msgid "" msgstr "" "Project-Id-Version: English (cnp3-ebook)\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2026-04-18 21:27+0200\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: English \n" "Language: en\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n" "X-Generator: Weblate 5.14.3\n" #: ../../protocols/ipv6.rst:7 #, read-only msgid "The network layer" msgstr "The network layer" #: ../../protocols/ipv6.rst:9 #, read-only msgid "" "The main objective of the network layer is to allow hosts, connected to " "different networks, to exchange information through intermediate systems " "called :term:`router`. The unit of information in the network layer is " "called a :term:`packet`." msgstr "" "The main objective of the network layer is to allow hosts, connected to " "different networks, to exchange information through intermediate systems " "called :term:`router`. The unit of information in the network layer is " "called a :term:`packet`." #: ../../protocols/ipv6.rst:37 #, read-only msgid "" "Before explaining the network layer in detail, it is useful to begin by " "analyzing the service provided by the `datalink` layer. There are many " "variants of the datalink layer. Some provide a connection-oriented service " "while others provide a connectionless service. In this section, we focus on " "connectionless datalink layer services as they are the most widely used. " "Using a connection-oriented datalink layer causes some problems that are " "beyond the scope of this chapter. See :rfc:`3819` for a discussion on this " "topic." msgstr "" "Before explaining the network layer in detail, it is useful to begin by " "analyzing the service provided by the `datalink` layer. There are many " "variants of the datalink layer. Some provide a connection-oriented service " "while others provide a connectionless service. In this section, we focus on " "connectionless datalink layer services as they are the most widely used. " "Using a connection-oriented datalink layer causes some problems that are " "beyond the scope of this chapter. See :rfc:`3819` for a discussion on this " "topic." #: ../../protocols/ipv6.rst:57 #, read-only msgid "" "There are three main types of datalink layers. The simplest datalink layer " "is when there are only two communicating systems that are directly connected " "through the physical layer. Such a datalink layer is used when there is a " "point-to-point link between the two communicating systems. The two systems " "can be hosts or routers. :abbr:`PPP (Point-to-Point Protocol)`, defined in " ":rfc:`1661`, is an example of such a point-to-point datalink layer. Datalink " "layers exchange `frames` and a datalink :term:`frame` sent by a datalink " "layer entity on the left is transmitted through the physical layer, so that " "it can reach the datalink layer entity on the right. Point-to-point datalink " "layers can either provide an unreliable service " "(frames can be corrupted or lost) or a reliable service (in this case, the " "datalink layer includes retransmission mechanisms similar to the ones used " "in the transport layer). The unreliable service is frequently used above " "physical layers (e.g. optical fiber, twisted pairs) having a low bit error " "ratio while reliability mechanisms are often used in wireless networks to " "recover locally from transmission errors." msgstr "" "There are three main types of datalink layers. The simplest datalink layer " "is when there are only two communicating systems that are directly connected " "through the physical layer. Such a datalink layer is used when there is a " "point-to-point link between the two communicating systems. The two systems " "can be hosts or routers. :abbr:`PPP (Point-to-Point Protocol)`, defined in " ":rfc:`1661`, is an example of such a point-to-point datalink layer. Datalink " "layers exchange `frames` and a datalink :term:`frame` sent by a datalink " "layer entity on the left is transmitted through the physical layer, so that " "it can reach the datalink layer entity on the right. Point-to-point datalink " "layers can either provide an unreliable service " "(frames can be corrupted or lost) or a reliable service (in this case, the " "datalink layer includes retransmission mechanisms similar to the ones used " "in the transport layer). The unreliable service is frequently used above " "physical layers (e.g. optical fiber, twisted pairs) having a low bit error " "ratio while reliability mechanisms are often used in wireless networks to " "recover locally from transmission errors." #: ../../protocols/ipv6.rst:59 #, read-only msgid "" "The second type of datalink layer is the one used in Local Area Networks " "(LAN). Conceptually, a LAN is a set of communicating devices such that any " "two devices can directly exchange frames through the datalink layer. Both " "hosts and routers can be connected to a LAN. Some LANs only connect a few " "devices, but there are LANs that can connect hundreds or even thousands of " "devices." msgstr "" "The second type of datalink layer is the one used in Local Area Networks " "(LAN). Conceptually, a LAN is a set of communicating devices such that any " "two devices can directly exchange frames through the datalink layer. Both " "hosts and routers can be connected to a LAN. Some LANs only connect a few " "devices, but there are LANs that can connect hundreds or even thousands of " "devices." #: ../../protocols/ipv6.rst:65 #, read-only msgid "A local area network" msgstr "A local area network" #: ../../protocols/ipv6.rst:67 #, read-only msgid "" "In the next chapter, we describe the organization and the operation of Local " "Area Networks. An important difference between the point-to-point datalink " "layers and the datalink layers used in LANs is that in a LAN, each " "communicating device is identified by a unique `datalink layer address`. " "This address is usually embedded in the hardware of the device and different " "types of LANs use different types of datalink layer addresses. Most LANs use " "48-bits long addresses that are usually called `MAC` addresses. A " "communicating device attached to a LAN can send a datalink frame to any " "other communicating device that is attached to the same LAN. Most LANs also " "support special broadcast and multicast datalink layer addresses. A frame " "sent to the broadcast address of the LAN is delivered to all communicating " "devices that are attached to the LAN. The multicast addresses are used to " "identify groups of communicating devices. When a frame is sent towards a " "multicast datalink layer address, it is delivered by the LAN to all " "communicating devices that belong to the corresponding group." msgstr "" "In the next chapter, we describe the organization and the operation of Local " "Area Networks. An important difference between the point-to-point datalink " "layers and the datalink layers used in LANs is that in a LAN, each " "communicating device is identified by a unique `datalink layer address`. " "This address is usually embedded in the hardware of the device and different " "types of LANs use different types of datalink layer addresses. Most LANs use " "48-bits long addresses that are usually called `MAC` addresses. A " "communicating device attached to a LAN can send a datalink frame to any " "other communicating device that is attached to the same LAN. Most LANs also " "support special broadcast and multicast datalink layer addresses. A frame " "sent to the broadcast address of the LAN is delivered to all communicating " "devices that are attached to the LAN. The multicast addresses are used to " "identify groups of communicating devices. When a frame is sent towards a " "multicast datalink layer address, it is delivered by the LAN to all " "communicating devices that belong to the corresponding group." #: ../../protocols/ipv6.rst:71 #, read-only msgid "" "The third type of datalink layers are used in Non-Broadcast Multi-Access " "(NBMA) networks. These networks are used to interconnect devices like a LAN. " "All devices attached to an NBMA network are identified by a unique datalink " "layer address. However, and this is the main difference between an NBMA " "network and a traditional LAN, the NBMA service only supports unicast. The " "datalink layer service provided by an NBMA network supports neither " "broadcast nor multicast." msgstr "" "The third type of datalink layers are used in Non-Broadcast Multi-Access " "(NBMA) networks. These networks are used to interconnect devices like a LAN. " "All devices attached to an NBMA network are identified by a unique datalink " "layer address. However, and this is the main difference between an NBMA " "network and a traditional LAN, the NBMA service only supports unicast. The " "datalink layer service provided by an NBMA network supports neither " "broadcast nor multicast." #: ../../protocols/ipv6.rst:73 #, read-only msgid "" "Unfortunately no datalink layer is able to send frames of unlimited side. " "Each datalink layer is characterized by a maximum frame size. There are more " "than a dozen different datalink layers and unfortunately most of them use a " "different maximum frame size. The network layer must cope with the " "heterogeneity of the datalink layer." msgstr "" "Unfortunately no datalink layer is able to send frames of unlimited side. " "Each datalink layer is characterized by a maximum frame size. There are more " "than a dozen different datalink layers and unfortunately most of them use a " "different maximum frame size. The network layer must cope with the " "heterogeneity of the datalink layer." #: ../../protocols/ipv6.rst:77 #, read-only msgid "IP version 6" msgstr "IP version 6" #: ../../protocols/ipv6.rst:79 #, read-only msgid "" "In the late 1980s and early 1990s the growth of the Internet was causing " "several operational problems on routers. Many of these routers had a single " "CPU and up to 1 MByte of RAM to store their operating system, packet buffers " "and routing tables. Given the rate of allocation of IPv4 prefixes to " "companies and universities willing to join the Internet, the routing tables " "where growing very quickly and some feared that all IPv4 prefixes would " "quickly be allocated. In 1987, a study cited in :rfc:`1752`, estimated that " "there would be 100,000 networks in the near future. In August 1990, " "estimates indicated that the class B space would be exhausted by March 1994. " "Two types of solution were developed to solve this problem. The first short " "term solution was the introduction of Classless Inter Domain Routing " "(:term:`CIDR`). A second short term solution was the Network Address " "Translation (:term:`NAT`) mechanism, defined in :rfc:`1631`. NAT allowed " "multiple hosts to share a single public IPv4 address." msgstr "" "In the late 1980s and early 1990s the growth of the Internet was causing " "several operational problems on routers. Many of these routers had a single " "CPU and up to 1 MByte of RAM to store their operating system, packet buffers " "and routing tables. Given the rate of allocation of IPv4 prefixes to " "companies and universities willing to join the Internet, the routing tables " "where growing very quickly and some feared that all IPv4 prefixes would " "quickly be allocated. In 1987, a study cited in :rfc:`1752`, estimated that " "there would be 100,000 networks in the near future. In August 1990, " "estimates indicated that the class B space would be exhausted by March 1994. " "Two types of solution were developed to solve this problem. The first short " "term solution was the introduction of Classless Inter Domain Routing " "(:term:`CIDR`). A second short term solution was the Network Address " "Translation (:term:`NAT`) mechanism, defined in :rfc:`1631`. NAT allowed " "multiple hosts to share a single public IPv4 address." #: ../../protocols/ipv6.rst:87 #, read-only msgid "" "However, in parallel with these short-term solutions, which have allowed the " "IPv4 Internet to continue to be usable until now, the Internet Engineering " "Task Force started working on developing a replacement for IPv4. This work " "started with an open call for proposals, outlined in :rfc:`1550`. Several " "groups responded to this call with proposals for a next generation Internet " "Protocol (IPng) :" msgstr "" "However, in parallel with these short-term solutions, which have allowed the " "IPv4 Internet to continue to be usable until now, the Internet Engineering " "Task Force started working on developing a replacement for IPv4. This work " "started with an open call for proposals, outlined in :rfc:`1550`. Several " "groups responded to this call with proposals for a next generation Internet " "Protocol (IPng) :" #: ../../protocols/ipv6.rst:89 #, read-only msgid "TUBA proposed in :rfc:`1347` and :rfc:`1561`" msgstr "TUBA proposed in :rfc:`1347` and :rfc:`1561`" #: ../../protocols/ipv6.rst:90 #, read-only msgid "PIP proposed in :rfc:`1621`" msgstr "PIP proposed in :rfc:`1621`" #: ../../protocols/ipv6.rst:91 #, read-only msgid "SIPP proposed in :rfc:`1710`" msgstr "SIPP proposed in :rfc:`1710`" #: ../../protocols/ipv6.rst:93 #, read-only msgid "" "The IETF decided to pursue the development of IPng based on the SIPP " "proposal. As IP version `5` was already used by the experimental ST-2 " "protocol defined in :rfc:`1819`, the successor of IP version 4 is IP version " "6. The initial IP version 6 defined in :rfc:`1752` was designed based on the " "following assumptions :" msgstr "" "The IETF decided to pursue the development of IPng based on the SIPP " "proposal. As IP version `5` was already used by the experimental ST-2 " "protocol defined in :rfc:`1819`, the successor of IP version 4 is IP version " "6. The initial IP version 6 defined in :rfc:`1752` was designed based on the " "following assumptions :" #: ../../protocols/ipv6.rst:95 #, read-only msgid "IPv6 addresses are encoded as a 128 bits field" msgstr "IPv6 addresses are encoded as a 128 bits field" #: ../../protocols/ipv6.rst:96 #, read-only msgid "" "The IPv6 header has a simple format that can easily be parsed by hardware " "devices" msgstr "" "The IPv6 header has a simple format that can easily be parsed by hardware " "devices" #: ../../protocols/ipv6.rst:97 #, read-only msgid "A host should be able to configure its IPv6 address automatically" msgstr "A host should be able to configure its IPv6 address automatically" #: ../../protocols/ipv6.rst:98 #, read-only msgid "Security must be part of IPv6" msgstr "Security must be part of IPv6" #: ../../protocols/ipv6.rst:100 #, read-only msgid "The IPng address size" msgstr "The IPng address size" #: ../../protocols/ipv6.rst:102 #, read-only msgid "" "When the work on IPng started, it was clear that 32 bits was too small to " "encode an IPng address and all proposals used longer addresses. However, " "there were many discussions about the most suitable address length. A first " "approach, proposed by SIPP in :rfc:`1710`, was to use 64 bit addresses. A 64 " "bits address space was 4 billion times larger than the IPv4 address space " "and, furthermore, from an implementation perspective, 64 bit CPUs were being " "considered and 64 bit addresses would naturally fit inside their registers. " "Another approach was to use an existing address format. This was the TUBA " "proposal (:rfc:`1347`) that reuses the ISO CLNP 20 bytes addresses. The 20 " "bytes addresses provided room for growth, but using ISO CLNP was not favored " "by the IETF partially due to political reasons, despite the fact that mature " "CLNP implementations were already available. 