CAJ | 학술논문

隧道是 IPv4向 IPv6过渡的一种方式，为处于 IPv4网络中的 IPv6孤岛提供 IPv6互联网接入。本文对Teredo 隧道的功能、流量和安全方面进行研究，着重分析了 Teredo 隧道中中继设备（relay）的工作原理，指出其节点状态管理机制存在的性能和安全性问题。以Miredo 中继设备为基础，提出了基于双层查找优化、状态集与时间链扩展、时间链更新优化的性能与安全性增强方法。实验结果表明，正常条件下，插入、更新和回收流程的平均时间缩短了50％-60％，提高了中继设备的转发和抗攻击能力。
수도시 IPv4향 IPv6과도적일충방식，위처우 IPv4망락중적 IPv6고도제공 IPv6호련망접입。본문대Teredo 수도적공능、류량화안전방면진행연구，착중분석료 Teredo 수도중중계설비（relay）적공작원리，지출기절점상태관리궤제존재적성능화안전성문제。이Miredo 중계설비위기출，제출료기우쌍층사조우화、상태집여시간련확전、시간련경신우화적성능여안전성증강방법。실험결과표명，정상조건하，삽입、경신화회수류정적평균시간축단료50％-60％，제고료중계설비적전발화항공격능력。
Tunneling is one of the main mechanisms for transitioning from IPv4 to IPv6 .It facilitates interconnection of IPv6 islands at the edge of IPv4 internet and solves the communication problems between IPv6 islands and IPv6 internet .In this paper the function ,traffic and the security of Teredo Tunnel were studied .Additionally ,the operating principle of Teredo relay was specifically analyzed .Performance and security problems on “peer status management” in the relay were pointed out .Based on the relay of widespread Teredo software for Linux ,“Miredo” ,methods of two-level-trie ,status-timelist-expand and optimize-timelist-update are presented to improve the performance and security of Teredo relay .Experimental results show that under normal conditions ,time consumption for processes of inserting ,updating and garbage-collecting reduces by 50% -60% ,which enhances relay and anti-attack capability .