untitled

Size: px

Start display at page:

Download "untitled"

みそらあきくぼ
5 years ago
Views:

1 Linux-2.6 Mobile IPv6 MIPL2 26/12/8 Internet Week 26 1 MIP2 MIPL2 XFRM MIPL2 MN HA BU 26/12/8 Internet Week

2 Mobile IPv Linux-2.4 Mobile IPv6 HUT GO-Core Project Linux-2.6 Mobile IPv6 Linux-2.4 HUT GO-Core Project USAGI Project Linux 26/12/8 Internet Week 26 3 Mobile IPv6 Mobile Node MN Correspondent Node CN Home Agent Home Address HoA Care-of Address CoA Return Routability Binding Update BU Binding Acknowledgement BA Binding Cache BC Binding Update List BUL 26/12/8 Internet Week

3 Mobile IPv6 1 IPv6 Mobile IPv6 HA BC ISP-X ISP-A ISP-B ISP-C IP CN BC Mobile IPv6 MN 26/12/8 Internet Week 26 5 Mobile IPv6 2 TCP MN IP IP IP IP 26/12/8 Internet Week

4 Mobile IPv6 3 MN-HA IPsec HoA CoA HoA HA address SA MN-CN Return Routability MN-HA IPsec MNHoACoA MN CN keygen tokenbukbm IPsec HA 1-a. Home Test Init (HoTI) Kbm MN 1-b. Home Test (HoT) 2-a. Care-of Test Init (CoTI) CN Kbm 2-b. Care-of Test (CoT) 26/12/8 Internet Week 26 7 Mobile IPv6 4 HA1 MN1 HA HA2 MN2 HA IPv6 IPsec ISP-A 4 ISP-B ISP-C MN-HA IPv6-in-IPv6 IPsec MNHA MN1 MN2 26/12/8 Internet Week

5 Mobile IPv6IPv6 MN CN IPv6 DSTOPT Payload [src=hoa ][ CoA ] [dst=cn ] IPv6 DSTOPT Payload [src=hoa ][ CoA ] [dst=cn ] IPv6 DSTOPT Payload [src=coa ][ HoA ] [dst=cn ] IPv6 DSTOPT Payload [src=coa ][ HoA ] [dst=cn ] pseudo-header HoA 26/12/8 Internet Week 26 9 Mobile IPv6IPv6 CN MN IPv6 RH2 Payload [src=cn ][ CoA ] [dst=hoa ] IPv6 RH2 Payload [src=cn ][ CoA ] [dst=hoa ] IPv6 RH2 Payload [src=cn ][ HoA ] [dst=coa ] IPv6 RH2 Payload [src=cn ][ HoA ] [dst=coa ] pseudo-header HoA 26/12/8 Internet Week

6 MIPL2 MIPL2 HUT GO-Core Project USAGI Project MN/HA/CN Linux-2.6mip6d GPL IPv6 RFC3775, RFC3776 IPv6Mobile IPv6 26/12/8 Internet Week UMIP-.1 MIPL2 $MIPL2USER $MIPL2KERNEL $MIPL2USER/src/ha.c ip MIPL2ip 26/12/8 Internet Week

7 MIPL2 mip6d Home Agent Functions DHAAD (server) Proxy ND MPD (server) DHAAD (client) Mobile Node Functions Neighbor Discovery MPD (client) Movement detection Task Management Basic Components/Correspondent Node Functions Netlink I/O control Mobility Header Binding Management Return Routability Userland netlink raw socket Kernel XFRM Routing IPv6 Core Device IPv6 Ext. Header Multiple Table/ Policy Routing Neighbor cache IPv6-in-IPv6 Tunnel Prefix List IPsec IPv6 address 26/12/8 Internet Week MIPL2 1. IPv6 HA-MNIP-in-IP IP 2. XFRM IPsec IP 26/12/8 Internet Week

8 XFRM MIPv61 MIPv6 Linux-2.6XFRM MIPv6 XFRM XFRM XFRM MIPv6 TemplateMIPv6 MIPv6 BC BUL 26/12/8 Internet Week XFRM MIPv62 MIPv6 xfrm_policy{} xfrm_selector{} xfrm_tmpl{} xfrm_tmpl{} xfrm_state{} xfrm_id{} xfrm_selector{} props{} xfrm_state{} xfrm_id{} xfrm_selector{} props{} 26/12/8 Internet Week

