互联网地址跳变机制的设计与实现

发布时间：2018-12-12 08:17

【摘要】：随着计算机技术的发展和“互联网+”概念的提出,传统各行各业与互联网行业相互交融,互联网成为人们日常生活中越来越不可分割的一部分。智能手机、智能手表、智能家居、自动驾驶汽车等等各种各样的智能设备层出不穷,越来越多终端接入网络,为下一代互联网协议IPv6的应用推广奠定了基础。IPv6在扩展IPv4地址空间范围的同时,也为网络的安全性和扩展性带来更多提升。然而随着研究的深入,IPv6地址长期持有带来的安全隐患也愈加突出。本文通过对互联网IPv6地址跳变机制进行研究实验,从主机侧和服务器侧两个角度,分别设计和实现了互联网IPv6地址跳变系统,意在解决对利用IPv6地址长期持有进行数据监听的恶意网络监管行为的规避问题。在主机侧地址跳变中,利用DHCPv6 Relay对地址管理服务器下发给主机的真实地址进行拦截、跳变、记录、管理,通过身份地址管理服务器提供统一的跳变记录查询服务,并提出一种简单可行的主机地址跳变过程中通信连通性的保持方案;在服务器侧地址跳变中,利用智能DNS域名解析服务向主机提供与域名对应的跳变地址,并通过NAT地址转换的方式,使主机使用跳变地址仍能对服务器进行正常访问。文中先后从需求分析、概要设计、详细设计的角度对地址跳变系统进行了详细论述,并通过搭建物理网络、部署真实实验环境对系统进行了测试,并展示了重点成果。测试结果证明,主机能够成功通过地址跳变系统获取周期可控、范围可控的DHCPv6主机跳变地址;并且能通过DNS域名解析获取WEB服务器秒级跳变地址,能够通过NAT地址转换成功建立通信连接。且两种跳变中通信连通性的保持也得以实现和验证。证明了地址跳变系统的设计实现符合预期效果,对实际网络应用具有重要意义。
[Abstract]:With the development of computer technology and the introduction of the concept of "Internet", the traditional industries and the Internet industry intermingle with each other, and the Internet has become a more and more inseparable part of people's daily life. Smart phones, smartwatches, smart homes, self-driving cars, and all kinds of smart devices emerge in endlessly, and more terminals are connected to the network. IPv6 not only extends the range of IPv4 address space, but also improves the security and scalability of the network. However, with the deepening of the research, the security risks brought by long-term possession of IPv6 addresses have become more and more prominent. Through the research and experiment of the Internet IPv6 address jump mechanism, this paper designs and implements the Internet IPv6 address hopping system from the aspects of the host side and the server side, respectively. The purpose of this paper is to solve the problem of circumventing malicious network supervision by using IPv6 address to monitor data for a long time. In the host side address jump, DHCPv6 Relay is used to intercept, jump, record and manage the real address sent to the host by the address management server, and to provide uniform query service of jump record through the identity address management server. A simple and feasible scheme for maintaining communication connectivity in the process of host address hopping is proposed. In the server side address jump, the intelligent DNS domain name resolution service is used to provide the corresponding jump address of the domain name to the host, and through the way of NAT address translation, the host can still use the jump address to access the server normally. In this paper, the address jump system is discussed in detail from the point of view of requirement analysis, summary design and detailed design. The system is tested by setting up physical network and deploying real experimental environment, and the key achievements are also shown. The test results show that the host can successfully obtain the DHCPv6 host jump address with controllable cycle and controllable range through the address hopping system. And can obtain the WEB server second-level jump address through DNS domain name resolution, and can successfully establish the communication connection through NAT address translation. And the communication connectivity in the two kinds of jump can also be realized and verified. It is proved that the design and implementation of address jump system accord with the expected effect, and it is of great significance to the practical network application.
【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.0

【相似文献】