Title: On mapping of address and port using translation

Authors: Aniruddha Bhattacharjya; Xiaofeng Zhong; Jing Wang; Xing Li

Addresses: Tsinghua National Laboratory for Information Science and Technology, Department of Electronic Engineering, Tsinghua University, Beijing, China ' Tsinghua National Laboratory for Information Science and Technology, Department of Electronic Engineering, Tsinghua University, Beijing, China ' Tsinghua National Laboratory for Information Science and Technology, Department of Electronic Engineering, Tsinghua University, Beijing, China ' Tsinghua National Laboratory for Information Science and Technology, Department of Electronic Engineering, Tsinghua University, Beijing, China

Abstract: Due to the shortage of IPv4 addresses, many hosts are currently assigned to a single IPv4 address by using one or a number of NAT devices. However, numerous NAT devices cannot be upgraded for executing 6to4 due to technical and/or economic reasons. Solutions depending on Double Network Address Translation 64 are a good way to utilise shared IP4 addressing. Mapping of address and port using translation (MAP-T) is a technique that accomplishes double translation on Border Relay (BR) and customer edge (CE) devices. IPv4 and IPv6 forwarding, IPv4 and IPv6 fragmentation functions, and NAT64 translation functions are used by MAP-T. This enables increasing numbers of IPv6 in both clients and servers in order to possess the best defence against certain attacks, such as routing loop attacks, spoofing attacks, denial-of-service attacks. We have here proposed some procedures for creating frameworks and sustaining secure IPv6 networks according to applications, environs and architecture.

Keywords: MAP-T; border relay; IPv4 tunnel (6to4); UDP/IPv4 datagrams; NAT; DoS; IPv6.

DOI: 10.1504/IJICS.2019.099419

International Journal of Information and Computer Security, 2019 Vol.11 No.3, pp.214 - 232

Available online: 10 Apr 2019 *

Full-text access for editors Access for subscribers Purchase this article Comment on this article