9 TCP ip6_dst_lookup 3. XFRM xfrm_lookup dst_entry dst_output 3 XFRM 2 1 TCP flow xfrm_policy xfrm_state xfrm_state xfrm_state 26/12/8 Internet Week Mobile IPv6 XFRM 1 BU BA MN src src <HoA>/128 dst dst <HA <HA address>/128 proto dir dir out out priority 2 tmpl src src :: :: dst dst :: :: proto esp esp reqid 1 mode transport tmpl src src <HA <HA address> dst dst <HoA> proto hao hao reqid mode ro ro level use use IPsec MIPv6 src src <HA <HA address>/128 dst dst <HoA>/128 proto dir dir in in priority 2 tmpl src src :: :: dst dst :: :: proto esp esp reqid 2 mode transport tmpl src src :: :: dst dst :: :: proto route2 reqid mode ro ro level use use IPsec MIPv6 26/12/8 Internet Week

10 Mobile IPv6 XFRM 2 IPsecMN IPsec tunnel outbound src src <HoA>/128 dst dst ::/ proto dev dev dir dir out out priority 9 tmpl src src <CoA> dst dst <HA <HA address> proto esp esp reqid 3 mode tunnel IPsec IPsec tunnel inbound src src ::/ dst dst <HoA>/128 proto dev dev dir dir in in priority 9 tmpl src src <HA <HA address> dst dst <CoA> proto esp esp reqid 4 mode tunnel IPsec HA MN-HA IPsec 26/12/8 Internet Week Mobile IPv6 XFRM 3 MN outbound src src <HoA>/128 dst dst <CN <CN address>/128 dev dev dir dir out out priority tmpl src src <HoA> dst dst <CN <CN address> proto hao hao reqid mode ro ro level use use MIPv6 CNCN 26/12/8 Internet Week

11 Mobile IPv6 XFRM 4 CN Wild receiver inbound src src ::/ dst dst ::/ proto type 5 dir dir in in priority 8 tmpl src src :: :: dst dst :: :: proto hao hao reqid mode ro ro level use use MIPv6 CNBU Return Routability mip6d BU 26/12/8 Internet Week Mobile IPv6 XFRM 5 HA BU src src <MN1_HoA>/128 dst dst <HA <HA address>/128 proto dir dir in in priority 2 tmpl src src :: :: dst dst :: :: proto esp esp reqid 1 mode transport tmpl src src :: :: dst dst :: :: proto hao hao reqid mode ro ro level use use IPsec MIPv6 BA src src <HA <HA address>/128 dst dst <MN1_HoA>/128 proto dir dir out out priority 2 tmpl src src :: :: dst dst :: :: proto esp esp reqid 2 mode transport IPsec HA 26/12/8 Internet Week

12 Mobile IPv6 XFRM 6 IPsecHA IPsec inbound src src <HoA>/128 dst dst <HA <HA address>/128 proto dir dir in in priority 9 tmpl src src <CoA> dst dst <HA <HA address> proto esp esp reqid 3 mode tunnel IPsec IPsec outbound src src ::/ dst dst <MN1_HoA>/128 proto dev dev dir dir out out priority 9 tmpl src src <HA <HA address> dst dst <MN1_CoA> proto esp esp reqid 4 mode tunnel IPsec MNMN-HA IPsec 26/12/8 Internet Week Mobile IPv6 HoA Source Address Based Routing MN HA 26/12/8 Internet Week

13 2 MN #ip #ip -6-6 rule : : from all all lookup local 32766: from all all lookup main MN #ip #ip -6-6 rule : : from all all lookup local 11: from <HoA> lookup : from fe8::/64 lookup main 12: from <on-link subnet prefix> lookup main 32766: from all all lookup main 26/12/8 Internet Week MN-HA1 IPv6ip6tnl HoA CONFIG_IPV6_TUNNEL mainline MN Foreign Network HoA HA MN 26/12/8 Internet Week

