Research On FCFS SAVI Based On Stateless Address Auto-Configuration

With the rapid development of Society Informatization, full service operationand Internet of Things, the problem of IP address’s insufficient become increasinglyprominent, so the IPv6address is an inevitable choice. However, there are a lot ofnetwork and information security problems, which is the IPv6development can notbe avoided, to be solved, especially the question of traceability. Internet IP packetsforwarding based on destination IP address, and rarely check the authenticity of thepckets’ IP source address, which makes forged source IP address easily and frequently,and triggers a lot of security, management and meter fee issues. Although the protocolsecurity of the Next Generation Internet has been significantly improved, it still notcompletely solve the forged source address, IPv6source address validation hasbecome a challenge problem for the Next Generation Internet.The paper in-depth study on First-Come First-Serve Source Address ValidationImprovements program, which is based on IPv6stateless address auto-configurationprotocol, elaborated on its verification principle and method, and proposed aflag-based model to improve the verification efficiency. The main work are asfollows:1. Introduce the related knowledge and key technologies of the FCFS SAVIprogram. The focus is the duplicate address detection technology and SAVItechnology.2. Elaborated on the authentication principle and method of the FCFS SAVIprogram. The focus on analyzing FCFS SAVI protection perimeter, and its strengthsand disadvantage in FCFS SAVI program.3. Analysis the processing rule of DAD NS packets in the FCFS SAVI protectionperimeter, and propose that processing these packets by flag to improve the responserate; according to the issue that follow-up data packets that its source address hasbeen validated still need validate by the binding information, the paper proposes thatusing hash algorithm to match the binding information, and makes the flag to simplify the validation process of the data packets, and combined with the originalprogram proposes a flag-based FCFS SAVI validation model.Finally, the paper by simulation, verification that the validation rate of datapacket, the response rate of DAD NS packet and overall performance of theflag-based FCFS SAVI model. The experimental data indicate that the flag-basedFCFS SAVI model is better than the original program on the overall performance.