection. Efter ett antal experiment har vi kunnat klarlägga att det inbyggda stödet för gatewayredundans i IPv6 inte arbetar tillräckligt snabbt, enligt användare, för att självständigt klara av uppgiften. Undersökningar som beskrivs i rapporten visar även att ett externt First Hop Redundancy Protocol har god potential att återställa kommunikation tillräckligt snabbt för att en användare ska anse fördröjningen acceptabel. Dessutom bekräftar det här arbetet att det finns situationer där man kan föredra ett First Hop Redundancy Protocol framför Neighbor Unreachability Detection. / Unlike earlier versions of the Internet Protocol, IPv6 have native support for gateway redundancy. By using more than one gateway, Neighbor Unreachability Detection supports automatic switching to a new gateway in the case the active one fails. Before IPv6 you had to rely on external solutions to achieve this kind of redundancy. The main question that is set in the report is if the built-in support for gateway redundancy in IPv6 is fast enough to be used independently, without the use of external solutions. In order to obtain a value about what was “fast enough” we have, by reading previous research about how users experience delay, concluded that a delay must not exceed ten seconds. The report also examines if there are external solutions for gateway redundancy that operates quick enough, and if there are other situations where you might prefer an external solution over Neighbor Unreachability Detection. After a number of experiments we’ve been able to conclude that, according to users, the native support for gateway redundancy in IPv6 is not working fast enough to independently solve the task. Experiments described in the report also shows that an external First Hop Redundancy Protocol has good potential to restore communication fast enough for a user to find the delay acceptable. Furthermore the work confirms that there are situations where you might prefer a First Hop Redundancy Protocol over Neighbor Unreachability Detection.

Interoperation between IPv4 and IPv6 on a global scale is largely an unsolved problem, and in principle a problem without a proper solution. The 32-bit IPv4 address can simply not express all possible IPv6 hosts. Today, IP plays a double role. It is both a topological locator as well as a host identity. By decoupling the two roles a communication could also span over incompatible locator domains (e.g. IPv4 and IPv6). The Host Identity Protocol (HIP) [W16] uses this decoupling by providing two discrete data structures, one for the host identity and one for the interfaces locator.  By extending HIP to allow differently formatted locators, and with the help of an Identity Router, one could cross past differing locator domains without the individual hosts needing to be configured for any particular domain other than their own. The goal of this thesis is to investigate possible methods and architectures to allow this kind of locator domain interoperability and to implement a proof of concept gateway. The first part of the thesis consists of the exploration of the problem domain. Collecting the requirements of HIP enabled hosts, and to define a method for the interoperability of two HIP-hosts residing in two differing locator domains (IPv4/IPv6 will be assumed for scope limiting purposes). The output of this part will be a set of requirements, a suggested solution and a rationale for the chosen solution. The second part consists of the design and implementation of the required components for the interoperation. At the time of writing, the foreseen components will be: a parameter to HIP and a gateway, however, this is subject to change depending on the output of part one. The expected output of part two is a design specification, an implementation plan for the components and finally the implementation of the defined components. / NordicHIP

I januari 2011 delades de två sista fria IPv4-adressblocken ut av Internet Assigned Numbers Authority (IANA) till den asiatiska Internetregistratorn Apnic (Asia Pacific Network Information Centre). Detta innebär att adresserna som fanns i den centrala adresspoolen nu är slut. Registratorn hade ansökt om dessa adressblock eftersom det råder akut brist på Internet Protocol version 4- (IPv4-adresser) i Asien samtidigt som Internetanvändarna i denna del av världen ökar explosionsartat (Magnusson, 2011a). Apnic delar ut adresser i Asien och Stilla havsregionen. Det begränsade adressutrymmet har lett till en ökad användning av Network Address Translation (NAT) för att lösa problemet med adressbristen i IPv4-protokollet (Das, 2008a). För att istället bemöta detta problem med en mer långsiktig lösning, utvecklades Internetprotokollet Internet Protocol version 6 (IPv6) med ändamålet att helt ersätta IPv4- protokollet (Das, 2008b). I Sverige hade regeringen som mål att samtliga svenska myndigheter skulle ha infört IPv6 senast år 2013. Trots detta föredrar idag fortfarande många myndigheter IPv4-protokollet framför IPv6 i de grundläggande tjänsterna. Med de grundläggande tjänsterna menas extern webbplats, Domain Name System (DNS) och e-post kommunikation (PTS, 2013). Anledningen till denna måluppsättning är att regeringen vill att myndigheternas e-tjänster ska vara framtidssäkrade och nåbara med IPv6. Post och telestyrelsen (PTS) har fått i uppdrag att följa hur det går med införandet av IPv6 (PTS, 2013). Utvecklingen tycks inte ha skett i den takt som regeringen önskat och idag står 22 % av alla myndigheter fortfarande helt utan IPv6 (PTS E-tjänster, 2013). IPv6 för med sig inbyggd säkerhet som t.ex. Internet Protocol Security (IPSec) men också nya säkerhetsproblem (Magnusson, 2011b). Rapporten behandlar de säkerhetsproblem som kan uppstå vid olika övergångsmekanismer och kommer även att beröra de problem som kan uppstå vid en samexistens av IPv6 och IPv4. Rapporten visar på nya resultat som att ämnet övergångsmekanismer med relaterade säkerhetsproblem är ett oerhört känsligt ämne för många administratörer i branschen. Kännedomen om kategoriseringen för övergångsmekanismerna var överraskande bra. Rapporten avslöjar även att majoriteten av undersökta organisationer har blivit negativt påverkade vid en övergång till IPv6.