14 MN-HA2 MN #ifconfig #ifconfig Link Link encap:unspec encap:unspec HWaddr HWaddr XX-XX-XX-XX-XX-XX-XX-XX-XX-XX-XX- XX-XX-XX-XX-XX-XX-XX-XX-XX-XX-XX- XX-XX-XX-XX-XX XX-XX-XX-XX-XX inet6 inet6 addr: addr: <HoA>/128 <HoA>/128 Scope:Global Scope:Global inet6 inet6 addr: addr: <link-local <link-local address>/64 address>/64 Scope:Link Scope:Link UP UP POINTOPOINT POINTOPOINT RUNNING RUNNING NOARP NOARP MTU:146 MTU:146 Metric:1 Metric:1 RX RX packets: packets: errors: errors: dropped: dropped: overruns: overruns: frame: frame: TX TX packets: packets: errors: errors: dropped: dropped: overruns: overruns: carrier: carrier: collisions: collisions: txqueuelen: txqueuelen: RX RX bytes: bytes: (. (. b) b) TX TX bytes: bytes: (. (. b) b) HA #ifconfig #ifconfig Link Link encap:unspec encap:unspec HWaddr HWaddr XX-XX-XX-XX-XX-XX-XX-XX-XX-XX-XX- XX-XX-XX-XX-XX-XX-XX-XX-XX-XX-XX- XX-XX-XX-XX-XX XX-XX-XX-XX-XX inet6 inet6 addr: addr: <link-local <link-local address>/64 address>/64 Scope:Link Scope:Link UP UP POINTOPOINT POINTOPOINT RUNNING RUNNING NOARP NOARP MTU:146 MTU:146 Metric:1 Metric:1 RX RX packets: packets: errors: errors: dropped: dropped: overruns: overruns: frame: frame: TX TX packets: packets: errors: errors: dropped: dropped: overruns: overruns: carrier: carrier: collisions: collisions: txqueuelen: txqueuelen: RX RX bytes: bytes: (. (. b) b) TX TX bytes: bytes: (. (. b) b) 26/12/8 Internet Week MN-HA 3 MN #netstat #netstat nr nr A A inet6 inet6 Kernel Kernel IPv6 IPv6 routing routing table table Destination Destination Flags Flags Metric Metric Ref Ref Use Use Iface Iface Next Next Hop Hop ::/ ::/ :: :: U U <HA <HA address>/128 address>/128 <HA <HA address> address> UC UC <HoA>/128 <HoA>/128 :: :: U U HA #netstat #netstat nr nr A A inet6 inet6 Kernel Kernel IPv6 IPv6 routing routing table table Destination Destination Flags Flags Metric Metric Ref Ref Use Use Iface Iface Next Next Hop Hop <MN1_HoA>/128 <MN1_HoA>/128 :: :: U U /12/8 Internet Week

15 MIPL2 netlink rule_add rule_del route_add route_del neigh_add nlmsg_type RTM_NEWRULE RTM_DELRULE RTM_NEWROUTE RTM_DELROUTE RTM_NEWNEIGH MN/HA MN/HA MN/HA MN/HA MN ND neigh_del RTM_DELNEIGH MN ND pneigh_add RTM_NEWNEIGH HA ND pneigh_del RTM_DELNEIGH HA ND addr_add addr_del prefix_add xfrm_policy_add RTM_NEWADDR RTM_DELADDR RTM_NEWPREFIX XFRM_MSG_NEWPOLICY, XFRM_MSG_UPDPOLICY MN MN MN MN/HA/CN XFRM xfrm_policy_del XFRM_MSG_DELPOLICY MN/HA/CN XFRM xfrm_state_add XFRM_MSG_ADDSA MN/HA/CN XFRM xfrm_state_del XFRM_MSG_DELSA MN/HA/CN XFRM 26/12/8 Internet Week MN 1 BUL HA BU MPD Home Link HoA HA BU CN BU NA Home-to-Foreign Foreign-to-Home Foreign Link-1 Foreign-to-Foreign Foreign Link-2 HA BU CN BU 26/12/8 Internet Week

16 MN 2 HL FL FL FL md_trigger_movement_event(...) mn_movement_event(struct movement_event *e) mn_move(struct home_addr_info *hai) L FL addr_do()hoa do_handoff(struct home_addr_info *hai, struct mn_addr *coa) mn_send_home_bu(struct home_addr_info *hai) mn_send_bu_msg(struct buletnry *bule) 26/12/8 Internet Week MN 2 FL HL md_trigger_movement_event(...) mn_movement_event(struct movement_event *e) mn_do_dad(struct home_addr_info *hai) HA BA mn_recv_ba(...) mn_move(struct home_addr_info *hai) do_handoff(struct home_addr_info *hai, struct mn_addr *coa) mn_send_home_bu(struct home_addr_info *hai) mn_send_bu_msg(struct buletnry *bule) mn_send_home_na(struct home_addr_info *hai) 26/12/8 Internet Week