128 bits appeared to be a " "reasonable compromise at that time." msgstr "" "When the work on IPng started, it was clear that 32 bits was too small to " "encode an IPng address and all proposals used longer addresses. However, " "there were many discussions about the most suitable address length. A first " "approach, proposed by SIPP in :rfc:`1710`, was to use 64 bit addresses. A 64 " "bits address space was 4 billion times larger than the IPv4 address space " "and, furthermore, from an implementation perspective, 64 bit CPUs were being " "considered and 64 bit addresses would naturally fit inside their registers. " "Another approach was to use an existing address format. This was the TUBA " "proposal (:rfc:`1347`) that reuses the ISO CLNP 20 bytes addresses. The 20 " "bytes addresses provided room for growth, but using ISO CLNP was not favored " "by the IETF partially due to political reasons, despite the fact that mature " "CLNP implementations were already available. 128 bits appeared to be a " "reasonable compromise at that time." #: ../../protocols/ipv6.rst:105 #, read-only msgid "IPv6 addressing architecture" msgstr "IPv6 addressing architecture" #: ../../protocols/ipv6.rst:107 #, read-only msgid "" "The experience of IPv4 revealed that the scalability of a network layer " "protocol heavily depends on its addressing architecture. The designers of " "IPv6 spent a lot of effort defining its addressing architecture :rfc:`3513`. " "All IPv6 addresses are 128 bits wide. This implies that there are :math:`" "340,282,366,920,938,463,463,374,607,431,768,211,456 (3.4 \\times 10^{38})` " "different IPv6 addresses. As the surface of the Earth is about 510,072,000 " ":math:`km^2`, this implies that there are about :math:`6.67 \\times 10^{23}` " "IPv6 addresses per square meter on Earth. Compared to IPv4, which offers " "only 8 addresses per square kilometer, this is a significant improvement on " "paper." msgstr "" "The experience of IPv4 revealed that the scalability of a network layer " "protocol heavily depends on its addressing architecture. The designers of " "IPv6 spent a lot of effort defining its addressing architecture :rfc:`3513`. " "All IPv6 addresses are 128 bits wide. This implies that there are :math:`" "340,282,366,920,938,463,463,374,607,431,768,211,456 (3.4 \\times 10^{38})` " "different IPv6 addresses. As the surface of the Earth is about 510,072,000 " ":math:`km^2`, this implies that there are about :math:`6.67 \\times 10^{23}` " "IPv6 addresses per square meter on Earth. Compared to IPv4, which offers " "only 8 addresses per square kilometer, this is a significant improvement on " "paper." #: ../../protocols/ipv6.rst:109 #, read-only msgid "Textual representation of IPv6 addresses" msgstr "Textual representation of IPv6 addresses" #: ../../protocols/ipv6.rst:111 #, read-only msgid "" "It is sometimes necessary to write IPv6 addresses in text format, e.g. when " "manually configuring addresses or for documentation purposes. The preferred " "format for writing IPv6 addresses is ``x:x:x:x:x:x:x:x``, where the ``x`` 's " "are hexadecimal digits representing the eight 16-bit parts of the address. " "Here are a few examples of IPv6 addresses :" msgstr "" "It is sometimes necessary to write IPv6 addresses in text format, e.g. when " "manually configuring addresses or for documentation purposes. The preferred " "format for writing IPv6 addresses is ``x:x:x:x:x:x:x:x``, where the ``x`` 's " "are hexadecimal digits representing the eight 16-bit parts of the address. " "Here are a few examples of IPv6 addresses :" #: ../../protocols/ipv6.rst:113 #, read-only msgid "``abcd:ef01:2345:6789:abcd:ef01:2345:6789``" msgstr "``abcd:ef01:2345:6789:abcd:ef01:2345:6789``" #: ../../protocols/ipv6.rst:114 #, read-only msgid "``2001:db8:0:0:8:800:200c:417a``" msgstr "``2001:db8:0:0:8:800:200c:417a``" #: ../../protocols/ipv6.rst:115 #, read-only msgid "``fe80:0:0:0:219:e3ff:fed7:1204``" msgstr "``fe80:0:0:0:219:e3ff:fed7:1204``" #: ../../protocols/ipv6.rst:117 #, read-only msgid "" "IPv6 addresses often contain a long sequence of bits set to ``0``. In this " "case, a compact notation has been defined. With this notation, `::` is used " "to indicate one or more groups of 16 bits blocks containing only bits set to " "`0`. For example," msgstr "" "IPv6 addresses often contain a long sequence of bits set to ``0``. In this " "case, a compact notation has been defined. With this notation, `::` is used " "to indicate one or more groups of 16 bits blocks containing only bits set to " "`0`. For example," #: ../../protocols/ipv6.rst:119 #, read-only msgid "" "``2001:db8:0:0:8:800:200c:417a`` is represented as " "``2001:db8::8:800:200c:417a``" msgstr "" "``2001:db8:0:0:8:800:200c:417a`` is represented as " "``2001:db8::8:800:200c:417a``" #: ../../protocols/ipv6.rst:120 #, read-only msgid "``ff01:0:0:0:0:0:0:101`` is represented as ``ff01::101``" msgstr "``ff01:0:0:0:0:0:0:101`` is represented as ``ff01::101``" #: ../../protocols/ipv6.rst:121 #, read-only msgid "``0:0:0:0:0:0:0:1`` is represented as ``::1``" msgstr "``0:0:0:0:0:0:0:1`` is represented as ``::1``" #: ../../protocols/ipv6.rst:122 #, read-only msgid "``0:0:0:0:0:0:0:0`` is represented as ``::``" msgstr "``0:0:0:0:0:0:0:0`` is represented as ``::``" #: ../../protocols/ipv6.rst:124 #, read-only msgid "" "An IPv6 prefix can be represented as `address/length`, where `length` is the " "length of the prefix in bits. For example, the three notations below " "correspond to the same IPv6 prefix :" msgstr "" "An IPv6 prefix can be represented as `address/length`, where `length` is the " "length of the prefix in bits. For example, the three notations below " "correspond to the same IPv6 prefix :" #: ../../protocols/ipv6.rst:126 #, read-only msgid "``2001:0db8:0000:cd30:0000:0000:0000:0000`` / ``60``" msgstr "``2001:0db8:0000:cd30:0000:0000:0000:0000`` / ``60``" #: ../../protocols/ipv6.rst:127 #, read-only msgid "``2001:0db8::cd30:0:0:0:0`` / ``60``" msgstr "``2001:0db8::cd30:0:0:0:0`` / ``60``" #: ../../protocols/ipv6.rst:128 #, read-only msgid "``2001:0db8:0:cd30::`` / ``60``" msgstr "``2001:0db8:0:cd30::`` / ``60``" #: ../../protocols/ipv6.rst:130 #, read-only msgid "" "IPv6 supports unicast, multicast and anycast addresses. An IPv6 unicast " "address is used to identify one datalink-layer interface on a host. If a " "host has several datalink layer interfaces " "(e.g. an Ethernet interface and a WiFi interface), then it needs several " "IPv6 addresses. In general, an IPv6 unicast address is structured as shown " "in the figure below." msgstr "" "IPv6 supports unicast, multicast and anycast addresses. An IPv6 unicast " "address is used to identify one datalink-layer interface on a host. If a " "host has several datalink layer interfaces " "(e.g. an Ethernet interface and a WiFi interface), then it needs several " "IPv6 addresses. In general, an IPv6 unicast address is structured as shown " "in the figure below." #: ../../protocols/ipv6.rst:153 #, read-only msgid "An IPv6 unicast address is composed of three parts :" msgstr "An IPv6 unicast address is composed of three parts :" #: ../../protocols/ipv6.rst:155 #, read-only msgid "" "A `global routing prefix` that is assigned to the Internet Service Provider " "that owns this block of addresses" msgstr "" "A `global routing prefix` that is assigned to the Internet Service Provider " "that owns this block of addresses" #: ../../protocols/ipv6.rst:156 #, read-only msgid "A `subnet identifier` that identifies a customer of the ISP" msgstr "A `subnet identifier` that identifies a customer of the ISP" #: ../../protocols/ipv6.rst:157 #, read-only msgid "" "An `interface identifier` that identifies a particular interface on a host" msgstr "" "An `interface identifier` that identifies a particular interface on a host" #: ../../protocols/ipv6.rst:159 #, read-only msgid "" "The subnet identifier plays a key role in the scalability of network layer " "addressing architecture. An important point to be defined in a network layer " "protocol is the allocation of the network layer addresses. A naive " "allocation scheme would be to provide an address to each host when the host " "is attached to the Internet on a first come first served basis. With this " "solution, a host in Belgium could have address ``2001:db8::1`` while another " "host located in Africa would use address ``2001:db8::2``. Unfortunately, " "this would force all routers on the Internet to maintain one route towards " "each host. In the network layer, scalability is often a function of the " "number of routes stored on the router. A network will usually work better if " "its routers store fewer routes and network administrators usually try to " "minimize the number of routes that are known by their routers. For this, " "they often divide their network prefix in smaller blocks. For example, " "consider a company with three campuses, a large one and two smaller ones. " "The network administrator would probably divide his block of addresses as " "follows :" msgstr "" "The subnet identifier plays a key role in the scalability of network layer " "addressing architecture. An important point to be defined in a network layer " "protocol is the allocation of the network layer addresses. A naive " "allocation scheme would be to provide an address to each host when the host " "is attached to the Internet on a first come first served basis. With this " "solution, a host in Belgium could have address ``2001:db8::1`` while another " "host located in Africa would use address ``2001:db8::2``. Unfortunately, " "this would force all routers on the Internet to maintain one route towards " "each host. In the network layer, scalability is often a function of the " "number of routes stored on the router. A network will usually work better if " "its routers store fewer routes and network administrators usually try to " "minimize the number of routes that are known by their routers. For this, " "they often divide their network prefix in smaller blocks. For example, " "consider a company with three campuses, a large one and two smaller ones. " "The network administrator would probably divide his block of addresses as " "follows :" #: ../../protocols/ipv6.rst:161 #, read-only msgid "the bottom half is used for the large campus" msgstr "the bottom half is used for the large campus" #: ../../protocols/ipv6.rst:162 #, read-only msgid "" "the top half is divided in two smaller blocks, one for each small campus" msgstr "" "the top half is divided in two smaller blocks, one for each small campus" #: ../../protocols/ipv6.rst:164 #, read-only msgid "" "Inside each campus, the same division can be done, for example on a per " "building basis, starting from the buildings that host the largest number of " "nodes, e.g. the company datacenter. In each building, the same division can " "be done on a per floor basis, ... The advantage of such a hierarchical " "allocation of the addresses is that the routers in the large campus only " "need one route to reach a router in the smaller campus. The routers in the " "large campus would know more routes about the buildings in their campus, but " "they do not need to know the details of the organization of each smaller " "campus." msgstr "" "Inside each campus, the same division can be done, for example on a per " "building basis, starting from the buildings that host the largest number of " "nodes, e.g. the company datacenter. In each building, the same division can " "be done on a per floor basis, ... The advantage of such a hierarchical " "allocation of the addresses is that the routers in the large campus only " "need one route to reach a router in the smaller campus. The routers in the " "large campus would know more routes about the buildings in their campus, but " "they do not need to know the details of the organization of each smaller " "campus." #: ../../protocols/ipv6.rst:166 #, read-only msgid "" "To preserve the scalability of the routing system, it is important to " "minimize the number of routes that are stored on each router. A router " "cannot store and maintain one route for each of the almost 1 billion hosts " "that are connected to today's Internet. Routers should only maintain routes " "towards blocks of addresses and not towards individual hosts. For this, " "hosts are grouped in `subnets` based on their location in the network. A " "typical subnet groups all the hosts that are part of the same enterprise. An " "enterprise network is usually composed of several LANs interconnected by " "routers. A small block of addresses from the Enterprise's block is usually " "assigned to each LAN." msgstr "" "To preserve the scalability of the routing system, it is important to " "minimize the number of routes that are stored on each router. A router " "cannot store and maintain one route for each of the almost 1 billion hosts " "that are connected to today's Internet. Routers should only maintain routes " "towards blocks of addresses and not towards individual hosts. For this, " "hosts are grouped in `subnets` based on their location in the network. A " "typical subnet groups all the hosts that are part of the same enterprise. An " "enterprise network is usually composed of several LANs interconnected by " "routers. A small block of addresses from the Enterprise's block is usually " "assigned to each LAN." #: ../../protocols/ipv6.rst:168 #, read-only msgid "" "In today's deployments, interface identifiers are always 64 bits wide. This " "implies that while there are :math:`2^{128}` different IPv6 addresses, they " "must be grouped in :math:`2^{64}` subnets. This could appear as a waste of " "resources, however using 64 bits for the host identifier allows IPv6 " "addresses to be auto-configured and also provides some benefits from a " "security point of view, as explained in section ICMPv6_." msgstr "" "In today's deployments, interface identifiers are always 64 bits wide. This " "implies that while there are :math:`2^{128}` different IPv6 addresses, they " "must be grouped in :math:`2^{64}` subnets. This could appear as a waste of " "resources, however using 64 bits for the host identifier allows IPv6 " "addresses to be auto-configured and also provides some benefits from a " "security point of view, as explained in section ICMPv6_." #: ../../protocols/ipv6.rst:174 #, read-only msgid "" "In practice, there are several types of IPv6 unicast address. Most of the `" "IPv6 unicast addresses `_ are allocated in blocks under the responsibility " "of IANA_. The current IPv6 allocations are part of the `2000::/3` address " "block. Regional Internet Registries (RIR) such as RIPE_ in Europe, ARIN_ in " "North-America or AfriNIC in Africa have each received a `block of IPv6 " "addresses `_ that they sub-allocate to Internet " "Service Providers in their region. The ISPs then sub-allocate addresses to " "their customers." msgstr "" "In practice, there are several types of IPv6 unicast address. Most of the `" "IPv6 unicast addresses `_ are allocated in blocks under the responsibility " "of IANA_. The current IPv6 allocations are part of the `2000::/3` address " "block. Regional Internet Registries (RIR) such as RIPE_ in Europe, ARIN_ in " "North-America or AfriNIC in Africa have each received a `block of IPv6 " "addresses `_ that they sub-allocate to Internet " "Service Providers in their region. The ISPs then sub-allocate addresses to " "their customers." #: ../../protocols/ipv6.rst:176 #, read-only msgid "" "When considering the allocation of IPv6 addresses, two types of address " "allocations are often distinguished. The RIRs allocate `provider-independent " "(PI)` addresses. PI addresses are usually allocated to Internet Service " "Providers and large companies that are connected to at least two different " "ISPs [CSP2009]_. Once a PI address block has been allocated to a company, " "this company can use its address block with the provider of its choice and " "change its provider at will. Internet Service Providers allocate `provider-" "aggregatable (PA)` address blocks from their own PI address block to their " "customers. A company that is connected to only one ISP should only use PA " "addresses. The drawback of PA addresses is that when a company using a PA " "address block changes its provider, it needs to change all the addresses " "that it uses. This can be a nightmare from an operational perspective and " "many companies are lobbying to obtain `PI` address blocks even if they are " "small and connected to a single provider. The typical size of the IPv6 " "address blocks are :" msgstr "" "When considering the allocation of IPv6 addresses, two types of address " "allocations are often distinguished. The RIRs allocate `provider-independent " "(PI)` addresses. PI addresses are usually allocated to Internet Service " "Providers and large companies that are connected to at least two different " "ISPs [CSP2009]_. Once a PI address block has been allocated to a company, " "this company can use its address block with the provider of its choice and " "change its provider at will. Internet Service Providers allocate `provider-" "aggregatable (PA)` address blocks from their own PI address block to their " "customers. A company that is connected to only one ISP should only use PA " "addresses. The drawback of PA addresses is that when a company using a PA " "address block changes its provider, it needs to change all the addresses " "that it uses. This can be a nightmare from an operational perspective and " "many companies are lobbying to obtain `PI` address blocks even if they are " "small and connected to a single provider. The typical size of the IPv6 " "address blocks are :" #: ../../protocols/ipv6.rst:178 #, read-only msgid "``/32`` for an Internet Service Provider" msgstr "``/32`` for an Internet Service Provider" #: ../../protocols/ipv6.rst:179 #, read-only msgid "``/48`` for a single company" msgstr "``/48`` for a single company" #: ../../protocols/ipv6.rst:180 #, read-only msgid "``/56`` for small user sites" msgstr "``/56`` for small user sites" #: ../../protocols/ipv6.rst:181 #, read-only msgid "``/64`` for a single user (e.g. a home user connected via ADSL)" msgstr "``/64`` for a single user (e.g. a home user connected via ADSL)" #: ../../protocols/ipv6.rst:182 #, read-only msgid "" "``/128`` in the rare case when it is known that no more than one host will " "be attached" msgstr "" "``/128`` in the rare case when it is known that no more than one host will " "be attached" #: ../../protocols/ipv6.rst:189 #, read-only msgid "" "There is one difficulty with the utilization of these IPv6 prefixes. " "Consider Belnet, the Belgian research ISP that has been allocated the " "``2001:6a8::/32`` prefix. Universities are connected to Belnet. UCLouvain " "uses prefix ``2001:6a8:3080::/48`` while the University of Liege uses " "``2001:6a8:2d80::/48``. A commercial ISP uses prefix ``2a02:2788::/32``. " "Both Belnet and the commercial ISP are connected to the global Internet." msgstr "" "There is one difficulty with the utilization of these IPv6 prefixes. " "Consider Belnet, the Belgian research ISP that has been allocated the " "``2001:6a8::/32`` prefix. Universities are connected to Belnet. UCLouvain " "uses prefix ``2001:6a8:3080::/48`` while the University of Liege uses " "``2001:6a8:2d80::/48``. A commercial ISP uses prefix ``2a02:2788::/32``. " "Both Belnet and the commercial ISP are connected to the global Internet." #: ../../protocols/ipv6.rst:196 #, read-only msgid "" "The Belnet network advertises prefix ``2001:6a8::/32`` that includes the " "prefixes from both UCLouvain and ULg. These two subnetworks can be easily " "reached from any internet connected host. After a few years, UCLouvain " "decides to increase the redundancy of its Internet connectivity and buys " "transit service from ISP1. A direct link between UCLouvain and the " "commercial ISP appears on the network and UCLouvain expects to receive " "packets from both Belnet and the commercial ISP." msgstr "" "The Belnet network advertises prefix ``2001:6a8::/32`` that includes the " "prefixes from both UCLouvain and ULg. These two subnetworks can be easily " "reached from any internet connected host. After a few years, UCLouvain " "decides to increase the redundancy of its Internet connectivity and buys " "transit service from ISP1. A direct link between UCLouvain and the " "commercial ISP appears on the network and UCLouvain expects to receive " "packets from both Belnet and the commercial ISP." #: ../../protocols/ipv6.rst:199 #, read-only msgid "" "Now, consider how a router inside ``alpha.com`` would reach a host in the " "``UCLouvain`` network. This router has two routes towards " "``2001:6a8:3080::1``. The first one, for prefix ``2001:6a8:3080::/48`` is " "via the direct link between the commercial ISP and UCLouvain. The second " "one, for prefix ``2001:6a8::/32`` is via the Internet and Belnet. Since " ":rfc:`1519` when a router knows several routes towards the same destination " "address, it must forward packets along the route having the longest prefix " "length. In the case of ``2001:6a8:3080::1``, this is the route " "``2001:6a8:3080::/48`` that is used to forward the packet. This forwarding " "rule is called the `longest prefix match` or the `more specific match`. All " "IP routers implement this forwarding rule." msgstr "" "Now, consider how a router inside ``alpha.com`` would reach a host in the " "``UCLouvain`` network. This router has two routes towards " "``2001:6a8:3080::1``. The first one, for prefix ``2001:6a8:3080::/48`` is " "via the direct link between the commercial ISP and UCLouvain. The second " "one, for prefix ``2001:6a8::/32`` is via the Internet and Belnet. Since " ":rfc:`1519` when a router knows several routes towards the same destination " "address, it must forward packets along the route having the longest prefix " "length. In the case of ``2001:6a8:3080::1``, this is the route " "``2001:6a8:3080::/48`` that is used to forward the packet. This forwarding " "rule is called the `longest prefix match` or the `more specific match`. All " "IP routers implement this forwarding rule." #: ../../protocols/ipv6.rst:201 #, read-only msgid "" "To understand the `longest prefix match` forwarding, consider the IPv6 " "routing below." msgstr "" "To understand the `longest prefix match` forwarding, consider the IPv6 " "routing below." #: ../../protocols/ipv6.rst:214 #, read-only msgid "" "With the longest match rule, the route ``::/0`` plays a particular role. As " "this route has a prefix length of `0` bits, it matches all destination " "addresses. This route is often called the `default` route." msgstr "" "With the longest match rule, the route ``::/0`` plays a particular role. As " "this route has a prefix length of `0` bits, it matches all destination " "addresses. This route is often called the `default` route." #: ../../protocols/ipv6.rst:216 #, read-only msgid "" "a packet with destination ``2a02:2788:2c4:16f::1`` received by router `R` is " "destined to a host on interface ``eth0`` ." msgstr "" "a packet with destination ``2a02:2788:2c4:16f::1`` received by router `R` is " "destined to a host on interface ``eth0`` ." #: ../../protocols/ipv6.rst:217 #, read-only msgid "" "a packet with destination ``2001:6a8:3080::1234`` matches three routes : " "``::/0``, ``2001:6a8::/32`` and ``2001:6a8:3080::/48``. The packet is " "forwarded via gateway ``fe80::bad:cafe``" msgstr "" "a packet with destination ``2001:6a8:3080::1234`` matches three routes : " "``::/0``, ``2001:6a8::/32`` and ``2001:6a8:3080::/48``. The packet is " "forwarded via gateway ``fe80::bad:cafe``" #: ../../protocols/ipv6.rst:218 #, read-only msgid "" "a packet with destination ``2001:1890:123a::1:1e`` matches one route : " "``::/0``. The packet is forwarded via ``fe80::dead:beef``" msgstr "" "a packet with destination ``2001:1890:123a::1:1e`` matches one route : " "``::/0``. The packet is forwarded via ``fe80::dead:beef``" #: ../../protocols/ipv6.rst:219 #, read-only msgid "" "a packet with destination ``2001:6a8:3880:40::2`` matches two routes : " "``2001:6a8::/32`` and ``::/0``. The packet is forwarded via " "``fe80::aaaa:bbbb``" msgstr "" "a packet with destination ``2001:6a8:3880:40::2`` matches two routes : " "``2001:6a8::/32`` and ``::/0``. The packet is forwarded via " "``fe80::aaaa:bbbb``" #: ../../protocols/ipv6.rst:225 #, read-only msgid "" "The longest prefix match can be implemented by using different data " "structures One possibility is to use a trie. Details on how to implement " "efficient packet forwarding algorithms may be found in [Varghese2005]_." msgstr "" "The longest prefix match can be implemented by using different data " "structures One possibility is to use a trie. Details on how to implement " "efficient packet forwarding algorithms may be found in [Varghese2005]_." #: ../../protocols/ipv6.rst:230 #, read-only msgid "" "For the companies that want to use IPv6 without being connected to the IPv6 " "Internet, :rfc:`4193` defines the `Unique Local Unicast (ULA)` addresses " "(``fc00::/7``). These ULA addresses play a similar role as the private IPv4 " "addresses defined in :rfc:`1918`. However, the size of the ``fc00::/7`` " "address block allows ULA to be much more flexible than private IPv4 " "addresses." msgstr "" "For the companies that want to use IPv6 without being connected to the IPv6 " "Internet, :rfc:`4193` defines the `Unique Local Unicast (ULA)` addresses " "(``fc00::/7``). These ULA addresses play a similar role as the private IPv4 " "addresses defined in :rfc:`1918`. However, the size of the ``fc00::/7`` " "address block allows ULA to be much more flexible than private IPv4 " "addresses." #: ../../protocols/ipv6.rst:234 #, read-only msgid "" "Furthermore, the IETF has reserved some IPv6 addresses for a special usage. " "The two most important ones are :" msgstr "" "Furthermore, the IETF has reserved some IPv6 addresses for a special usage. " "The two most important ones are :" #: ../../protocols/ipv6.rst:236 #, read-only msgid "" "``0:0:0:0:0:0:0:1`` (``::1`` in compact form) is the IPv6 loopback address. " "This is the address of a logical interface that is always up and running on " "IPv6 enabled hosts." msgstr "" "``0:0:0:0:0:0:0:1`` (``::1`` in compact form) is the IPv6 loopback address. " "This is the address of a logical interface that is always up and running on " "IPv6 enabled hosts." #: ../../protocols/ipv6.rst:237 #, read-only msgid "" "``0:0:0:0:0:0:0:0`` (``::`` in compact form) is the unspecified IPv6 " "address. This is the IPv6 address that a host can use as source address when " "trying to acquire an official address." msgstr "" "``0:0:0:0:0:0:0:0`` (``::`` in compact form) is the unspecified IPv6 " "address. This is the IPv6 address that a host can use as source address when " "trying to acquire an official address." #: ../../protocols/ipv6.rst:241 #, read-only msgid "" "The last type of unicast IPv6 addresses are the `Link Local Unicast` " "addresses. These addresses are part of the `fe80::/10` address block and are " "defined in :rfc:`4291`. Each host can compute its own link local address by " "concatenating the `fe80::/64` prefix with the 64 bits identifier of its " "interface. Link local addresses can be used when hosts that are attached to " "the same link (or local area network) need to exchange packets. They are " "used notably for address discovery and auto-configuration purposes. Their " "usage is restricted to each link and a router cannot forward a packet whose " "source or destination address is a link local address. Link local addresses " "have also been defined for IPv4 :rfc:`3927`. However, the IPv4 link local " "addresses are only used when a host cannot obtain a regular IPv4 address, " "e.g. on an isolated LAN." msgstr "" "The last type of unicast IPv6 addresses are the `Link Local Unicast` " "addresses. These addresses are part of the `fe80::/10` address block and are " "defined in :rfc:`4291`. Each host can compute its own link local address by " "concatenating the `fe80::/64` prefix with the 64 bits identifier of its " "interface. Link local addresses can be used when hosts that are attached to " "the same link (or local area network) need to exchange packets. They are " "used notably for address discovery and auto-configuration purposes. Their " "usage is restricted to each link and a router cannot forward a packet whose " "source or destination address is a link local address. Link local addresses " "have also been defined for IPv4 :rfc:`3927`. However, the IPv4 link local " "addresses are only used when a host cannot obtain a regular IPv4 address, " "e.g. on an isolated LAN." #: ../../protocols/ipv6.rst:259 #, read-only msgid "All IPv6 hosts have several addresses" msgstr "All IPv6 hosts have several addresses" #: ../../protocols/ipv6.rst:261 #, read-only msgid "" "An important consequence of the IPv6 unicast addressing architecture and the " "utilization of link-local addresses is that each IPv6 host has several IPv6 " "addresses. This implies that all IPv6 stacks must be able to handle multiple " "IPv6 addresses." msgstr "" "An important consequence of the IPv6 unicast addressing architecture and the " "utilization of link-local addresses is that each IPv6 host has several IPv6 " "addresses. This implies that all IPv6 stacks must be able to handle multiple " "IPv6 addresses." #: ../../protocols/ipv6.rst:265 #, read-only msgid "" "The addresses described above are unicast addresses. These addresses are " "used to identify (interfaces on) hosts and routers. They can appear as " "source and destination addresses in the IPv6 packets. When a host sends a " "packet towards a unicast address, this packet is delivered by the network to " "its final destination. There are situations, such as when delivering video " "or television signal to a large number of receivers, where it is useful to " "have a network that can efficiently deliver the same packet