_IPv6Summit金沢_IPv6アプリケーション開発.key

Size: px

Start display at page:

Download "_IPv6Summit金沢_IPv6アプリケーション開発.key"

みさえこのえ
7 years ago
Views:

1 IPv6 Summit in KANAZAWA

2 2

3 3

4 IPv4 API IP Networking Overview Supporting IPv6 DNS64/NAT64 Networks 4

5 IPv6 Azure VM load-balancer-ipv6-overview 5

6 Amazon S3, S3 Transfer Acceleration CloudFront WAF support-for-amazon-s3/ 6

7 Apple ios App Store IPv6 Microsoft Azure VM IPv6 AWS S3, CloudFront IPv6 IPv6 7

8 8

9 9

10 10

11 11

12 12

13 13

14 gethostbyname IPv6!! 14

15 15

16 IPv4 IPv6 32bit 128bit 8bit 16bit :

17 n bits Global Routing Prefix 64-n bits Subnet ID 64 bits Interface ID Subnet Prefix 29bit bit 3bit 29bit ( ) 64bit ID 64bit IPv4 IPv6 64bit

18 IPv6 1 NIC 2000::/3 fc00::/7 fe80::/10 18

19 IPv4 IPv6 19

20 IPv4 (2) IPv4 (1) IPv4 IPv6 Internet (3) IPv4/IPv6 IPv4/IPv6 IPv6 IPv6 20 IPv6 IPv4

21 IPv6 21

22 IPv6 22

23 23

24 use IO::Socket::IP; $host = ; : : my $sock = IO::Socket::IP->new( PeerAddr => $host, PeerPort => $port, Proto => 'tcp' ) or die Error: $!\n ; : : 24

25 public class SocketEx private final static String IP= ;// 25

26 26

27 DNS Server FQDN Internet Client HTTP :db8:100:: Web Server :db8:100::

28 ,etc. IP IP 28

29 Cookie IPv4 Cookie IPv4 IPv4/IPv6 IPv4/IPv6 IPv6 WG IPv

30 30

31 31

32 IPv6 IPv4 IPv6 32

33 IPv6 IPv4 IPv6 33

34 34

35 IPv4/IPv6 IP IPv4/IPv6 OS HTTP/HTTPS SMTP, SSH, TCP / UDP IP v4/v6 Ethernet OS IPv4/IPv6 35

36 36

37 IPv4/IPv6 IPv4/IPv6 37

38 38

39 39

40 IPv6 IPv4 IPv6 IPv4 40

41 IPv6 IPv4 IPv6 IPv4 41

jp 2001:db8:100::1 192.0.2.1 Web Server www.

42 DNS Server FQDN Internet Client HTTP :db8:100:: Web Server :db8:100::

43 43

44 example.jp DNS Server AAAA IPv4 A Client AAAA 2001:db8:100::1 HTTP IN AAAA 2001:db8:100::1 IN A Web Server :db8:100::1 44

45 IPv6 > IPv4 45

46 46

47 DNS Server IN AAAA 2001:db8:100::1 IN A Client Web Server :db8:ffff::1 AAAA 2001:db8:100::1 A HTTP IPv6 2001:db8:100:: HTTP IPv

48 DNS ISP 48

49 ISP IP DNS IPv6 ISP 49

50 50

51 API ios WebKit Web Cocoa URL URL CFNetwork.Core Services Android Web WebView Android.webkit.WebView HttpURLConnection java.net.httpurlconnection Web Socket java.net.socket 51

52 52

53 53

54 IPv4 IPv6 32bit 128bit 8bit 16bit : / 3 54

55 55

56 IPv4 IPv4 IPv6 IPv IPv4 / IPv6 IPv4-mapped(IPv6) address 56

57 Bad! IPv6 IPv4/IPv6 39 [VARCHAR(39)] 57 Good!

58 58

59 59

60 60

2001:db8:0:1::1:1 2001:db8:0:2::1 2001:db8:0:1::50 2001:db8:0:10::1 2001:db8:0:1::50 2001:db8:0:1::1:1

61 2001:db8:0:1::1:1 2001:db8:0:2::1 2001:db8:0:1:: :db8:0:10::1 2001:db8:0:1:: :db8:0:1::1:1 2001:db8:0:2::1 2001:db8:0:10::1 2001:db8:0:10::1 2001:db8:0:1::1:1 2001:db8:0:1:: :db8:0:2::1 61