17 MN 3 BU $MIPL2USER/src/mn.c: do_handoff() static static int int do_handoff(struct do_handoff(struct home_addr_info home_addr_info *hai, *hai, struct struct mn_addr mn_addr *coa) *coa) { { if if (!IN6_IS_ADDR_UNSPECIFIED(&hai->ha_addr)) (!IN6_IS_ADDR_UNSPECIFIED(&hai->ha_addr)) { { if if (hai->pend_ba) (hai->pend_ba) mn_send_home_bu(hai); mn_send_home_bu(hai); else else if if (!pending_bas) (!pending_bas) { { if if (!hai->at_home (!hai->at_home hai->home_reg_status hai->home_reg_status!=!= HOME_REG_NONE) HOME_REG_NONE) mn_send_home_bu(hai); mn_send_home_bu(hai); bul_iterate(&hai->bul, bul_iterate(&hai->bul, mn_rr_start_handoff, mn_rr_start_handoff, coa); coa); hai->verdict hai->verdict = = MN_HO_NONE; MN_HO_NONE; } } } } else else if if (!pending_bas) (!pending_bas) { { if if (hai->at_home) (hai->at_home) dhaad_stop(hai); dhaad_stop(hai); else else dhaad_start(hai); dhaad_start(hai); } } return return ; ; } } 26/12/8 Internet Week MN $MIPL2USER/src/mn.c: mn_send_home_bu() 1. BUL process_first_home_bu() HL FL FL FL FL HL 2. BUmn_send_bu_msg 3. HL FLIPsec IPsec MN-HA tunnel_mod 4. CN BUL CN BU 26/12/8 Internet Week

18 MN $MIPL2USER/src/mn.c: process_first_home_bu() MN-HA mn_tnl_state_add mn_ro_pol_add HoA MPD 26/12/8 Internet Week HA 1 start BAmh_send_ba Err = Registration not allowed (139) Err = Not home subnet (132) Err = Not home subnet (132) NO Err = Invalid sequence number (135) BCE NO home prefix YES YES BCEbcache_add_homereg ndisc_do_dad tunnel_add NDproxy_nd_start BAmh_send_ba MPA NO NO NO BCE home reg YES YES DAD NO YES home prefix YES CoA tunnel_mod BAmh_send_ba end 26/12/8 Internet Week

19 HA 2 1. BC bcache_add_homereg 2. ndisc_do_dad 3. tunnel_add NDproxy_nd_start 6. BAmh_send_ba 7. MPD 26/12/8 Internet Week BA status MIPL2 define IP6_MH_BAS_UNSPECIFIED IP6_MH_BAS_PROHIBIT IP6_MH_BAS_INSUFFICIENT IP6_MH_BAS_HA_NOT_SUPPORTED IP6_MH_BAS_NOT_HOME_SUBNET IP6_MH_BAS_NOT_HA IP6_MH_BAS_DAD_FAILED IP6_MH_BAS_SEQNO_BAD IP6_MH_BAS_HOME_NI_EXPIRED IP6_MH_BAS_COA_NI_EXPIRED IP6_MH_BAS_NI_EXPIRED IP6_MH_BAS_REG_NOT_ALLOWED HA Home Prefix MN HA HoA DAD Home Nonce Care-of Nonce Nonce HA CN HA CN 26/12/8 Internet Week