to a large " "number of receivers. This is the `multicast` service. A multicast service " "can be provided in a LAN. In this case, a multicast address identifies a set " "of receivers and each frame sent towards this address is delivered to all " "receivers in the group. Multicast can also be used in a network containing " "routers and hosts. In this case, a multicast address identifies also a group " "of receivers and the network delivers efficiently each multicast packet to " "all members of the group. Consider for example the network below." msgstr "" "The addresses described above are unicast addresses. These addresses are " "used to identify (interfaces on) hosts and routers. They can appear as " "source and destination addresses in the IPv6 packets. When a host sends a " "packet towards a unicast address, this packet is delivered by the network to " "its final destination. There are situations, such as when delivering video " "or television signal to a large number of receivers, where it is useful to " "have a network that can efficiently deliver the same packet to a large " "number of receivers. This is the `multicast` service. A multicast service " "can be provided in a LAN. In this case, a multicast address identifies a set " "of receivers and each frame sent towards this address is delivered to all " "receivers in the group. Multicast can also be used in a network containing " "routers and hosts. In this case, a multicast address identifies also a group " "of receivers and the network delivers efficiently each multicast packet to " "all members of the group. Consider for example the network below." #: ../../protocols/ipv6.rst:289 #, read-only msgid "" "Assume that ``B`` and ``D`` are part of a multicast group. If ``A`` sends a " "multicast packet towards this group, then ``R1`` will replicate the packet " "to forward it to ``R2`` and ``R3``. ``R2`` would forward the packet towards " "``B``. ``R3`` would forward the packet towards ``R4`` that would deliver it " "to ``D``." msgstr "" "Assume that ``B`` and ``D`` are part of a multicast group. If ``A`` sends a " "multicast packet towards this group, then ``R1`` will replicate the packet " "to forward it to ``R2`` and ``R3``. ``R2`` would forward the packet towards " "``B``. ``R3`` would forward the packet towards ``R4`` that would deliver it " "to ``D``." #: ../../protocols/ipv6.rst:291 #, read-only msgid "" "Finally, :rfc:`4291` defines the structure of the IPv6 multicast addresses " "[#fmultiiana]_. This structure is depicted in the figure below." msgstr "" "Finally, :rfc:`4291` defines the structure of the IPv6 multicast addresses " "[#fmultiiana]_. This structure is depicted in the figure below." #: ../../protocols/ipv6.rst:314 #, read-only msgid "" "The low order 112 bits of an IPv6 multicast address are the group's " "identifier. The high order bits are used as a marker to distinguish " "multicast addresses from unicast addresses. Notably, the 4-bit `Flags` field " "indicates whether the address is temporary or permanent. Finally, the `Scope`" " field indicates the boundaries of the forwarding of packets destined to a " "particular address. A link-local scope indicates that a router should not " "forward a packet destined to such a multicast address. An organization local-" "scope indicates that a packet sent to such a multicast destination address " "should not leave the organization. Finally the global scope is intended for " "multicast groups spanning the global Internet." msgstr "" "The low order 112 bits of an IPv6 multicast address are the group's " "identifier. The high order bits are used as a marker to distinguish " "multicast addresses from unicast addresses. Notably, the 4-bit `Flags` field " "indicates whether the address is temporary or permanent. Finally, the `Scope`" " field indicates the boundaries of the forwarding of packets destined to a " "particular address. A link-local scope indicates that a router should not " "forward a packet destined to such a multicast address. An organization local-" "scope indicates that a packet sent to such a multicast destination address " "should not leave the organization. Finally the global scope is intended for " "multicast groups spanning the global Internet." #: ../../protocols/ipv6.rst:316 #, read-only msgid "" "Among these addresses, some are well known. For example, all hosts " "automatically belong to the ``ff02::1`` multicast group while all routers " "automatically belong to the ``ff02::2`` multicast group. A detailed " "discussion of IPv6 multicast is outside the scope of this chapter." msgstr "" "Among these addresses, some are well known. For example, all hosts " "automatically belong to the ``ff02::1`` multicast group while all routers " "automatically belong to the ``ff02::2`` multicast group. A detailed " "discussion of IPv6 multicast is outside the scope of this chapter." #: ../../protocols/ipv6.rst:321 #, read-only msgid "IPv6 packet format" msgstr "IPv6 packet format" #: ../../protocols/ipv6.rst:323 #, read-only msgid "" "The IPv6 packet format was heavily inspired by the packet format proposed " "for the SIPP protocol in :rfc:`1710`. The standard IPv6 header defined in " ":rfc:`2460` occupies 40 bytes and contains 8 different fields, as shown in " "the figure below." msgstr "" "The IPv6 packet format was heavily inspired by the packet format proposed " "for the SIPP protocol in :rfc:`1710`. The standard IPv6 header defined in " ":rfc:`2460` occupies 40 bytes and contains 8 different fields, as shown in " "the figure below." #: ../../protocols/ipv6.rst:329 #, read-only msgid "The IP version 6 header (:rfc:`2460`)" msgstr "The IP version 6 header (:rfc:`2460`)" #: ../../protocols/ipv6.rst:331 #, read-only msgid "" "Apart from the source and destination addresses, the IPv6 header contains " "the following fields :" msgstr "" "Apart from the source and destination addresses, the IPv6 header contains " "the following fields :" #: ../../protocols/ipv6.rst:333 #, read-only msgid "" "`Version` : a 4 bits field set to `6` and intended to allow IP to evolve in " "the future if needed" msgstr "" "`Version` : a 4 bits field set to `6` and intended to allow IP to evolve in " "the future if needed" #: ../../protocols/ipv6.rst:334 #, read-only msgid "" "`Traffic class` : this 8 bits field indicates the type of service expected " "by this packet and contains the ``CE`` and ``ECT`` flags that are used by `" "Explicit Congestion Notification`" msgstr "" "`Traffic class` : this 8 bits field indicates the type of service expected " "by this packet and contains the ``CE`` and ``ECT`` flags that are used by `" "Explicit Congestion Notification`" #: ../../protocols/ipv6.rst:335 #, read-only msgid "" "`Flow Label` : this field was initially intended to be used to tag packets " "belonging to the same `flow`. A recent document, :rfc:`6437` describes some " "possible usages of this field, but it is too early to tell whether it will " "be really used." msgstr "" "`Flow Label` : this field was initially intended to be used to tag packets " "belonging to the same `flow`. A recent document, :rfc:`6437` describes some " "possible usages of this field, but it is too early to tell whether it will " "be really used." #: ../../protocols/ipv6.rst:336 #, read-only msgid "" "`Payload Length` : this is the size of the packet payload in bytes. As the " "length is encoded as a 16 bits field, an IPv6 packet can contain up to 65535 " "bytes of payload." msgstr "" "`Payload Length` : this is the size of the packet payload in bytes. As the " "length is encoded as a 16 bits field, an IPv6 packet can contain up to 65535 " "bytes of payload." #: ../../protocols/ipv6.rst:337 #, read-only msgid "" "`Next Header` : this 8-bit field indicates the type [#fianaprotocol]_ of " "header that follows the IPv6 header. It can be a transport layer header " "(e.g. `6` for TCP or `17` for UDP) or an IPv6 option." msgstr "" "`Next Header` : this 8-bit field indicates the type [#fianaprotocol]_ of " "header that follows the IPv6 header. It can be a transport layer header " "(e.g. `6` for TCP or `17` for UDP) or an IPv6 option." #: ../../protocols/ipv6.rst:338 #, read-only msgid "" "`Hop Limit` : this 8-bit field indicates the number of routers that can " "forward the packet. It is decremented by one by each router and prevents " "packets from looping forever inside the network." msgstr "" "`Hop Limit` : this 8-bit field indicates the number of routers that can " "forward the packet. It is decremented by one by each router and prevents " "packets from looping forever inside the network." #: ../../protocols/ipv6.rst:341 #, read-only msgid "" "It is interesting to note that there is no checksum inside the IPv6 header. " "This is mainly because all datalink layers and transport protocols include a " "checksum or a CRC to protect their frames/segments against transmission " "errors. Adding a checksum in the IPv6 header would have forced each router " "to recompute the checksum of all packets, with limited benefit in detecting " "errors. In practice, an IP checksum allows for catching errors that occur " "inside routers (e.g. due to memory corruption) before the packet reaches its " "destination. However, this benefit was found to be too small given the " "reliability of current memories and the cost of computing the checksum on " "each router [#fipv4checksum]_." msgstr "" "It is interesting to note that there is no checksum inside the IPv6 header. " "This is mainly because all datalink layers and transport protocols include a " "checksum or a CRC to protect their frames/segments against transmission " "errors. Adding a checksum in the IPv6 header would have forced each router " "to recompute the checksum of all packets, with limited benefit in detecting " "errors. In practice, an IP checksum allows for catching errors that occur " "inside routers (e.g. due to memory corruption) before the packet reaches its " "destination. However, this benefit was found to be too small given the " "reliability of current memories and the cost of computing the checksum on " "each router [#fipv4checksum]_." #: ../../protocols/ipv6.rst:343 #, read-only msgid "" "When a host receives an IPv6 packet, it needs to determine which transport " "protocol (UDP, TCP, SCTP, ...) needs to handle the payload of the packet. " "This is the first role of the `Next header` field. The IANA_ which manages " "the allocation of Internet resources and protocol parameters, maintains an " "official list of transport protocols [#fianaprotocol]_. The following " "protocol numbers are reserved :" msgstr "" "When a host receives an IPv6 packet, it needs to determine which transport " "protocol (UDP, TCP, SCTP, ...) needs to handle the payload of the packet. " "This is the first role of the `Next header` field. The IANA_ which manages " "the allocation of Internet resources and protocol parameters, maintains an " "official list of transport protocols [#fianaprotocol]_. The following " "protocol numbers are reserved :" #: ../../protocols/ipv6.rst:345 #, read-only msgid "``TCP`` uses `Next Header` number ``6``" msgstr "``TCP`` uses `Next Header` number ``6``" #: ../../protocols/ipv6.rst:346 #, read-only msgid "``UDP`` uses `Next Header` number ``17``" msgstr "``UDP`` uses `Next Header` number ``17``" #: ../../protocols/ipv6.rst:347 #, read-only msgid "``SCTP`` uses `Next Header` number ``132``" msgstr "``SCTP`` uses `Next Header` number ``132``" #: ../../protocols/ipv6.rst:349 #, read-only msgid "" "For example, an IPv6 packet that contains an TCP segment would appear as " "shown in the figure below." msgstr "" "For example, an IPv6 packet that contains an TCP segment would appear as " "shown in the figure below." #: ../../protocols/ipv6.rst:354 #, read-only msgid "An IPv6 packet containing an TCP segment" msgstr "An IPv6 packet containing an TCP segment" #: ../../protocols/ipv6.rst:358 #, read-only msgid "" "However, the `Next header` has broader usages than simply indicating the " "transport protocol which is responsible for the packet payload. An IPv6 " "packet can contain a chain of headers and the last one indicates the " "transport protocol that is responsible for the packet payload. Supporting a " "chain of headers is a clever design from an extensibility viewpoint. As we " "will see, this chain of headers has several usages." msgstr "" "However, the `Next header` has broader usages than simply indicating the " "transport protocol which is responsible for the packet payload. An IPv6 " "packet can contain a chain of headers and the last one indicates the " "transport protocol that is responsible for the packet payload. Supporting a " "chain of headers is a clever design from an extensibility viewpoint. As we " "will see, this chain of headers has several usages." #: ../../protocols/ipv6.rst:360 #, read-only msgid "" ":rfc:`2460` defines several types of IPv6 extension headers that could be " "added to an IPv6 packet :" msgstr "" ":rfc:`2460` defines several types of IPv6 extension headers that could be " "added to an IPv6 packet :" #: ../../protocols/ipv6.rst:362 #, read-only msgid "" "`Hop-by-Hop Options` header. This option is processed by routers and hosts." msgstr "" "`Hop-by-Hop Options` header. This option is processed by routers and hosts." #: ../../protocols/ipv6.rst:363 #, read-only msgid "`Destination Options` header. This option is processed only by hosts." msgstr "`Destination Options` header. This option is processed only by hosts." #: ../../protocols/ipv6.rst:364 #, read-only msgid "`Routing` header. This option is processed by some nodes." msgstr "`Routing` header. This option is processed by some nodes." #: ../../protocols/ipv6.rst:365 #, read-only msgid "`Fragment` header. This option is processed only by hosts." msgstr "`Fragment` header. This option is processed only by hosts." #: ../../protocols/ipv6.rst:366 #, read-only msgid "`Authentication` header. This option is processed only by hosts." msgstr "`Authentication` header. This option is processed only by hosts." #: ../../protocols/ipv6.rst:367 #, read-only msgid "" "`Encapsulating Security Payload`. This option is processed only by hosts." msgstr "" "`Encapsulating Security Payload`. This option is processed only by hosts." #: ../../protocols/ipv6.rst:369 #, read-only msgid "" "The last two headers are used to add security above IPv6 and implement " "IPSec. They are described in :rfc:`2402` and :rfc:`2406` and are outside the " "scope of this document." msgstr "" "The last two headers are used to add security above IPv6 and implement " "IPSec. They are described in :rfc:`2402` and :rfc:`2406` and are outside the " "scope of this document." #: ../../protocols/ipv6.rst:371 #, read-only msgid "" "The `Hop-by-Hop Options` header was designed to make IPv6 easily extensible. " "In theory, this option could be used to define new fields that were not " "foreseen when IPv6 was designed. It is intended to be processed by both " "routers and hosts. Deploying an extension to a network protocol can be " "difficult in practice since some nodes already support the extensions while " "others still use the old version and do not understand the extension. To " "deal with