2001:db8:0:1::1:1 2001:db8:0:2::1 2001:db8:0:1::50 2001:db8:0:10::1 2001:db8:0:1::50 2001:db8:0:1::1:1 2001:db8:0:2::1 2001:db8:0:10::1 2001:0db8:0000:0001:0000:0000:0001:0001

62 2001:db8:0:1::1:1 2001:db8:0:2::1 2001:db8:0:1:: :db8:0:10::1 2001:db8:0:1:: :db8:0:1::1:1 2001:db8:0:2::1 2001:db8:0:10::1 2001:0db8:0000:0001:0000:0000:0001: :0db8:0000:0002:0000:0000:0000: :0db8:0000:0001:0000:0000:0000: :0db8:0000:0010:0000:0000:0000: :0db8:0000:0001:0000:0000:0000: :0db8:0000:0001:0000:0000:0001: :0db8:0000:0002:0000:0000:0000: :0db8:0000:0010:0000:0000:0000:

63 63

64 1 2 fdb6:5591:2612:10:: [08/Oct/2016:17:52: ] "GET / HTTP/1.1" [08/Oct/2016:18:01: ] "GET / HTTP/1.1"

65 65

66 66

67 67

68 68

69 gethostbyname() IPv6 69

70 // IPv6 (AAAA ) $result = dns_get_record(' DNS_ALL); $result = gethostbyaddr( '); $result = gethostbyaddr( 2001:db8:0:1::1:1'); 70

71 71

72 DB DB INSERT DB 72

73 <?php require_once 'settings.php'; require_once 'modules.php'; $now = date('y/m/d H:i:s'); $array_access = array ( 'source_addr' => filter_input(input_server, 'REMOTE_ADDR', FILTER_VALIDATE_IP), 'source_port' => filter_input(input_server, 'REMOTE_PORT', FILTER_VALIDATE_INT), 'server_addr' => filter_input(input_server, 'SERVER_ADDR', FILTER_VALIDATE_IP), 'access_time' => $now, ); $logging = write_history($array_access); 73 index.php filter_input() IP

74 $sort_mode = array ( index.php 'key' => filter_input(input_get, 'sort_key', FILTER_VALIDATE_REGEXP, array('options' => array('regexp' => '/(^access_date$ ^source_addr$ ^source_port$ ^count$)/'))), 'desc' => filter_input(input_get, 'desc', FILTER_VALIDATE_REGEXP, array('options' => array('regexp' => '/(^desc$ ^asc$)/'))), 'count' => filter_input(input_get, 'count', FILTER_VALIDATE_INT, array('options' => array('min_range' => 0, 'max_range' => 1))), ); if (!$sort_mode['key']){ $sort_mode['key'] = 'access_date'; } $history = display_history($sort_mode);?> HTML 74

75 <?php // ////////////////////////// // function write_history ($array_access) { global $DSN; // ========================================== // DB varchar // ========================================== STORE_TYPE if (constant('store_type')!== 'INET') { require_once 'Net/IPv6.php'; if (Net_IPv6::checkIPv6($array_access['source_addr'])) { $source_addr = Net_IPv6::uncompress($array_access['source_addr'], TRUE); } else { 2 TRUE $source_addr = $array_access['source_addr']; } } 75 modules.php Net_IPv6::checkIPv6() IPv6

76 $query = 'INSERT INTO access_history ( access_date, source_addr, source_port) VALUES (now(), :ip, :port)'; if ($dbh = new PDO($DSN)) { $sth = $dbh->prepare($query); $sth->execute(array(':ip' => $array_access['source_addr'], ':port' => $array_access['source_port'])); $err_code = $sth->errorcode(); if ($err_code === '00000'){ return OK; } else { return WRITE_ERROR; } } else { echo "DB connection error"; return OPEN_ERROR; } } modules.php 76

77 // ///////////////////////// // function display_history ($sort_mode) { global $DSN; if ($sort_mode['count']){ // modules.php $query = 'SELECT source_addr, count(source_addr) FROM access_history GROUP BY source_addr'; if ($sort_mode['key'] === 'source_addr' $sort_mode['key'] === 'count' ){ $query.= ' ORDER BY '. $sort_mode['key']; if ($sort_mode['desc']) { $query.= ' '. $sort_mode['desc']; SQL ORDER } } BY 77

78 } else { // $query = 'SELECT * FROM access_history'; if ($sort_mode['key'] && $sort_mode['key']!== 'count' ){ $query.= ' ORDER BY '. $sort_mode['key']; if ($sort_mode['desc']) { $query.= ' '. $sort_mode['desc']; } $query.= ' NULLS LAST'; } } modules.php SQL ORDER BY 78

