KR20080052856A - Apparatus and method for ipv6 tunneling - Google Patents

Abstract

An apparatus for IPv6 tunneling and a method thereof are provided to divide inputted packets into an IPv4 packet and an IPv6 packet using version information in the header information of the inputted packets, divide and decapsulate the IPv4 packet according to protocol information in the header information of the IPv4 packet, thereby increasing a decapsulation rate to improve system performance and a packet transfer rate. An apparatus for IPv6(Internet Protocol version6) tunneling comprises a packet header analyzing unit(51), a capsulating unit(52), a capsule removing unit(53), and a header arranging unit(54). The packet header analyzing unit analyzes the header of a packet to transfer the destination address of an IPv6 packet to the capsulating unit, and transfers an IPv4 packet and the destination address and header check information of the IPv4 packet to the capsule removing unit. The capsulating unit determines a received packet as a tunneling packet if three is the destination address received from the packet header analyzing unit in a first look-up table, and generates an IPv4 header, and inserts the generated IPv4 header to the IPv6 packet. The capsule removing unit deletes the IPv4 header of the IPv4 packet and deletes a UDP(User Datagram Protocol) port number with the IPv4 header according to the look-up table research result using the destination address of the IPv4 packet received from the packet header analyzing unit. The header arranging unit arranges the packet capsulated in the capsulating unit and the header field of a packet of which the capsule is removed by the capsule removing unit.

Description

IPv6 tunneling device and its method {Apparatus and Method for IPv6 Tunneling}

1 is a configuration diagram of an embodiment of a conventional IPv6 tunneling device;

2 is a diagram illustrating an exemplary embodiment of a conventional IPv6 tunneling method;

3 is a format configuration diagram of an IPv4 standard protocol header field used in the present invention;

4 is a format configuration diagram of an IPv6 standard protocol header field used in the present invention;

5 is a block diagram of an embodiment of an IPv6 tunneling device according to the present invention;

6 is a flowchart illustrating an embodiment of an IPv6 tunneling method according to the present invention.

* Explanation of symbols for the main parts of the drawings

51: packet header analysis unit 52: encapsulation unit

53: capsule removal unit 54: header alignment unit

55 tunneling management

521: First Lookup Table Retriever 522: Header Generator

523: header inserter 531: error detector

532: Second Lookup Table Finder 533: Third Lookup Table Finder

The present invention relates to an IPv6 tunneling apparatus and a method thereof, and more particularly, header information of the IPv4 packet without using a memory after separating whether it is an IPv4 packet or an IPv6 packet by using version information among header information of an input packet. The present invention relates to an IPv6 tunneling device and a method for improving the system performance and the packet transmission speed by increasing the decapsulation speed by separating and decapsulating IPv4 packets according to the protocol information.

The explosion of data traffic and the increase of Internet Protocol (IP) nodes due to the popularization of the Internet has resulted in the depletion of 32-bit Internet Protocol version 4 (IPv4) addresses. Force created Internet Protocol version 4 (IPv6) as the protocol to replace the IPv4 protocol.

Recently, as IPv6 is adopted as a standard, various systems that operate based on this have been developed. However, due to the numerous IPv4 networks existing on the Internet, a lot of time is required to convert all existing systems from IPv4 to IPv6 networks. need.

Therefore, the transition from the IPv4 network to the IPv6 network should be made gradually while solving the problems occurring between the IPv4 system and the IPv6 system. To solve these problems, three methods have been devised: dual stack, header translation, and tunneling. The dual tunneling method has two hosts that use IPv6 networks. It is used to communicate with each other over a network. That is, when an IPv6 packet enters an area using an IPv4 network, the method encapsulates an IPv6 packet in an IPv4 packet and then decapsulates when it exits an IPv4 area.

1 is a diagram illustrating a configuration of a conventional IPv6 tunneling device.

As shown in FIG. 1, the conventional IPv6 tunneling device includes an IPv6 network 100, an IPv4 network 120, and a 6 to 4 gateway 110 connected between the IPv6 network 100 and the IPv4 network 120. Include.