this issue, the IPv6 designers opted for a Type-Length-Value " "encoding of these IPv6 options. The `Hop-by-Hop Options` header is encoded " "as shown below." msgstr "" "The `Hop-by-Hop Options` header was designed to make IPv6 easily extensible. " "In theory, this option could be used to define new fields that were not " "foreseen when IPv6 was designed. It is intended to be processed by both " "routers and hosts. Deploying an extension to a network protocol can be " "difficult in practice since some nodes already support the extensions while " "others still use the old version and do not understand the extension. To " "deal with this issue, the IPv6 designers opted for a Type-Length-Value " "encoding of these IPv6 options. The `Hop-by-Hop Options` header is encoded " "as shown below." #: ../../protocols/ipv6.rst:376 #, read-only msgid "The IPv6 `Hop-by-Hop Options` header" msgstr "The IPv6 `Hop-by-Hop Options` header" #: ../../protocols/ipv6.rst:378 #, read-only msgid "" "In this optional header, the `Next Header` field is used to support the " "chain of headers. It indicates the type of the next header in the chain. " "IPv6 headers have different lengths. The `Hdr Ext Len` field indicates the " "total length of the option header in bytes. The `Opt. Type` field indicates " "the type of option. These types are encoded such that their high order bits " "specify how the header needs to be handled by nodes that do not recognize " "it. The following values are defined for the two high order bits :" msgstr "" "In this optional header, the `Next Header` field is used to support the " "chain of headers. It indicates the type of the next header in the chain. " "IPv6 headers have different lengths. The `Hdr Ext Len` field indicates the " "total length of the option header in bytes. The `Opt. Type` field indicates " "the type of option. These types are encoded such that their high order bits " "specify how the header needs to be handled by nodes that do not recognize " "it. The following values are defined for the two high order bits :" #: ../../protocols/ipv6.rst:380 #, read-only msgid "" "``00`` : if a node does not recognize this header, it can be safely skipped " "and the processing continues with the subsequent header" msgstr "" "``00`` : if a node does not recognize this header, it can be safely skipped " "and the processing continues with the subsequent header" #: ../../protocols/ipv6.rst:381 #, read-only msgid "" "``01`` : if a node does not recognize this header, the packet must be " "discarded" msgstr "" "``01`` : if a node does not recognize this header, the packet must be " "discarded" #: ../../protocols/ipv6.rst:382 #, read-only msgid "" "``10`` (resp. ``11``) : if a node does not recognize this header, it must " "return a control packet (ICMP, see later) back to the source " "(resp. except if the destination was a multicast address)" msgstr "" "``10`` (resp. ``11``) : if a node does not recognize this header, it must " "return a control packet (ICMP, see later) back to the source " "(resp. except if the destination was a multicast address)" #: ../../protocols/ipv6.rst:384 #, read-only msgid "" "This encoding allows the designers of protocol extensions to specify whether " "the option must be supported by all nodes on a path or not. Still, deploying " "such an extension can be difficult in practice." msgstr "" "This encoding allows the designers of protocol extensions to specify whether " "the option must be supported by all nodes on a path or not. Still, deploying " "such an extension can be difficult in practice." #: ../../protocols/ipv6.rst:388 #, read-only msgid "" "Two `hop-by-hop` options have been defined. :rfc:`2675` specifies the " "jumbogram that enables IPv6 to support packets containing a payload larger " "than 65535 bytes. These jumbo packets have their `payload length` set to `0` " "and the jumbogram option contains the packet length as a 32 bits field. Such " "packets can only be sent from a source to a destination if all the routers " "on the path support this option. However, as of this writing it does not " "seem that the jumbogram option has been implemented. The router alert option " "defined in :rfc:`2711` is the second example of a `hop-by-hop` option. The " "packets that contain this option should be processed in a special way by " "intermediate routers. This option is used for IP packets that carry Resource " "Reservation Protocol (RSVP) messages, but this is outside the scope of this " "book." msgstr "" "Two `hop-by-hop` options have been defined. :rfc:`2675` specifies the " "jumbogram that enables IPv6 to support packets containing a payload larger " "than 65535 bytes. These jumbo packets have their `payload length` set to `0` " "and the jumbogram option contains the packet length as a 32 bits field. Such " "packets can only be sent from a source to a destination if all the routers " "on the path support this option. However, as of this writing it does not " "seem that the jumbogram option has been implemented. The router alert option " "defined in :rfc:`2711` is the second example of a `hop-by-hop` option. The " "packets that contain this option should be processed in a special way by " "intermediate routers. This option is used for IP packets that carry Resource " "Reservation Protocol (RSVP) messages, but this is outside the scope of this " "book." #: ../../protocols/ipv6.rst:391 #, read-only msgid "" "The `Destinations Option` header uses the same format as the `Hop-by-Hop " "Options` header. It has some usages, e.g. to support mobile nodes :rfc:`6275`" ", but these are outside the scope of this document." msgstr "" "The `Destinations Option` header uses the same format as the `Hop-by-Hop " "Options` header. It has some usages, e.g. to support mobile nodes :rfc:`6275`" ", but these are outside the scope of this document." #: ../../protocols/ipv6.rst:395 #, read-only msgid "" "The `Fragment Options` header is more important. An important problem in the " "network layer is the ability to handle heterogeneous datalink layers. Most " "datalink layer technologies can only transmit and receive frames that are " "shorter than a given maximum frame size. Unfortunately, all datalink layer " "technologies use different maximum frames sizes." msgstr "" "The `Fragment Options` header is more important. An important problem in the " "network layer is the ability to handle heterogeneous datalink layers. Most " "datalink layer technologies can only transmit and receive frames that are " "shorter than a given maximum frame size. Unfortunately, all datalink layer " "technologies use different maximum frames sizes." #: ../../protocols/ipv6.rst:399 #, read-only msgid "" "Each datalink layer has its own characteristics and as indicated earlier, " "each datalink layer is characterized by a maximum frame size. From IP's " "point of view, a datalink layer interface is characterized by its `Maximum " "Transmission Unit (MTU)`. The MTU of an interface is the largest packet " "(including header) that it can send. The table below provides some common " "MTU sizes." msgstr "" "Each datalink layer has its own characteristics and as indicated earlier, " "each datalink layer is characterized by a maximum frame size. From IP's " "point of view, a datalink layer interface is characterized by its `Maximum " "Transmission Unit (MTU)`. The MTU of an interface is the largest packet " "(including header) that it can send. The table below provides some common " "MTU sizes." #: ../../protocols/ipv6.rst:402 #, read-only msgid "Datalink layer" msgstr "Datalink layer" #: ../../protocols/ipv6.rst:402 #, read-only msgid "MTU" msgstr "MTU" #: ../../protocols/ipv6.rst:404 #, read-only msgid "Ethernet" msgstr "Ethernet" #: ../../protocols/ipv6.rst:404 #, read-only msgid "1500 bytes" msgstr "1500 bytes" #: ../../protocols/ipv6.rst:405 #, read-only msgid "WiFi" msgstr "WiFi" #: ../../protocols/ipv6.rst:405 #, read-only msgid "2272 bytes" msgstr "2272 bytes" #: ../../protocols/ipv6.rst:406 #, read-only msgid "ATM (AAL5)" msgstr "ATM (AAL5)" #: ../../protocols/ipv6.rst:406 #, read-only msgid "9180 bytes" msgstr "9180 bytes" #: ../../protocols/ipv6.rst:407 #, read-only msgid "802.15.4" msgstr "802.15.4" #: ../../protocols/ipv6.rst:407 #, read-only msgid "102 or 81 bytes" msgstr "102 or 81 bytes" #: ../../protocols/ipv6.rst:408 #, read-only msgid "Token Ring" msgstr "Token Ring" #: ../../protocols/ipv6.rst:408 #, read-only msgid "4464 bytes" msgstr "4464 bytes" #: ../../protocols/ipv6.rst:409 #, read-only msgid "FDDI" msgstr "FDDI" #: ../../protocols/ipv6.rst:409 #, read-only msgid "4352 bytes" msgstr "4352 bytes" #: ../../protocols/ipv6.rst:412 #, read-only msgid "" "Although IPv6 can send 64 KBytes long packets, few datalink layer " "technologies that are used today are able to send a 64 KBytes packet inside " "a frame. Furthermore, as illustrated in the figure below, another problem is " "that a host may send a packet that would be too large for one of the " "datalink layers used by the intermediate routers." msgstr "" "Although IPv6 can send 64 KBytes long packets, few datalink layer " "technologies that are used today are able to send a 64 KBytes packet inside " "a frame. Furthermore, as illustrated in the figure below, another problem is " "that a host may send a packet that would be too large for one of the " "datalink layers used by the intermediate routers." #: ../../protocols/ipv6.rst:418 #, read-only msgid "The need for fragmentation and reassembly" msgstr "The need for fragmentation and reassembly" #: ../../protocols/ipv6.rst:422 #, read-only msgid "" "To solve these problems, IPv6 includes a packet fragmentation and reassembly " "mechanism. In IPv4, fragmentation was performed by both the hosts and the " "intermediate routers. However, experience with IPv4 has shown that " "fragmenting packets in routers was costly [KM1995]_. For this reason, the " "developers of IPv6 have decided that routers would not fragment packets " "anymore. In IPv6, fragmentation is only performed by the source host. If a " "source has to send a packet which is larger than the MTU of the outgoing " "interface, the packet needs to be fragmented before being transmitted. In " "IPv6, each packet fragment is an IPv6 packet that includes the " "`Fragmentation` header. This header is included by the source in each packet " "fragment. The receiver uses them to reassemble the received fragments." msgstr "" "To solve these problems, IPv6 includes a packet fragmentation and reassembly " "mechanism. In IPv4, fragmentation was performed by both the hosts and the " "intermediate routers. However, experience with IPv4 has shown that " "fragmenting packets in routers was costly [KM1995]_. For this reason, the " "developers of IPv6 have decided that routers would not fragment packets " "anymore. In IPv6, fragmentation is only performed by the source host. If a " "source has to send a packet which is larger than the MTU of the outgoing " "interface, the packet needs to be fragmented before being transmitted. In " "IPv6, each packet fragment is an IPv6 packet that includes the " "`Fragmentation` header. This header is included by the source in each packet " "fragment. The receiver uses them to reassemble the received fragments." #: ../../protocols/ipv6.rst:427 #, read-only msgid "IPv6 fragmentation header" msgstr "IPv6 fragmentation header" #: ../../protocols/ipv6.rst:429 #, read-only msgid "" "If a router receives a packet that is too long to be forwarded, the packet " "is dropped and the router returns an ICMPv6 message to inform the sender of " "the problem. The sender can then either fragment the packet or perform Path " "MTU discovery. In IPv6, packet fragmentation is performed only by the source " "by using IPv6 options." msgstr "" "If a router receives a packet that is too long to be forwarded, the packet " "is dropped and the router returns an ICMPv6 message to inform the sender of " "the problem. The sender can then either fragment the packet or perform Path " "MTU discovery. In IPv6, packet fragmentation is performed only by the source " "by using IPv6 options." #: ../../protocols/ipv6.rst:433 #, read-only msgid "" "In IPv6, fragmentation is performed exclusively by the source host and " "relies on the fragmentation header. This 64 bits header is composed of six " "fields :" msgstr "" "In IPv6, fragmentation is performed exclusively by the source host and " "relies on the fragmentation header. This 64 bits header is composed of six " "fields :" #: ../../protocols/ipv6.rst:435 #, read-only msgid "" "a `Next Header` field that indicates the type of the header that follows the " "fragmentation header" msgstr "" "a `Next Header` field that indicates the type of the header that follows the " "fragmentation header" #: ../../protocols/ipv6.rst:436 #, read-only msgid "two `Reserved` fields set to `0`." msgstr "two `Reserved` fields set to `0`." #: ../../protocols/ipv6.rst:437 #, read-only msgid "" "the `Fragment Offset` is a 13-bit unsigned integer that contains the offset, " "in 8 bytes units, of the data following this header, relative to the start " "of the original packet." msgstr "" "the `Fragment Offset` is a 13-bit unsigned integer that contains the offset, " "in 8 bytes units, of the data following this header, relative to the start " "of the original packet." #: ../../protocols/ipv6.rst:438 #, read-only msgid "" "the `More` flag, which is set to `0` in the last fragment of a packet and to " "`1` in all other fragments." msgstr "" "the `More` flag, which is set to `0` in the last fragment of a packet and to " "`1` in all other fragments." #: ../../protocols/ipv6.rst:439 #, read-only msgid "" "the 32-bit `Identification` field indicates to which original packet a " "fragment belongs. When a host sends fragmented packets, it should ensure " "that it does not reuse the same `identification` field for packets sent to " "the same destination during a period of `MSL` seconds. This is easier with " "the 32 bits `identification` used in the IPv6 fragmentation header, than " "with the 16 bits `identification` field of the IPv4 header." msgstr "" "the 32-bit `Identification` field indicates to which original packet a " "fragment belongs. When a host sends fragmented packets, it should ensure " "that it does not reuse the same `identification` field for packets sent to " "the same destination during a period of `MSL` seconds. This is easier with " "the 32 bits `identification` used in the IPv6 fragmentation header, than " "with the 16 bits `identification` field of the IPv4 header." #: ../../protocols/ipv6.rst:445 #, read-only msgid "" "Some IPv6 implementations send the fragments of a packet in increasing " "fragment offset order, starting from the first fragment. Others send the " "fragments in reverse order, starting from the last fragment. The latter " "solution can be advantageous for the host that needs to reassemble the " "fragments, as it can easily allocate the buffer required to reassemble all " "fragments of the packet upon reception of the last fragment. When a host " "receives the first fragment of an IPv6 packet, it cannot know a priori the " "length of the entire IPv6 packet." msgstr "" "Some IPv6 implementations send the fragments of a packet in increasing " "fragment offset order, starting from the first fragment. Others send the " "fragments in reverse order, starting from the last fragment. The latter " "solution can be advantageous for the host that needs to reassemble the " "fragments, as it can easily allocate the buffer required to reassemble all " "fragments of the packet upon reception of the last fragment. When a host " "receives the first fragment of an IPv6 packet, it cannot know a priori the " "length of the entire IPv6 packet." #: ../../protocols/ipv6.rst:447 #, read-only msgid "" "The figure below provides an example of a fragmented IPv6 packet containing " "a UDP segment. The `Next Header` type reserved for the IPv6 fragmentation " "option is 44." msgstr "" "The figure below provides an example of a fragmented IPv6 packet containing " "a UDP segment. The `Next Header` type reserved for the IPv6 fragmentation " "option is 44." #: ../../protocols/ipv6.rst:453 #, read-only msgid "IPv6 fragmentation example" msgstr "IPv6 fragmentation example" #: ../../protocols/ipv6.rst:455 #, read-only msgid "" "The following pseudo-code details the IPv6 fragmentation, assuming that the " "packet does not contain options." msgstr "" "The following pseudo-code details the IPv6 fragmentation, assuming that the " "packet does not contain options." #: ../../protocols/ipv6.rst:490 #, read-only msgid "" "In the above pseudocode, we maintain a single 32 bits counter that is " "incremented for each packet that needs to be fragmented. Other " "implementations to compute the packet identification are possible. " ":rfc:`2460` only requires that two fragmented packets that are sent within " "the MSL between the same pair of hosts have different identifications." msgstr "" "In the above pseudocode, we maintain a single 32 bits counter that is " "incremented for each packet that needs to be fragmented. Other " "implementations to compute the packet identification are possible. " ":rfc:`2460` only requires that two fragmented packets that are sent within " "the MSL between the same pair of hosts have different identifications." #: ../../protocols/ipv6.rst:492 #, read-only msgid "" "The fragments of an IPv6 packet may arrive at the destination in any order, " "as each fragment is forwarded independently in the network and may follow " "different paths. Furthermore, some fragments may be lost and never reach the " "destination." msgstr "" "The fragments of an IPv6 packet may arrive at the destination in any order, " "as each fragment is forwarded independently in the network and may follow " "different paths. Furthermore, some fragments may be lost and never reach the " "destination." #: ../../protocols/ipv6.rst:494 #, read-only msgid "" "The reassembly algorithm used by the destination host is roughly as follows. " "First, the destination can verify whether a received IPv6 packet is a " "fragment or not by checking whether it contains a fragment header. If so, " "all fragments with the some identification must be reassembled together. The " "reassembly algorithm relies on the `Identification` field of the received " "fragments to associate a fragment with the corresponding packet being " "reassembled. Furthermore, the `Fragment Offset` field indicates the position " "of the fragment payload in the original non-fragmented packet. Finally, the " "packet with the `M` flag reset allows the destination to determine the total " "length of the original non-fragmented packet." msgstr "" "The reassembly algorithm used by the destination host is roughly as follows. " "First, the destination can verify whether a received IPv6 packet is a " "fragment or not by checking whether it contains a fragment header. If so, " "all fragments with the some identification must be reassembled together. The " "reassembly algorithm relies on the `Identification` field of the received " "fragments to associate a fragment with the corresponding packet being " "reassembled. Furthermore, the `Fragment Offset` field indicates the position " "of the fragment payload in the original non-fragmented packet. Finally, the " "packet with the `M` flag reset allows the destination to determine the total " "length of the original non-fragmented packet." #: ../../protocols/ipv6.rst:496 #, read-only msgid "" "Note that the reassembly algorithm must deal with the unreliability of the " "IP network. This implies that a fragment may be duplicated or a fragment may " "never reach the destination. The destination can easily detect fragment " "duplication thanks to the `Fragment Offset`. To deal with fragment losses, " "the reassembly algorithm must bind the time during which the fragments of a " "packet are stored in its buffer while the packet is being reassembled. This " "can be implemented by starting a timer when the first fragment of a packet " "is received. If the packet has not been reassembled upon expiration of the " "timer, all fragments are discarded and the packet is considered to be lost." msgstr "" "Note that the reassembly algorithm must deal with the unreliability of the " "IP network. This implies that a fragment may be duplicated or a fragment may " "never reach the destination. The destination can easily detect fragment " "duplication thanks to the `Fragment Offset`. To deal with fragment losses, " "the reassembly algorithm must bind the time during which the fragments of a " "packet are stored in its buffer while the packet is being reassembled. This " "can be implemented by starting a timer when the first fragment of a packet " "is received. If the packet has not been reassembled upon expiration of the " "timer, all fragments are discarded and the packet is considered to be lost." #: ../../protocols/ipv6.rst:499 #, read-only msgid "Header compression on low bandwidth links" msgstr "Header compression on low bandwidth links" #: ../../protocols/ipv6.rst:501 #, read-only msgid "" "Given the size of the IPv6 header, it can cause huge overhead on low " "bandwidth links, especially when small packets are exchanged such as for " "Voice over IP applications. In such environments, several techniques can be " "used to reduce the overhead. A first solution is to use data compression in " "the datalink layer to compress all the information exchanged [Thomborson1992]" "_. These techniques are similar to the data compression algorithms used in " "tools such as :manpage:`compress(1)` or :manpage:`gzip(1)` :rfc:`1951`. They " "compress streams of bits without taking advantage of the fact that these " "streams contain IP packets with a known structure. A second solution is to " "compress the IP and TCP header. These header compression techniques, such as " "the one defined in :rfc:`5795` take advantage of the redundancy found in " "successive packets from the same flow to significantly reduce the size of " "the protocol headers. Another solution is to define a compressed encoding of " "the IPv6 header that matches the capabilities of the underlying datalink " "layer :rfc:`4944`." msgstr "" "Given the size of the IPv6 header, it can cause huge overhead on low " "bandwidth links, especially when small packets are exchanged such as for " "Voice over IP applications. In such environments, several techniques can be " "used to reduce the overhead. A first solution is to use data compression in " "the datalink layer to compress all the information exchanged [Thomborson1992]" "_. These techniques are similar to the data compression algorithms used in " "tools such as :manpage:`compress(1)` or :manpage:`gzip(1)` :rfc:`1951`. They " "compress streams of bits without taking advantage of the fact that these " "streams contain IP packets with a known structure. A second solution is to " "compress the IP and TCP header. These header compression techniques, such as " "the one defined in :rfc:`5795` take advantage of the redundancy found in " "successive packets from the same flow to significantly reduce the size of " "the protocol headers. Another solution is to define a compressed encoding of " "the IPv6 header that matches the capabilities of the underlying datalink " "layer :rfc:`4944`." #: ../../protocols/ipv6.rst:503 #, read-only msgid "" "The last type of `IPv6 header extension` is the `Routing` header. The ``type " "0`` routing header defined in :rfc:`2460` is an example of an IPv6 option " "that must be processed by some routers. This option is encoded as shown " "below." msgstr "" "The last type of `IPv6 header extension` is the `Routing` header. The ``type " "0`` routing header defined in :rfc:`2460` is an example of an IPv6 option " "that must be processed by some routers. This option is encoded as shown " "below." #: ../../protocols/ipv6.rst:509 #, read-only msgid "The Type 0 routing header (:rfc:`2460`)" msgstr "The Type 0 routing header (:rfc:`2460`)" #: ../../protocols/ipv6.rst:512 #, read-only msgid "" "The type 0 routing option was intended to allow a host to indicate a loose " "source route that should be followed by a packet by specifying the addresses " "of some of the routers that must forward this packet. Unfortunately, further " "work with this routing header, including an entertaining demonstration with " "scapy_ [BE2007]_ , revealed severe security problems with this routing " "header. For this reason, loose source routing with the type 0 routing header " "has been removed from the IPv6 specification :rfc:`5095`." msgstr "" "The type 0 routing option was intended to allow a host to indicate a loose " "source route that should be followed by a packet by specifying the addresses " "of some of the routers that must forward this packet. Unfortunately, further " "work with this routing header, including an entertaining demonstration with " "scapy_ [BE2007]_ , revealed severe security problems with this routing " "header. For this reason, loose source routing with the type 0 routing header " "has been removed from the IPv6 specification :rfc:`5095`." #: ../../protocols/ipv6.rst:520 #, read-only msgid "ICMP version 6" msgstr "ICMP version 6" #: ../../protocols/ipv6.rst:522 #, read-only msgid "" "It is sometimes necessary for intermediate routers or the destination host " "to inform the sender of the packet of a problem that occurred while " "processing a packet. In the TCP/IP protocol suite, this reporting is done by " "the Internet Control Message Protocol (ICMP). ICMPv6 is defined in " ":rfc:`4443`. It is used both to report problems that occurred while " "processing an IPv6 packet, but also to distribute addresses." msgstr "" "It is sometimes necessary for intermediate routers or the destination host " "to inform the sender of the packet of a problem that occurred while " "processing a packet. In the TCP/IP protocol suite, this reporting is done by " "the Internet Control Message Protocol (ICMP). ICMPv6 is defined in " ":rfc:`4443`. It is used both to report problems that occurred while " "processing an IPv6 packet, but also to distribute addresses." #: ../../protocols/ipv6.rst:524 #, read-only msgid "" "ICMPv6 messages are carried inside IPv6 packets " "(the `Next Header` field for ICMPv6 is ``58``). Each ICMP message contains a " "32 bits header with an 8 bits `type` field, a `code` field and a 16 bits " "checksum computed over the entire ICMPv6 message. The message body contains " "a copy of the IPv6 packet in error." msgstr "" "ICMPv6 messages are carried inside IPv6 packets " "(the `Next Header` field for ICMPv6 is ``58``). Each ICMP message contains a " "32 bits header with an 8 bits `type` field, a `code` field and a 16 bits " "checksum computed over the entire ICMPv6 message. The message body contains " "a copy of the IPv6 packet in error." #: ../../protocols/ipv6.rst:530 #, read-only msgid "ICMP version 6 packet format" msgstr "ICMP version 6 packet format" #: ../../protocols/ipv6.rst:533 #, read-only msgid "" "ICMPv6 specifies two classes of messages : error messages that indicate a " "problem in handling a packet and informational messages. Four types of error " "messages are defined in :rfc:`4443` :" msgstr "" "ICMPv6 specifies two classes of messages : error messages that indicate a " "problem in handling a packet and informational messages. Four types of error " "messages are defined in :rfc:`4443` :" #: ../../protocols/ipv6.rst:539 #, read-only msgid "" "``1`` : `Destination Unreachable`. Such an ICMPv6 message is sent when the " "destination address of a packet is unreachable. The `code` field of the ICMP " "header contains additional information about the type of unreachability. The " "following codes are specified in :rfc:`4443`" msgstr "" "``1`` : `Destination Unreachable`. Such an ICMPv6 message is sent when the " "destination address of a packet is unreachable. The `code` field of the ICMP " "header contains additional information about the type of unreachability. The " "following codes are specified in :rfc:`4443`" #: ../../protocols/ipv6.rst:538 #, read-only msgid "" "Destination Unreachable. Such an ICMPv6 message is sent when the destination " "address of a packet is unreachable. The code field of the ICMP header " "contains additional information about the type of unreachability. The " "following codes are specified in RFC 4443" msgstr "" "Destination Unreachable. Such an ICMPv6 message is sent when the destination " "address of a packet is unreachable. The code field of the ICMP header " "contains additional information about the type of unreachability. The " "following codes are specified in RFC 4443" #: ../../protocols/ipv6.rst:536 #, read-only msgid "" "``0`` : No route to destination. This indicates that the router that sent " "the ICMPv6 message did not have a route towards the packet's destination" msgstr "" "``0`` : No route to destination. This indicates that the router that sent " "the ICMPv6 message did not have a route towards the packet's destination" #: ../../protocols/ipv6.rst:537 #, read-only msgid "" "``1`` : Communication with destination administratively prohibited. This " "indicates that a firewall has refused to forward the packet towards its " "final destination." msgstr "" "``1`` : Communication with destination administratively prohibited. This " "indicates that a firewall has refused to forward the packet towards its " "final destination." #: ../../protocols/ipv6.rst:538 #, read-only msgid "" "``2`` : Beyond scope of source address. This message can be sent if the " "source is using link-local addresses to reach a global unicast address " "outside its subnet." msgstr "" "``2`` : Beyond scope of source address. This message can be sent if the " "source is using link-local addresses to reach a global unicast address " "outside its subnet." #: ../../protocols/ipv6.rst:539 #, read-only msgid "" "``3`` : Address unreachable. This message indicates that the packet reached " "the subnet of the destination, but the host that owns this destination " "address cannot be reached." msgstr "" "``3`` : Address unreachable. This message indicates that the packet reached " "the subnet of the destination, but the host that owns this destination " "address cannot be reached." #: ../../protocols/ipv6.rst:540 #, read-only msgid "" "``4`` : Port unreachable. This