26.10.2012 Views

Internet Security - Dang Thanh Binh's Page

Internet Security - Dang Thanh Binh's Page

Internet Security - Dang Thanh Binh's Page

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

TCP/IP SUITE AND INTERNET STACK PROTOCOLS 33<br />

networks. By September 1993, it was clear that the growth in <strong>Internet</strong> users would require<br />

an interim solution while the details of IPv6 were being finalised. The resulting proposal<br />

was submitted as RFC 1519 titled ‘Classless Inter-Domain Routing (CIDR): an Address<br />

Assignment and Aggregation Strategy.’ CIDR is classless, representing a move away from<br />

the original IPv4 network class model. CIDR is concerned with interdomain routing rather<br />

than host identification. CIDR has a strategy for the allocation and use of IPv4 addresses,<br />

rather than a new proposal.<br />

2.1.5 IP Version 6 (IPv6, or IPng)<br />

The evolution of TCP/IP technology has led on to attempts to solve problems that improve<br />

service and extend functionalities. Most researchers seek new ways to develop and extend<br />

the improved technology, and millions of users want to solve new networking problems<br />

and improve the underlying mechanisms. The motivation behind revising the protocols<br />

arises from changes in underlying technology: first, computer and network hardware<br />

continues to evolve; second, as programmers invent new ways to use TCP/IP, additional<br />

protocol support is needed; third, the global <strong>Internet</strong> has experienced huge growth in size<br />

and use. This section examines a proposed revision of the <strong>Internet</strong> protocol which is one<br />

of the most significant engineering efforts so far.<br />

The network layer protocol is currently IPv4. IPv4 provides the basic communication<br />

mechanism of the TCP/IP suite. Although IPv4 is well designed, data communication has<br />

evolved since the inception of IPv4 in the 1970s. Despite its sound design, IPv4 has some<br />

deficiencies that make it unsuitable for the fast-growing <strong>Internet</strong>. The IETF decided to<br />

assign the new version of IP and to name it IPv6 to distinguish it from the current IPv4.<br />

The proposed IPv6 protocol retains many of the features that contributed to the success of<br />

IPv4. In fact, the designers have characterised IPv6 as being basically the same as IPv4<br />

with a few modifications: IPv6 still supports connectionless delivery, allows the sender to<br />

choose the size of a datagram, and requires the sender to specify the maximum number<br />

of hops a datagram can make before being terminated. In addition, IPv6 also retains most<br />

of IPv4’s options, including facilities for fragmentation and source routing.<br />

IP version 6 (IPv6), also known as the <strong>Internet</strong> Protocol next generation (IPng), is the<br />

new version of the <strong>Internet</strong> Protocol, designed to be a full replacement for IPv4. IPv6<br />

has an 128-bit address space, a revised header format, new options, an allowance for<br />

extension, support for resource allocation and increased security measures. However, due<br />

to the huge number of systems on the <strong>Internet</strong>, the transition from IPv4 to IPv6 cannot<br />

occur at once. It will take a considerable amount of time before every system in the<br />

<strong>Internet</strong> can move from IPv4 to IPv6. RFC 2460 defines the new IPv6 protocol. IPv6<br />

differs from IPv4 in a number of significant ways:<br />

• The IP address length in IPv6 is increased from 32 to 128 bits.<br />

• IPv6 can automatically configure local addresses and locate IP routers to reduce configuration<br />

and setup problems.<br />

• The IPv6 header format is simplified and some header fields dropped. This new header<br />

format improves router performance and make it easier to add new header types.<br />

• Support for authentication, data integrity and data confidentiality are part of the IPv6<br />

architecture.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!