Here, the 6 to 4 gateway 110 may be an IPv6 packet processor 111, an extended ICMPv6 converter 112, an encapsulator 113, a decapsulator 114, an IPv6 packet processor 115, and an extended ICMPv4 converter ( 116).

Hereinafter, the components will be described in more detail.

First, the IPv6 packet processor 111 processes an IPv6 packet provided from the IPv6 network 100, and stores an ICMP echo request and time-exceed packet in an IPv6 packet having an address other than the IP address of the port where the destination address is received. Separate and print each IPv6 packet.

The extended Internet Control Message Protocol version 6 (ICMPv6) translator 112 processes the IPv6 ICMP echo request and time-exceed packet provided from the IPv6 packet processor 111 and provides it to the IPv4 network 120.

The encapsulator 113 performs the 6 to 4 tunneling operation defined by the RFC3056 and RFC2893 documents to encapsulate the IPv6 packets provided from the IPv6 packet processor 111 and provide them to the IPv4 network 120.

The IPv4 packet processor 115 processes the IPv4 packet provided from the IPv4 network 120, so that the protocol field of the echo request and optional data field part header including the IPv6 packet in the optional data field part among the packets is '41. It outputs separate timexed ICMPv4 packet and IPv4 packet coded with '.

The extended ICMPv4 translator 116 processes and provides the IPv4 ICMP echo request and time-exceed packet provided from the IPv4 packet processor 115 to the IPv6 network 100.

The decapsulator 114 performs the tunneling operation defined by the RFC3056 and RFC2893 documents to ticapsulate the IPv4 packet provided from the IPv4 packet processor 115 and provide it to the IPv6 network 100.

2 is a diagram illustrating an exemplary embodiment of a conventional IPv6 tunneling method.

First, the IPv6 host 201 transmits IPv6 data 205 to the IPv6 network 210. Then, the IPv6 Transit Router 202 located at the boundary between the IPv6 network 210 and the IPv4 network 220 encapsulates the received IPv6 data 205 into IPv4 and transmits it to another IPv6 transition router 203. do. That is, an IPv4 header is attached to the IPv6 data 205 and transmitted to the IPv4 network 220.

Thereafter, the IPv6 transition router 203 receiving the IPv4 encapsulated IPv6 data 206 decapsulates the IPv6 data 206 and transmits the IPv6 data 206 to the IPv6 network 230. That is, after removing the added IPv4 header to pass through the IPv4 network 220 and transmits to the IPv6 network 230.

Through this process, the IPv6 host 204 receives the IPv6 data 207 from which the IPv4 header has been removed.

In the conventional IPv6 tunneling device, when decapsulating an IPv4 packet, a memory for software processing or storing a packet is essential, and due to the large amount of memory access, it is difficult to maintain the line rate in actual IPv6 tunnel packet forwarding. It is difficult and has a problem that adversely affects system performance.

The present invention has been proposed to solve the above problems, and after separating the IPv4 packet or the IPv6 packet by using the version information of the header information of the input packet, the protocol information in the header information of the IPv4 packet without using a memory Accordingly, an object of the present invention is to provide an IPv6 tunneling device and method for improving system performance and packet transmission speed by increasing the decapsulation speed by separating and decapsulating IPv4 packets.

Other objects and advantages of the present invention can be understood by the following description, and will be more clearly understood by the embodiments of the present invention. Also, it will be readily appreciated that the objects and advantages of the present invention may be realized by the means and combinations thereof indicated in the claims.