message indicates that the IPv6 packet was " "received by the destination, but there was no application listening to the " "specified port." msgstr "" "``4`` : Port unreachable. This message indicates that the IPv6 packet was " "received by the destination, but there was no application listening to the " "specified port." #: ../../protocols/ipv6.rst:541 #, read-only msgid "" "``2`` : Packet Too Big. The router that was to send the ICMPv6 message " "received an IPv6 packet that is larger than the MTU of the outgoing link. " "The ICMPv6 message contains the MTU of this link in bytes. This allows the " "sending host to implement Path MTU discovery :rfc:`1981`" msgstr "" "``2`` : Packet Too Big. The router that was to send the ICMPv6 message " "received an IPv6 packet that is larger than the MTU of the outgoing link. " "The ICMPv6 message contains the MTU of this link in bytes. This allows the " "sending host to implement Path MTU discovery :rfc:`1981`" #: ../../protocols/ipv6.rst:542 #, read-only msgid "" "``3`` : Time Exceeded. This error message can be sent either by a router or " "by a host. A router would set `code` to `0` to report the reception of a " "packet whose `Hop Limit` reached `0`. A host would set `code` to `1` to " "report that it was unable to reassemble received IPv6 fragments." msgstr "" "``3`` : Time Exceeded. This error message can be sent either by a router or " "by a host. A router would set `code` to `0` to report the reception of a " "packet whose `Hop Limit` reached `0`. A host would set `code` to `1` to " "report that it was unable to reassemble received IPv6 fragments." #: ../../protocols/ipv6.rst:543 #, read-only msgid "" "``4`` : Parameter Problem. This ICMPv6 message is used to report either the " "reception of an IPv6 packet with an erroneous header field (code `0`) or an " "unknown `Next Header` or IP option (codes `1` and `2`). In this case, the " "message body contains the erroneous IPv6 packet and the first 32 bits of the " "message body contain a pointer to the error." msgstr "" "``4`` : Parameter Problem. This ICMPv6 message is used to report either the " "reception of an IPv6 packet with an erroneous header field (code `0`) or an " "unknown `Next Header` or IP option (codes `1` and `2`). In this case, the " "message body contains the erroneous IPv6 packet and the first 32 bits of the " "message body contain a pointer to the error." #: ../../protocols/ipv6.rst:546 #, read-only msgid "" "The `Destination Unreachable` ICMP error message is returned when a packet " "cannot be forwarded to its final destination. The first four ICMPv6 error " "messages (type ``1``, codes ``0-3``) are generated by routers while hosts " "may return code ``4`` when there is no application bound to the " "corresponding port number." msgstr "" "The `Destination Unreachable` ICMP error message is returned when a packet " "cannot be forwarded to its final destination. The first four ICMPv6 error " "messages (type ``1``, codes ``0-3``) are generated by routers while hosts " "may return code ``4`` when there is no application bound to the " "corresponding port number." #: ../../protocols/ipv6.rst:548 #, read-only msgid "" "The `Packet Too Big` ICMP messages enable the source host to discover the " "MTU size that it can safely use to reach a given destination. To understand " "its operation, consider the (academic) scenario shown in the figure below. " "In this figure, the labels on each link represent the maximum packet size " "supported by this link." msgstr "" "The `Packet Too Big` ICMP messages enable the source host to discover the " "MTU size that it can safely use to reach a given destination. To understand " "its operation, consider the (academic) scenario shown in the figure below. " "In this figure, the labels on each link represent the maximum packet size " "supported by this link." #: ../../protocols/ipv6.rst:570 #, read-only msgid "" "If ``A`` sends a 1500 bytes packet, ``R1`` will return an ICMPv6 error " "message indicating a maximum packet length of 1400 bytes. ``A`` would then " "fragment the packet before retransmitting it. The small fragment would go " "through, but the large fragment will be refused by ``R2`` that would return " "an ICMPv6 error message. ``A`` can fragment again the packet and send it to " "the final destination as two fragments." msgstr "" "If ``A`` sends a 1500 bytes packet, ``R1`` will return an ICMPv6 error " "message indicating a maximum packet length of 1400 bytes. ``A`` would then " "fragment the packet before retransmitting it. The small fragment would go " "through, but the large fragment will be refused by ``R2`` that would return " "an ICMPv6 error message. ``A`` can fragment again the packet and send it to " "the final destination as two fragments." #: ../../protocols/ipv6.rst:572 #, read-only msgid "" "In practice, an IPv6 implementation does not store the transmitted packets " "to be able to retransmit them if needed. However, since TCP (and SCTP) " "buffer the segments that they transmit, a similar approach can be used in " "transport protocols to detect the largest MTU on a path towards a given " "destination. This technique is called PathMTU Discovery :rfc:`1981`." msgstr "" "In practice, an IPv6 implementation does not store the transmitted packets " "to be able to retransmit them if needed. However, since TCP (and SCTP) " "buffer the segments that they transmit, a similar approach can be used in " "transport protocols to detect the largest MTU on a path towards a given " "destination. This technique is called PathMTU Discovery :rfc:`1981`." #: ../../protocols/ipv6.rst:576 #, read-only msgid "" "When a TCP segment is transported in an IP packet that is fragmented in the " "network, the loss of a single fragment forces TCP to retransmit the entire " "segment (and thus all the fragments). If TCP was able to send only packets " "that do not require fragmentation in the network, it could retransmit only " "the information that was lost in the network. In addition, IP reassembly " "causes several challenges at high speed as discussed in :rfc:`4963`. Using " "IP fragmentation to allow UDP applications to exchange large messages raises " "several security issues [KPS2003]_." msgstr "" "When a TCP segment is transported in an IP packet that is fragmented in the " "network, the loss of a single fragment forces TCP to retransmit the entire " "segment (and thus all the fragments). If TCP was able to send only packets " "that do not require fragmentation in the network, it could retransmit only " "the information that was lost in the network. In addition, IP reassembly " "causes several challenges at high speed as discussed in :rfc:`4963`. Using " "IP fragmentation to allow UDP applications to exchange large messages raises " "several security issues [KPS2003]_." #: ../../protocols/ipv6.rst:578 #, read-only msgid "" "ICMPv6 is used by TCP implementations to discover the largest MTU size that " "is allowed to reach a destination host without causing network " "fragmentation. A TCP implementation parses the `Packets Too Big` ICMP " "messages that it receives. These ICMP messages contain the MTU of the " "router's outgoing link in their `Data` field. Upon reception of such an ICMP " "message, the source TCP implementation adjusts its Maximum Segment Size (MSS)" " so that the packets containing the segments that it sends can be forwarded " "by this router without requiring fragmentation." msgstr "" "ICMPv6 is used by TCP implementations to discover the largest MTU size that " "is allowed to reach a destination host without causing network " "fragmentation. A TCP implementation parses the `Packets Too Big` ICMP " "messages that it receives. These ICMP messages contain the MTU of the " "router's outgoing link in their `Data` field. Upon reception of such an ICMP " "message, the source TCP implementation adjusts its Maximum Segment Size (MSS)" " so that the packets containing the segments that it sends can be forwarded " "by this router without requiring fragmentation." #: ../../protocols/ipv6.rst:583 #, read-only msgid "" "Two types of informational ICMPv6 messages are defined in :rfc:`4443` : `" "echo request` and `echo reply`, which are used to test the reachability of a " "destination by using :manpage:`ping6(8)`. Each host is supposed " "[#fpingproblems]_ to reply with an ICMP `Echo reply` message when it " "receives an ICMP `Echo request` message. A sample usage of :manpage:`ping6" "(8)` is shown below." msgstr "" "Two types of informational ICMPv6 messages are defined in :rfc:`4443` : `" "echo request` and `echo reply`, which are used to test the reachability of a " "destination by using :manpage:`ping6(8)`. Each host is supposed " "[#fpingproblems]_ to reply with an ICMP `Echo reply` message when it " "receives an ICMP `Echo request` message. A sample usage of :manpage:`ping6" "(8)` is shown below." #: ../../protocols/ipv6.rst:605 #, read-only msgid "" "Another very useful debugging tool is :manpage:`traceroute6(8)`. The " "traceroute man page describes this tool as `" "\"print the route packets take to network host\"`. traceroute uses the `Time " "exceeded` ICMP messages to discover the intermediate routers on the path " "towards a destination. The principle behind traceroute is very simple. When " "a router receives an IP packet whose `Hop Limit` is set to ``1`` it is " "forced to return to the sending host a `Time exceeded` ICMP message " "containing the header and the first bytes of the discarded packet. To " "discover all routers on a network path, a simple solution is to first send a " "packet whose `Hop Limit` is set to `1`, then a packet whose `Hop Limit` is " "set to `2`, etc. A sample traceroute6 output is shown below." msgstr "" "Another very useful debugging tool is :manpage:`traceroute6(8)`. The " "traceroute man page describes this tool as `" "\"print the route packets take to network host\"`. traceroute uses the `Time " "exceeded` ICMP messages to discover the intermediate routers on the path " "towards a destination. The principle behind traceroute is very simple. When " "a router receives an IP packet whose `Hop Limit` is set to ``1`` it is " "forced to return to the sending host a `Time exceeded` ICMP message " "containing the header and the first bytes of the discarded packet. To " "discover all routers on a network path, a simple solution is to first send a " "packet whose `Hop Limit` is set to `1`, then a packet whose `Hop Limit` is " "set to `2`, etc. A sample traceroute6 output is shown below." #: ../../protocols/ipv6.rst:627 #, read-only msgid "Rate limitation of ICMP messages" msgstr "Rate limitation of ICMP messages" #: ../../protocols/ipv6.rst:629 #, read-only msgid "" "High-end hardware based routers use special purpose chips on their " "interfaces to forward IPv6 packets at line rate. These chips are optimized " "to process `correct` IP packets. They are not able to create ICMP messages " "at line rate. When such a chip receives an IP packet that triggers an ICMP " "message, it interrupts the main CPU of the router and the software running " "on this CPU processes the packet. This CPU is much slower than the hardware " "acceleration found on the interfaces [Gill2004]_. It would be overloaded if " "it had to process IP packets at line rate and generate one ICMP message for " "each received packet. To protect this CPU, high-end routers limit the rate " "at which the hardware can interrupt the main CPU and thus the rate at which " "ICMP messages can be generated. This implies that not all erroneous IP " "packets cause the transmission of an ICMP message. The risk of overloading " "the main CPU of the router is also the reason why using hop-by-hop IPv6 " "options, including the router alert option is discouraged [#falert]_." msgstr "" "High-end hardware based routers use special purpose chips on their " "interfaces to forward IPv6 packets at line rate. These chips are optimized " "to process `correct` IP packets. They are not able to create ICMP messages " "at line rate. When such a chip receives an IP packet that triggers an ICMP " "message, it interrupts the main CPU of the router and the software running " "on this CPU processes the packet. This CPU is much slower than the hardware " "acceleration found on the interfaces [Gill2004]_. It would be overloaded if " "it had to process IP packets at line rate and generate one ICMP message for " "each received packet. To protect this CPU, high-end routers limit the rate " "at which the hardware can interrupt the main CPU and thus the rate at which " "ICMP messages can be generated. This implies that not all erroneous IP " "packets cause the transmission of an ICMP message. The risk of overloading " "the main CPU of the router is also the reason why using hop-by-hop IPv6 " "options, including the router alert option is discouraged [#falert]_." #: ../../protocols/ipv6.rst:633 #, read-only msgid "The IPv6 subnet" msgstr "The IPv6 subnet" #: ../../protocols/ipv6.rst:635 #, read-only msgid "" "Until now, we have focused our discussion on the utilization of IPv6 on " "point-to-point links. Although there are point-to-point links in the " "Internet, mainly between routers and sometimes hosts, most of the hosts are " "attached to datalink layer networks such as Ethernet LANs or WiFi networks. " "These datalink layer networks play an important role in today's Internet and " "have heavily influenced the design of the operation of IPv6. To understand " "IPv6 and ICMPv6 completely, we first need to correctly understand the key " "principles behind these datalink layer technologies." msgstr "" "Until now, we have focused our discussion on the utilization of IPv6 on " "point-to-point links. Although there are point-to-point links in the " "Internet, mainly between routers and sometimes hosts, most of the hosts are " "attached to datalink layer networks such as Ethernet LANs or WiFi networks. " "These datalink layer networks play an important role in today's Internet and " "have heavily influenced the design of the operation of IPv6. To understand " "IPv6 and ICMPv6 completely, we first need to correctly understand the key " "principles behind these datalink layer technologies." #: ../../protocols/ipv6.rst:637 #, read-only msgid "" "As explained earlier, devices attached to a Local Area Network can directly " "exchange frames among themselves. For this, each datalink layer interface on " "a device (host, router, ...) attached to such a network is identified by a " "MAC address. Each datalink layer interface includes a unique hardwired MAC " "address. MAC addresses are allocated to manufacturers in blocks and " "interface is numbered with a unique address. Thanks to the global unicity of " "the MAC addresses, the datalink layer service can assume that two hosts " "attached to a LAN have different addresses. Most LANs provide an unreliable " "connectionless service and a datalink layer frame has a header containing :" msgstr "" "As explained earlier, devices attached to a Local Area Network can directly " "exchange frames among themselves. For this, each datalink layer interface on " "a device (host, router, ...) attached to such a network is