79 // ================================================= // DB modules.php // ================================================= $dbh = new PDO($DSN); if ($dbh) { $sth = $dbh->prepare($query); $sth->execute(); $result = $sth->fetchall(); $sth->errorcode(); } else { echo "DB connection error"; } 79

80 // ================================================= // // ================================================= if (constant('store_type')!== 'INET') { // require_once 'Net/IPv6.php'; } if ($sort_mode['count']) { $ret_string = '<H2> </H2><TABLE border="1"><tr><th>no.</ TH><TH> </TH><TH> </TH></TR>'; $size = sizeof($result); for ($loopcnt = 0; $loopcnt < $size; $loopcnt++){ modules.php 80

81 if (constant('store_type')!== 'INET') { // if (Net_IPv6::checkIPv6($result[$loopcnt]['source_addr'])){ $source_addr = Net_IPv6::compress($result[$loopcnt]['source_addr']); } else { $source_addr = $result[$loopcnt]['source_addr']; } } else { $source_addr = $result[$loopcnt]['source_addr']; } $ret_string.= "<TR><TD align='right'>". ($loopcnt +1). "</TD><TD>". $source_addr. "</TD><TD align='right'>". $result[$loopcnt]['count']. "</TD></TR>\n"; } $ret_string.= '</TABLE>'; modules.php 81

82 } else { modules.php $ret_string = '<H2> </H2><TABLE border="1"><tr><th>no.</ TH><TH> </TH><TH> </TH><TH> </ TH></TR>'; $size = sizeof($result); for ($loopcnt = 0; $loopcnt < $size; $loopcnt++){ if (constant('store_type')!== 'INET') { // if (Net_IPv6::checkIPv6($result[$loopcnt]['source_addr'])){ $source_addr = Net_IPv6::compress($result[$loopcnt]['source_addr']); } else { $source_addr = $result[$loopcnt]['source_addr']; } } else { $source_addr = $result[$loopcnt]['source_addr']; } 82

83 $ret_string.= "<TR><TD align='right'>". ($loopcnt +1). "</TD><TD>". $result[$loopcnt]['access_date']. "</TD><TD>". $source_addr. "</TD><TD align='right'>". $result[$loopcnt]['source_port']. "</TD></TR>\n"; } $ret_string.= '</TABLE>'; } return $ret_string; } modules.php?> 83

84 84

85 85

86 IPv6 IPv4 IPv6 86 IPv4

87 Client DNS Server AAAA 2001:db8:100::1 A IN AAAA 2001:db8:100::1 IN A Web Server :db8:ffff::1 HTTP IPv6 2001:db8:100:: HTTP IPv

88 gethostbyname() IPv6 88

89 89

90 <?php $IS_DEBUG = 0; $host = filter_input(input_get, 'host'); $port = filter_input(input_get, 'port', FILTER_VALIDATE_INT); if ($host && $port){ $addresses = array(); if ($host_addr = filter_var($host, FILTER_VALIDATE_IP, FILTER_FLAG_IPV6)){ $addresses[0]['domain'] = AF_INET6; $addresses[0]['address'] = $host_addr; } elseif ($host_addr = filter_var($host, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)){ $addresses[0]['domain'] = AF_INET; $addresses[0]['address'] = $host_addr; IPv6/IPv4 90

$} else { DNS $host_list = dns_get_record($host); $size = sizeof($host_list); for ($loopcnt = 0; $loopcnt < $size; $loopcnt++){ if ($host_list[$loopcnt]['type'] === 'AAAA'){$

91 } else { DNS $host_list = dns_get_record($host); $size = sizeof($host_list); for ($loopcnt = 0; $loopcnt < $size; $loopcnt++){ if ($host_list[$loopcnt]['type'] === 'AAAA'){ $addresses[$loopcnt]['domain'] = AF_INET6; gethostbyname() $addresses[$loopcnt]['address'] IPv6 = $host_list[$loopcnt]['ipv6']; } else { $addresses[$loopcnt]['domain'] = AF_INET; $addresses[$loopcnt]['address'] = $host_list[$loopcnt]['ip']; } } IPv6 AAAA IPv4 A } $size = sizeof($addresses); $message = " ". $host. " ". $port. "<BR>\n"; 91