An apparatus of the present invention for achieving the above object, in the IPv6 (Internet Protocol version 6) tunneling device, by analyzing the header of the packet and delivers the IPv6 packet and the destination address of the IPv6 packet to the encapsulation means, the IPv4 packet and the Packet header analyzing means for delivering the destination address and header check information of the IPv4 packet to the capsule removing means; The encapsulation means for generating an IPv4 header by judging it as a tunneling packet since the destination address received from the packet header analyzing means is present in the first lookup table; The capsule removing means for deleting an IPv4 header of an IPv4 packet or a UDP (User Datagram Protocol) port number together with an IPv4 header according to a lookup table search result using the destination address of the IPv4 packet received from the packet header analyzing means; And header alignment means for aligning header fields of the packet encapsulated by the encapsulation means and the packet from which the capsule is removed from the capsule removal means.

Meanwhile, in the Internet Protocol version 6 (IPv6) tunneling method, the method divides an incoming packet into an IPv6 packet and an IPv4 packet, and then divides the IPv4 packet according to whether a user datagram protocol (UDP) port number is attached. A packet separation step; Determining that the destination address of the IPv6 packet is present in a first lookup table and generating an IPv4 header by inserting the IPv6 header into the IPv6 packet; Deleting the IPv4 header and the UDP (User Datagram Protocol) port number of the IPv4 packet as a destination address of the IPv4 packet exists in a second lookup table; Deleting the IPv4 header of the IPv4 packet as the destination address of the IPv4 packet exists in a third lookup table; And aligning header fields of the encapsulated packet and the packet from which the encapsulation has been removed.

In addition, the present invention improves the system performance and the packet forwarding speed by hardware-processing IPv6 tunneling and processing that were processed by software.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, whereby those skilled in the art may easily implement the technical idea of the present invention. There will be. In addition, in describing the present invention, when it is determined that the detailed description of the known technology related to the present invention may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

3 is a format configuration diagram of an IPv4 standard protocol header field used in the present invention.

As shown in FIG. 3, the header of the IPv4 standard protocol used in the present invention includes a 4-bit version field 311, a 4-bit IHL field 312 indicating a header length, and a 8-bit Type of Service. Field 313, a 16-bit Total Length field 314 representing the length of the datagram, a 16-bit Identification field 315 for processing the fragment function of the data, and a 3-bit Flags field 316 ), A 13-bit Fragment Offset field 317, a Time to Live field 318 representing the survival time of data allowed by the system, an 8-bit Protocol field 319 representing the next level protocol, and a header. 16-bit Header Checksum field 320 to check, 32-bit Source Address field 321 indicating source address, 32-bit Destination Address field 322 indicating destination address, 24-bit Options field 323, 8 A padding field 324 of bits is included.

4 is a format configuration diagram of an IPv6 standard protocol header field used in the present invention.

As shown in Fig. 4, the header of the IPv6 standard protocol used in the present invention includes a 4-bit version field 411, an 8-bit traffic class field 412, and a QoS of 20-bit Flow Label field 413 associated with the Service, 16-bit unsigned integer Payload Length field 414 indicating the length of the data, and the type of header following in the IPv6 header. 8-bit Next Header (NH) field 415, which defines 8 bits, an 8-bit unsigned integer hop limit field 416, decremented by 1 at each node forwarding the packet, and 128-bit of the packet sender. A Source Address field 417 representing an address, a Destination Address field 418 representing a 128-bit address of the packet receiver, a source address port 419a, and a destination address port 419b. .

5 is a configuration diagram of an IPv6 tunneling apparatus according to an embodiment of the present invention.

As shown in FIG. 5, the IPv6 tunneling apparatus according to the present invention parses a header of an input packet to deliver an IPv6 packet and a destination address of the IPv6 packet to an encapsulation unit 52, and an IPv4 packet. And a destination address received from the packet header analyzer 51 and the packet header analyzer 51 for delivering the destination address and header checksum information of the IPv4 packet to the capsule remover 53. As it exists in the table, it is determined as a tunneling packet to generate an IPv4 header and then inserts it into an IPv6 packet. The encapsulation unit 52 and the lookup table search result using the destination address of the IPv4 packet received from the packet header analyzer 51 A capsule remover 53 for deleting an IPv4 header of the IPv4 packet or a user datagram protocol (UDP) port number together with an IPv4 header, and a packet encapsulated by the encapsulator 52 Providing a header alignment unit 54 for aligning header fields of packets decapsulated in section 53, and a processor interface, managing the lookup table, and controlling status monitoring and statistical registers; Tunneling management unit (Tunnel CSR) 55 for.