20 HA ND 1 HA BC MN HoA Proxy ND MN HoA CN MN NA ND NAR-bit MN override NC Home de-registration HA ND NA: I am 11::3. src=cn dst=solicited node multicast target=11::3 link-layer address: 1:23:45:67:89:ab HA BC NA NS: Who is 11::3? src=cn dst=solicited node multicast target=11::3 NS CN 26/12/8 Internet Week HA ND 2 MN BC ND proxy_nd_start() neighmod() netlink HA Neighbor Cache ND #ip #ip -6-6 neigh neigh show show <HA <HA address> address> dev dev <Home <Home I/F> I/F> lladdr lladdr <MAC <MAC address address of of Home Home I/F> I/F> STALE STALE <MN1_HoA> <MN1_HoA> dev dev <Home <Home I/F> I/F> proxy proxy PERMANENT PERMANENT ND $MIPL2USER/src/ndisc.c nlmsg_type int int pneigh_add(int pneigh_add(int ifindex, ifindex, uint8_t uint8_t flags, flags, struct struct in6_addr in6_addr *dst) *dst) { { return return neigh_mod(nlm_f_create NLM_F_REPLACE, neigh_mod(nlm_f_create NLM_F_REPLACE, RTM_NEWNEIGH, RTM_NEWNEIGH, ifindex, ifindex, NUD_PERMANENT, NUD_PERMANENT, flags NTF_PROXY, flags NTF_PROXY, dst, dst, NULL, NULL, ); ); } nlmsg_type } 26/12/8 Internet Week

21 IPsec/IKE IPsec MN IPsec MN XFRM IPsec SP XFRM IPsec SA K-bit IKE SA Mobile IPv6 IPsec/IKE MIPL2 MIGRATE 26/12/8 Internet Week Socket API Mobile IPv6 RFC4584 Mobile IPv6 IPv6 MIPv6 MIPL2 mip6d $MIPL2USER/src/libmissing/* 26/12/8 Internet Week

22 MIPL2 RFC3775 RFC3776 Mobile IPv6 mip6d HA-MN IPv6 XFRM 26/12/8 Internet Week RFC3775 Mobility Support in IPv6, D. Johnson, C. Perkins, J. Arkko, June RFC3776 Using IPsec to Protect Mobile IPv6 Signaling Between Mobile Nodes and Home Agents, J. Arkko, V. Devarapalli, F. Dupont, June RFC4225 Mobile IP Version 6 Route Optimization Security Design Background, P. Nikander, J. Arkko, T. Aura, G. Montenegro, E. Nordmark, December RFC4584 Extension to Sockets API for Mobile IPv6, S. Chakrabarti, E. Nordmark, July draft-sugimoto-mip6-pfkey-migrate-3.txt PF_KEY Extension as an Interface between Mobile IPv6 and IPsec/IKE, S. Sugimoto, F. Dupont, M. Nakamura, workin-progress. 26/12/8 Internet Week

23 Home Registration BU MN HA IPv6 header Home Address Destination Option Mobility Header (BU) Ver. Traffic class Flow label Payload length Next header Hop limit Source Address CoA Destination Address HA address Payload protocol Header length HoA Destination Address Payload protocol Header length MH type Reserved Checksum Sequence number A H L K reserved Lifetime 26/12/8 Internet Week Home Registration BA HA MN IPv6 header Routing Header Type2 Mobility Header (BA) Ver. Traffic class Flow label Payload length Next header Hop limit Source Address HA address CoA Destination Address Payload protocol Header length Type (2) Hop limit Reserved Home Address HoA Payload protocol Header length MH type Reserved Checksum Status K Reserved Sequence number Lifetime 26/12/8 Internet Week

24 MN CN Outer IPv6 header Inner IPv6 header Payload Ver. Ver. Traffic class Flow label Payload length Next header Hop limit Source Address CoA Destination Address HA address Traffic class Flow label Payload length Next header Hop limit Source Address HoA Destination Address CN address Payload 26/12/8 Internet Week MN CN IPv6 header Ver. Traffic class Flow label Payload length Next header Hop limit Source Address CoA Destination Address CN address Payload protocol Header length Home Address Destination Option Destination Address HoA Payload Payload 26/12/8 Internet Week

25 CN MN IPv6 header Routing Header Type2 Ver. Traffic class Flow label Payload length Payload length Payload length Source Address CN address Destination Address CoA Payload protocol Header length Type (2) Hop limit Reserved Home Address HoA Payload Payload 26/12/8 Internet Week

IP IPv4-IPv6

IPv6 Mobility IETF 2006 6 9 14:00-15:30 Interop Tokyo 2006 IIJ Nautilus6 IP IPv4-IPv6 L2 L3 Mobile IPv6 HIP L3.5 Shim6(?) L4 SCTP IPv6 Mobile IPv6/NEMO BS IETF RFC3775 - Mobile IPv6 RFC3963 - NEMO Basic