92 $connect_flag = 0; for ($loopcnt = 0; $loopcnt < $size && $connect_flag === 0; $loopcnt++){ if (($socket = socket_create($addresses[$loopcnt]['domain'], SOCK_STREAM, SOL_TCP)) === FALSE){ $error_code = socket_last_error(); $error_msg = socket_strerror($error_code); $message.= "connect to ". $addresses[$loopcnt]['address']. "<BR>\n"; $message.= 'socket create error: ['. $error_code. '] '. $error_msg. "<BR>\n"; } else { $message.= 'socket connect ('. ($loopcnt +1). ') : '. $addresses[$loopcnt] ['address']. " port: ". $port. "<BR>\n"; 92

93 if (socket_connect($socket, $addresses[$loopcnt]['address'], $port)){ $connect_flag = 1; $response = socket_read($socket, 1024); $message.= " ". '<div style="margin: 10px">'. $response. '</div>'. "<BR>\n"; } else { $error_code = socket_last_error(); $error_msg = socket_strerror($error_code); $message.= 'socket connect error: ['. $error_code. '] '. $error_msg. "<BR>\n"; } socket_close($socket); } } } else { $message = " ". $host. " ". $port. " "; } 93

94 <html> <head> <meta charset="utf-8"> <title>socket </title> </head> <body> <H1>Socket </H1> <form action="<?php echo filter_input(input_server, 'PHP_SELF', FILTER_SANITIZE_URL)?>" method="get"> <input type='text' name='host' value='<?php echo $host;?>'> <input type='text' name='port'value='<?php echo $port;?>'> <input type="submit" value=" "> </form> <HR> <?php echo $message;?> </body> </html> 94

95 95

96 Apple IPv6-only Networking Overview Supporting IPv6 DNS64/NAT64 Networks 96

97 IPv6 DNS DNS IPv6 IPv6 IPv4 IPv6 IPv6 IPv6 97 DNS64 DNS NAT64 IPv4 IPv6 DNS DNS IPv4 DNS IPv4 IPv6 IPv4 IPv4 DNS Web IPv4 IPv

98 98

99 3,520 99

100 Networking Overview 100

101 101

102 IPv6 DNS64/NAT64 IPv6 DNS64/NAT64 IPv6 App Store IPv6 IPv6 DNS64/NAT64 102

103 IPv4 NAT IPv4 IPv4 IPv6 103

104 DNS64/NAT64 104

105 IPv6 DNS64/NAT64 App Store DNS64/NAT64 IPv6 105

106 IP IP IP IPv4 32bit IP IPv6 API 3 106

107 IP IPv6 DNS64/NAT64 IPv4 API FQDN IPv6 DNS64/NAT64 IPv6 DNS64/NAT64 IPv6 Apple 107

108 IPv4/IPv6 IP IPv4/IPv6 OS HTTP/HTTPS SMTP, SSH, TCP / UDP IP v4/v6 Ethernet OS IPv4/IPv6 108

109 DNS64/NAT64 OK DNS64/NAT64 App Store Mac IPv6 IPv4 IPv6/IPv4 109 Apple

110 1. IP FQDN IPv4 API DNS64/NAT64 110

111 Mac 111

112 DNS64/NAT64 Uplink IPv4 Mac IPv6/IPv4 internet ios Mac IPv4 IPv6 IPv4 DNS64/NAT64 112

113 [Option] 113

114 Wi- Fi Wi-Fi 114

115 115

116 116

117 IPv4 IPv6 RFC

118 IPv6 App Store Let s Hack IPv6 IPv6 SWG JPNIC 118

119 Mac Uplink I/F 2001:2::/ :db8:1::2/64 internet unbound rtadvd 119

120 2001:db8:2::/64 Mac internet,, unbound rtadvd Uplink I/F 2001:db8:1::2/64 NAT64 120

121 IPv6 DNS64/ NAT64 121

122 122

123 IPv6 IPv6 DNS DNS IPv6 listen IPv6 listen IPv6 App HTTP & HTTPS DNS CNAME 123

124 4 124

125 125

126 126

127 Web IPv6 127

128 128

129 129

アプリケーションのIPv6対応概要

アプリケーションのIPv6対応概要 IPv6 Summit in TOKYO 2016 IPv6 アプリケーション開発入門 2016年11月28日技術本部技術開発部渡辺露文自己紹介渡辺露文わたなべつゆふみ所属富士ソフト株式会社技術本部技術開発部エキスパートネットワークセキュリティ経歴インフラエンジニアとしてDCでのシステム構築や研究開発社内インフラの構築運用を経て現在はセキュリティ技術の調査