Here, the packet header analyzer 51 removes the capsule when receiving the Pv4 packet 6 to 4 that encapsulates the IPv6 packet and when receiving the IPv4 packet 6 over 4. At this time, the original IPv6 packet should not be changed, and when the IPv6 packet is transmitted to the final destination, that is, the capsule elimination node is not the final destination of the IPv6 packet, the value of the 'Hop Limit' field of the IPv6 header is reduced by one.

In addition, the encapsulation unit 52 may search the first lookup table using a destination address received from the packet header analyzer 51 as a key value to detect whether a tunneling packet is present, or the first lookup table searcher 521. A header generator 522 for generating an IPv4 header as the first lookup table searcher 521 searches for a destination address, and a header inserter for inserting the IPv4 header generated by the header generator 522 into an IPv6 packet. 523.

In this case, as the detection result of the first lookup table searcher 521 is a tunneling packet, the header generator 522 generates a field indicating that a next hop is a tunnel and forwarding header information for packet encapsulation.

The capsule removing unit 53 may include an error detector 531 and a packet header analyzer for detecting an error using header checksum information of an IPv4 packet received from the packet header analyzer 51. A second lookup table searcher (6 over 4 DIP Look up) 532 for searching the second lookup table using the destination address received from the 51 as a key value, and the destination address received from the packet header analyzer 51; A third lookup table lookup (6 to 4 DIP Look up) 53 for searching a third lookup table by key value, and the second lookup table lookup (if the error is not detected by the error detector 531); A header deleteer 534 for deleting the UDP port number and the IPv4 header as the corresponding destination address is retrieved in step 532, and deleting the IPv4 header as the corresponding destination address is retrieved in the third lookup table retriever 533. Include.

At this time, the packet header analyzer 51 separates whether the packet is an IPv4 packet or an IPv6 packet by using version information among headers of the input packet. When the protocol information is 'UDP', the packet header analyzer 51 determines the corresponding IPv4 by the second lookup table searcher 532. If the protocol information is '41', the packet transmits the destination address of the corresponding IPv4 packet to the third lookup table finder 533. At this time, the IPv4 packet is delivered to the encapsulation eliminator 534.

Additionally, the present invention provides an SPI interface receiving unit for receiving a packet input through an interface with a data link layer, converting the SPI interface into an internal bus so that internal logic can recognize, and converting a 3-bit size field into an 8-bit mask. And a SPI interface transmitter for transmitting a processed packet through an interface with a commercial network processor and a packet processor.

Here, the SPI interface receiving unit, the bus converter, and the SPI interface transmitting unit process packets input via an SPI interface from a 1 Gigabit Ethernet or 10 Gigabit Ethernet MAC chip.

In addition, the bus converter converts the 3-bit size signal received by the SPI interface receiver into an 8-bit mask pattern and converts the interface into an internal bus interface.

6 is a flowchart illustrating an embodiment of an IPv6 tunneling method according to the present invention.

First, the input packet is divided into IPv6 packet and IPv4 packet, and then the IPv4 packet is separated according to whether a User Datagram Protocol (UDP) port number is attached (601).

Thereafter, as the destination address of the IPv6 packet is present in the first lookup table, it is determined as a tunneling packet to generate an IPv4 header and inserted into the IPv6 packet (602).

Thereafter, as the destination address of the IPv4 packet exists in the second lookup table, the IPv4 header and the UDP (User Datagram Protocol) port number of the IPv4 packet are deleted (603).

Thereafter, as the destination address of the IPv4 packet exists in the third lookup table, the IPv4 header of the IPv4 packet is deleted (604).

Thereafter, the header fields of the encapsulated packet and the decapsulated packet are aligned (605).

