隧道是 IPv4向 IPv6过渡的一种方式，为处于 IPv4网络中的 IPv6孤岛提供 IPv6互联网接入。本文对Teredo 隧道的功能、流量和安全方面进行研究，着重分析了 Teredo 隧道中中继设备（relay）的工作原理，指出其节点状态管理机制存在的性能和安全性问题。以Miredo 中继设备为基础，提出了基于双层查找优化、状态集与时间链扩展、时间链更新优化的性能与安全性增强方法。实验结果表明，正常条件下，插入、更新和回收流程的平均时间缩短了50％-60％，提高了中继设备的转发和抗攻击能力。%Tunneling is one of the main mechanisms for transitioning from IPv4 to IPv6 .It facilitates interconnection of IPv6 islands at the edge of IPv4 internet and solves the communication problems between IPv6 islands and IPv6 internet .In this paper the function ,traffic and the security of Teredo Tunnel were studied .Additionally ,the operating principle of Teredo relay was specifically analyzed .Performance and security problems on “peer status management” in the relay were pointed out .Based on the relay of widespread Teredo software for Linux ,“Miredo” ,methods of two-level-trie ,status-timelist-expand and optimize-timelist-update are presented to improve the performance and security of Teredo relay .Experimental results show that under normal conditions ,time consumption for processes of inserting ,updating and garbage-collecting reduces by 50% -60% ,which enhances relay and anti-attack capability .
展开▼