Address allocation has been a limiting factor in the deployment of multicast solutions, and, as other multicast technologies advance, a general solution to this problem becomes more urgent. This study examines the current state of address allocation and finds impediments in many of the proposed solutions. A number of the weaknesses can be traced back to the rapidly ageing Internet Protocol version 4, and therefore it was decided that a new approach is required. A central part of this work relies on the newer Internet Protocol version 6, specifically the Unicast prefix based multicast address format. The primary aim of this study was to develop an architecture for secure distributed IPv6 multicast address allocation. The architecture should be usable by client applications to retrieve addresses which are globally unique. The product of this work was the Distributed Allocation Of Multicast Addresses Protocol, or DAOMAP. It is a system whichcan be deployed on nodes which wish to take part in multicast address allocation and an implementation was developed. Analysis and simulations determined that the devised model fitted the stated requirements, and security testing determinedthat DAOMAP was safe from a series of attacks. / Dissertation (MSc (Computer Science))--University of Pretoria, 2006. / Computer Science / unrestricted

In order to implement wireless sensing and monitoring services at large scale, Internet connection is highly desirable. Particularly, TCP is indispensable for end-to-end connection orientated communication. It is well known that low power and low rate IEEE802.15.4 based Wireless Sensor Networks (WSNs) are vulnerable to the interference from collocated Wireless Local Area Networks (WLAN) utilizing the same un-licensed 2.4GHz frequency band. Such coexistence interference seriously deteriorates the performance of TCP/IPv6 over WSN, resulting in packet losses, disconnections, reduced throughput and so on. This thesis focuses on experimental research on the performance evaluation and improvement of TCP/IPv6 over IEEE 802.15.4 based WSN. In this research, a versatile testbed has been developed and implemented, which consists of off-the-selves and custom built hardware, open source and in-house developed firmware and software. A periodical monitoring/sensing application that uses TCP to transmit data over WSN has been developed and used for performance evaluation when there is various Wi-Fi interference close by. Based on the observations and analysis of our experimental results, several important parameters that impact the TCP packet transmission performance have been identified. Performance improvement technique is proposed to effectively adjust these parameters so as to support periodic monitoring/sensing application with substantial better performance. Extensive experiments have been performed in the testbed to evaluate the performance of WSN packets transmission via TCP over WSN when subjected to different Wi-Fi interference.