As described above, the method of the present invention may be implemented as a program and stored in a recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.) in a computer-readable form. Since this process can be easily implemented by those skilled in the art will not be described in more detail.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the technical spirit of the present invention for those skilled in the art to which the present invention pertains. It is not limited by the drawings.

The present invention as described above, after separating the IPv4 packet or IPv6 packet using the version information of the header information of the input packet, and separates the IPv4 packet according to the protocol information of the header information of the IPv4 packet without using a memory By decapsulation, the speed of decapsulation can be increased to improve system performance and packet delivery speed.

Claims (7)

In the Internet Protocol version 6 (IPv6) tunneling device, Packet header analyzing means for analyzing the header of the packet to deliver the IPv6 packet and the destination address of the IPv6 packet to the encapsulation means, and to deliver the IPv4 packet and the destination address and header check information of the IPv4 packet to the capsule removing means; The encapsulation means for generating an IPv4 header by judging it as a tunneling packet since the destination address received from the packet header analyzing means is present in the first lookup table; The capsule removing means for deleting an IPv4 header of an IPv4 packet or a UDP (User Datagram Protocol) port number together with an IPv4 header according to a lookup table search result using the destination address of the IPv4 packet received from the packet header analyzing means; And Header aligning means for aligning a header field of a packet encapsulated in the encapsulation means and a packet decapsulated in the capsule removing means IPv6 tunneling device comprising a. The method of claim 1, Table management means for managing the first to third lookup tables IPv6 tunneling device further comprising. The method according to claim 1 or 2, The encapsulation means, First lookup table retrieving means for retrieving whether a tunneling packet is detected by searching a first lookup table based on a destination address received from the packet header analyzing means; Header generating means for generating an IPv4 header as the first lookup table searching means searches for a destination address; And Header insertion means for inserting the IPv4 header generated by the header generation means into an IPv6 packet IPv6 tunneling device comprising a. The method of claim 3, wherein The capsule removing means, Error detecting means for detecting whether there is an error by using header checksum information of the IPv4 packet received from the packet header analyzing means; Second lookup table retrieving means (6 over 4 DIP Look up) for retrieving a second lookup table based on a destination address received from the packet header analyzing means; Third lookup table retrieving means (6 to 4 DIP Look up) for retrieving a third lookup table based on a destination address received from the packet header analyzing means; And If an error is not detected by the error detecting means, a UDP port number and an IPv4 header are deleted as the corresponding destination address is searched by the second lookup table searching means, and the corresponding destination address is searched by the third lookup table searching means. Header deletion means for deleting an IPv4 header IPv6 tunneling device comprising a. The method of claim 4, wherein The packet header analysis means, If the protocol information is' UDP ', the destination address of the IPv4 packet is transmitted to the second lookup table searching means, and the protocol information is' 41 ', the IPv6 tunneling device, wherein the destination address of the IPv4 packet is transmitted to the third lookup table searching unit. In the Internet Protocol version 6 (IPv6) tunneling method, A packet separation step of dividing an input packet into an IPv6 packet and an IPv4 packet and separating the IPv4 packet according to whether a user datagram protocol (UDP) port number is attached; Determining that the destination address of the IPv6 packet is present in a first lookup table and generating an IPv4 header by inserting the IPv6 header into the IPv6 packet; Deleting the IPv4 header and the UDP (User Datagram Protocol) port number of the IPv4 packet as a destination address of the IPv4 packet exists in a second lookup table; Deleting the IPv4 header of the IPv4 packet as the destination address of the IPv4 packet exists in a third lookup table; And Aligning the header fields of the encapsulated packet with the decapsulated packet IPv6 tunneling method comprising a. The method of claim 6, The packet separation step, Separating whether the packet is an IPv4 packet or an IPv6 packet by using version information among header information of an input packet; Referring to the second lookup table when protocol information of header information of the separated IPv4 packet is 'UDP'; And Referencing a third lookup table if protocol information is '41' in the header information of the separated IPv4 packet; IPv6 tunneling method comprising a.

Images