The Mobile IPv6 (MIPv6) protocol enables mobile nodes (MNs) to remain connected to other correspondent nodes (CNs) while roaming the IPv6 Internet. Home and correspondent registrations are essential parts of the MIPv6 protocol, whereby MNs register their care-of addresses (CoAs) with their home agents (HAs) and with their CNs, respectively. Security provision for home and correspondent registrations is a fundamental part of the MIPv6 protocol and has been an open research issue since the early stages of the protocol.This thesis examines state-of-the-art protocols for securing home and correspondent registrations in MIPv6 networks. The strengths and weaknesses of these protocols are discussed. The investigation of these protocols leads to the proposal of an enhanced home registration protocol and a family of correspondent registration protocols. The Enhanced Home Registration (EHR) protocol extends the basic home registration protocol defined in MIPv6 to support the location authentication of MNs to their HAs. The EHR is based on novel ideas of segmenting the IPv6 address space, using a symmetric CGA-based technique for generating CoAs, and applying concurrent CoAs reachability tests. As a result, EHR is able to reduce the likelihood of a malicious MN being successful in luring an HA to flood a third party with useless packets using MIPv6. In addition, EHR enables HAs to help in correspondent registrations by confirming MNs' CoAs to CNs. Simulation studies of EHR have shown that it only introduces a marginal increase in the registration delay, but a significant increase in the signalling overhead as a cost of supporting the location authentication of MNs.The thesis also proposes a family of correspondent registration protocols. These protocols rely on the assistance of home networks to confirm the MNs' ownership of the claimed HoAs and CoAs. The protocols consist of three phases: a creation phase, an update phase and a deletion phase. Informal and formal protocol analyses have confirmed the protocols' correctness and satisfaction of the required security properties. The protocols have been simulated extensively and the results show that they produce lower registration delay and a reduction in the signalling overhead during update and deletion phases. This is at the cost of a varying increase, depending on the protocol variant, in the registration delay and signalling overhead during the creation phase.

The aim of this master thesis is to create two laboratory exercises in ns-3 network simulator for chosen communication protocols. The chosen protocols are BGP and ICMPv6. The first part of this thesis contains teoretical knowledge used in order to design laboratory exercise. It contains descriptions of funcionality of both protocols and messages they use. This chapter also includes brief description of three options which were considered for implementation of BGP protocol into ns-3 enviroment. The second chapter consists of actual laboratory exercises which were created as a purpose of this thesis. Exercise for BGP protocol deals with creating neighborhoods between routers at autonomous system level, analyzing the way routers communicate within their neighborhoods and how protocol reacts when the connection between two neighbor routers fails. Exercise created for ICMPv6 protocol is focused on its messages and their usage within multiple protocol funcionalities, such as address configuration, link address resolution and error detection.

This master's thesis is focused on geolocation and visualization of IPv6 addresses. Several current approaches to geolocation have been discussed. Its main goal is to design geolocation database with regular updates with ability to visualize geographic location of the IPv6 address on the world map. Implemented system is gathering data about IPv6 prefixes from public Whois database. Gathered geographical addresses are mapped into coordinates by Google Maps Geocoding API. All gathered data are being saved into database together. Locations of IPv6 addresses are visualized via web-based Google Maps API. Moreover, the density mapping of IPv6 address blocks in particular countries can be visualized too.

This thesis is the result of the bachelor’s thesis project “Evaluating an IPv4 and IPv6 network”. The IPv6 protocol was created with the main purpose of solving the problem of the depletion of IPaddresses that IPv4 is currently facing. This thesis gives an introduction to the differences between IPv4 and IPv6 and when one should use one protocol rather than the other. It describes the services that we will use in order to evaluate what kinds of problems IPv4 may experience and if these problems can be solved by using IPv6. We also show how to set up a network with both protocols for each service that we examine. We will subsequently evaluate the performance of these two protocols for each of these services. We found that there were no significant differences in the performance of any of the applications that we tested with both IPv4 and IPv6. Due to the depletion of IPv4 addresses and the continuing rapid growth of the Internet, this thesis describes a very current and a relevant issue for computer networks today. / Denna avhandling är resultatet utav högskoleingenjörsexamensarbetet ”Utvärdera ett IPv4- och IPv6 nätverk”. IPv6-protokollet skapades huvudsakligen för att lösa bristen på IP adresser som IPv4 står inför.  Avhandlingen ger en introduktion till skillnaden mellan IPv4 och IPv6 och när det skulle vara mer lämpligt att använda det ena protokoll framför den andra. Den beskriver de tjänster som vi kommer att använda och utvärdera vilka typer av problem som IPv4 kan erfara och om dessa problem kan lösas med hjälp av IPv6. Vi förklarar också hur man sätter upp ett nätverk med de två protokollen för varje tjänst som vi utvärderar. Vi kommer sedermera utvärdera prestandan för båda protokollen för dessa tjänster. Vi kom fram till att det inte var några signifikanta skillnader i prestanda för någon av de applikationer som vi testade med både IPv4 och IPv6. På grund av utarmningen av IPv4-adresser och den snabba tillväxten av internet, så beskriver denna avhandling ett väldigt aktuellt och relevant problem i datornätverk idag.