identified by a " "MAC address. Each datalink layer interface includes a unique hardwired MAC " "address. MAC addresses are allocated to manufacturers in blocks and " "interface is numbered with a unique address. Thanks to the global unicity of " "the MAC addresses, the datalink layer service can assume that two hosts " "attached to a LAN have different addresses. Most LANs provide an unreliable " "connectionless service and a datalink layer frame has a header containing :" #: ../../protocols/ipv6.rst:639 #, read-only msgid "the source MAC address" msgstr "the source MAC address" #: ../../protocols/ipv6.rst:640 #, read-only msgid "the destination MAC address" msgstr "the destination MAC address" #: ../../protocols/ipv6.rst:641 #, read-only msgid "" "some multiplexing information to indicate the network layer protocol that is " "responsible for the payload of the frame" msgstr "" "some multiplexing information to indicate the network layer protocol that is " "responsible for the payload of the frame" #: ../../protocols/ipv6.rst:643 #, read-only msgid "" "LANs also provide a broadcast and a multicast service. The broadcast service " "enables a device to send a single frame to all the devices attached to the " "same LAN. This is done by reserving a special broadcast MAC address " "(typically all bits of the address are set to one). To broadcast a frame, a " "device simply needs to send a frame whose destination is the broadcast " "address. All devices attached to the datalink network will receive the frame." msgstr "" "LANs also provide a broadcast and a multicast service. The broadcast service " "enables a device to send a single frame to all the devices attached to the " "same LAN. This is done by reserving a special broadcast MAC address " "(typically all bits of the address are set to one). To broadcast a frame, a " "device simply needs to send a frame whose destination is the broadcast " "address. All devices attached to the datalink network will receive the frame." #: ../../protocols/ipv6.rst:645 #, read-only msgid "" "The broadcast service allows easily reaching all devices attached to a " "datalink layer network. It has been widely used to support IP version 4. A " "drawback of using the broadcast service to support a network layer protocol " "is that a broadcast frame that contains a network layer packet is always " "delivered to all devices attached to the datalink network, even if some of " "these devices do not support the network layer protocol. The multicast " "service is a useful alternative to the broadcast service. To understand its " "operation, it is important to understand how a datalink layer interface " "operates. In shared media LANs, all devices are attached to the same " "physical medium and all frames are delivered to all devices. When such a " "frame is received by a datalink layer interface, it compares the destination " "address with the MAC address of the device. If the two addresses match, or " "the destination address is the broadcast address, the frame is destined to " "the device and its payload is delivered to the network layer protocol. The " "multicast service exploits this principle. A multicast address is a logical " "address. To receive frames destined to a multicast address in a shared media " "LAN, a device captures all frames having this multicast address as their " "destination. All IPv6 nodes are capable of capturing datalink layer frames " "destined to different multicast addresses." msgstr "" "The broadcast service allows easily reaching all devices attached to a " "datalink layer network. It has been widely used to support IP version 4. A " "drawback of using the broadcast service to support a network layer protocol " "is that a broadcast frame that contains a network layer packet is always " "delivered to all devices attached to the datalink network, even if some of " "these devices do not support the network layer protocol. The multicast " "service is a useful alternative to the broadcast service. To understand its " "operation, it is important to understand how a datalink layer interface " "operates. In shared media LANs, all devices are attached to the same " "physical medium and all frames are delivered to all devices. When such a " "frame is received by a datalink layer interface, it compares the destination " "address with the MAC address of the device. If the two addresses match, or " "the destination address is the broadcast address, the frame is destined to " "the device and its payload is delivered to the network layer protocol. The " "multicast service exploits this principle. A multicast address is a logical " "address. To receive frames destined to a multicast address in a shared media " "LAN, a device captures all frames having this multicast address as their " "destination. All IPv6 nodes are capable of capturing datalink layer frames " "destined to different multicast addresses." #: ../../protocols/ipv6.rst:649 #, read-only msgid "Interactions between IPv6 and the datalink layer" msgstr "Interactions between IPv6 and the datalink layer" #: ../../protocols/ipv6.rst:653 #, read-only msgid "" "IPv6 hosts and routers frequently interact with the datalink layer service. " "To understand the main interactions, it is useful to analyze all the packets " "that are exchanged when a simple network containing a few hosts and routers " "is built. Let us first start with a LAN containing two hosts [#fMAC]_." msgstr "" "IPv6 hosts and routers frequently interact with the datalink layer service. " "To understand the main interactions, it is useful to analyze all the packets " "that are exchanged when a simple network containing a few hosts and routers " "is built. Let us first start with a LAN containing two hosts [#fMAC]_." #: ../../protocols/ipv6.rst:671 #, read-only msgid "" "Hosts ``A`` and ``B`` are attached to the same datalink layer network. They " "can thus exchange frames by using the MAC addresses shown in the figure " "above. To be able to use IPv6 to exchange packets, they need to have an IPv6 " "address. One possibility would be to manually configure an IPv6 address on " "each host. However, IPv6 provides a better solution thanks to the `link-" "local` IPv6 addresses. A `link-local` IPv6 address is an address that is " "composed by concatenating the ``fe80:://64`` prefix with the MAC address of " "the device. In the example above, host A would use IPv6 `link-local` address " "``fe80::0223:45FF:FE67:89ab`` and host B ``fe80::0234:56FF:FE78:9abc``. With " "these two IPv6 addresses, the hosts can exchange IPv6 packets." msgstr "" "Hosts ``A`` and ``B`` are attached to the same datalink layer network. They " "can thus exchange frames by using the MAC addresses shown in the figure " "above. To be able to use IPv6 to exchange packets, they need to have an IPv6 " "address. One possibility would be to manually configure an IPv6 address on " "each host. However, IPv6 provides a better solution thanks to the `link-" "local` IPv6 addresses. A `link-local` IPv6 address is an address that is " "composed by concatenating the ``fe80:://64`` prefix with the MAC address of " "the device. In the example above, host A would use IPv6 `link-local` address " "``fe80::0223:45FF:FE67:89ab`` and host B ``fe80::0234:56FF:FE78:9abc``. With " "these two IPv6 addresses, the hosts can exchange IPv6 packets." #: ../../protocols/ipv6.rst:673 #, read-only msgid "Converting MAC addresses in host identifiers" msgstr "Converting MAC addresses in host identifiers" #: ../../protocols/ipv6.rst:675 #, read-only msgid "" "Appendix A of :rfc:`4291` provides the algorithm used to convert a 48 bits " "MAC address into a 64 bits host identifier. This algorithm builds upon the " "structure of the MAC addresses. A MAC address is represented as shown in the " "figure below." msgstr "" "Appendix A of :rfc:`4291` provides the algorithm used to convert a 48 bits " "MAC address into a 64 bits host identifier. This algorithm builds upon the " "structure of the MAC addresses. A MAC address is represented as shown in the " "figure below." #: ../../protocols/ipv6.rst:680 #, read-only msgid "A MAC address" msgstr "A MAC address" #: ../../protocols/ipv6.rst:682 #, read-only msgid "" "MAC addresses are allocated in blocks of :math:`2^{20}`. When a company " "registers for a block of MAC addresses, it receives an identifier. company " "identifier is then used to populated the `c` bits of the MAC addresses. The " "company can allocate all addresses in starting with this prefix and manages " "the `m` bits as it wishes." msgstr "" "MAC addresses are allocated in blocks of :math:`2^{20}`. When a company " "registers for a block of MAC addresses, it receives an identifier. company " "identifier is then used to populated the `c` bits of the MAC addresses. The " "company can allocate all addresses in starting with this prefix and manages " "the `m` bits as it wishes." #: ../../protocols/ipv6.rst:687 #, read-only msgid "A MAC address converted into a 64 bits host identifier" msgstr "A MAC address converted into a 64 bits host identifier" #: ../../protocols/ipv6.rst:689 #, read-only msgid "" "Inside a MAC address, the two bits indicated as `0` and `g` in the figure " "above play a special role. The first bit indicates whether the address is " "universal or local. The `g` bit indicates whether this is a multicast " "address or a unicast address. The MAC address can be converted into a 64 " "bits host identifier by flipping the value of the `0` bit and inserting " "``FFFE``, i.e. ``1111111111111110`` in binary, in the middle of the address " "as shown in the figure below. The `c`, `m` and `g` bits of the MAC address " "are not modified." msgstr "" "Inside a MAC address, the two bits indicated as `0` and `g` in the figure " "above play a special role. The first bit indicates whether the address is " "universal or local. The `g` bit indicates whether this is a multicast " "address or a unicast address. The MAC address can be converted into a 64 " "bits host identifier by flipping the value of the `0` bit and inserting " "``FFFE``, i.e. ``1111111111111110`` in binary, in the middle of the address " "as shown in the figure below. The `c`, `m` and `g` bits of the MAC address " "are not modified." #: ../../protocols/ipv6.rst:692 #, read-only msgid "" "The next step is to connect the LAN to the Internet. For this, a router is " "attached to the LAN." msgstr "" "The next step is to connect the LAN to the Internet. For this, a router is " "attached to the LAN." #: ../../protocols/ipv6.rst:711 #, read-only msgid "" "Assume that the LAN containing the two hosts and the router is assigned " "prefix ``2001:db8:1234:5678/64``. A first solution to configure the IPv6 " "addresses in this network is to assign them manually. A possible assignment " "is :" msgstr "" "Assume that the LAN containing the two hosts and the router is assigned " "prefix ``2001:db8:1234:5678/64``. A first solution to configure the IPv6 " "addresses in this network is to assign them manually. A possible assignment " "is :" #: ../../protocols/ipv6.rst:713 #, read-only msgid "``2001:db8:1234:5678::1`` is assigned to ``router``" msgstr "``2001:db8:1234:5678::1`` is assigned to ``router``" #: ../../protocols/ipv6.rst:714 #, read-only msgid "``2001:db8:1234:5678::AA`` is assigned to ``hostA``" msgstr "``2001:db8:1234:5678::AA`` is assigned to ``hostA``" #: ../../protocols/ipv6.rst:715 #, read-only msgid "``2001:db8:1234:5678::BB`` is assigned to ``hostB``" msgstr "``2001:db8:1234:5678::BB`` is assigned to ``hostB``" #: ../../protocols/ipv6.rst:719 #, read-only msgid "" "To be able to exchange IPv6 packets with ``hostB``, ``hostA`` needs to know " "the MAC address of the interface of ``hostB`` on the LAN. This is the `" "address resolution` problem. In IPv6, this problem is solved by using the " "Neighbor Discovery Protocol (NDP). NDP is specified in :rfc:`4861`. This " "protocol is part of ICMPv6 and uses the multicast datalink layer service." msgstr "" "To be able to exchange IPv6 packets with ``hostB``, ``hostA`` needs to know " "the MAC address of the interface of ``hostB`` on the LAN. This is the `" "address resolution` problem. In IPv6, this problem is solved by using the " "Neighbor Discovery Protocol (NDP). NDP is specified in :rfc:`4861`. This " "protocol is part of ICMPv6 and uses the multicast datalink layer service." #: ../../protocols/ipv6.rst:727 #, read-only msgid "" "NDP allows a host to discover the MAC address used by any other host " "attached to the same LAN. NDP operates in two steps. First, the querier " "sends a multicast ICMPv6 Neighbor Solicitation message that contains as " "parameter the queried IPv6 address. This multicast ICMPv6 NS is placed " "inside a multicast frame [#fndpmulti]_. The queried node receives the frame, " "parses it and replies with a unicast ICMPv6 Neighbor Advertisement that " "provides its own IPv6 and MAC addresses. Upon reception of the Neighbor " "Advertisement message, the querier stores the mapping between the IPv6 and " "the MAC address inside its NDP table. This table is a data structure that " "maintains a cache of the recently received Neighbor Advertisement. Thanks to " "this cache, a host only needs to send a Neighbor Solicitation message for " "the first packet that it sends to a given host. After this initial packet, " "the NDP table can provide the mapping between the destination IPv6 address " "and the corresponding MAC address." msgstr "" "NDP allows a host to discover the MAC address used by any other host " "attached to the same LAN. NDP operates in two steps. First, the querier " "sends a multicast ICMPv6 Neighbor Solicitation message that contains as " "parameter the queried IPv6 address. This multicast ICMPv6 NS is placed " "inside a multicast frame [#fndpmulti]_. The queried node receives the frame, " "parses it and replies with a unicast ICMPv6 Neighbor Advertisement that " "provides its own IPv6 and MAC addresses. Upon reception of the Neighbor " "Advertisement message, the querier stores the mapping between the IPv6 and " "the MAC address inside its NDP table. This table is a data structure that " "maintains a cache of the recently received Neighbor Advertisement. Thanks to " "this cache, a host only needs to send a Neighbor Solicitation message for " "the first packet that it sends to a given host. After this initial packet, " "the NDP table can provide the mapping between the destination IPv6 address " "and the corresponding MAC address." #: ../../protocols/ipv6.rst:738 #, read-only msgid "" "The NS message can also be used to verify the reachability of a host in the " "local subnet. For this usage, NS messages can be sent in unicast since other " "nodes on the subnet do not need to process the message." msgstr "" "The NS message can also be used to verify the reachability of a host in the " "local subnet. For this usage, NS messages can be sent in unicast since other " "nodes on the subnet do not need to process the message." #: ../../protocols/ipv6.rst:740 #, read-only msgid "" "When an entry in the NDP table times out on a host, it may either be deleted " "or the host may try to validate it by sending the NS message again." msgstr "" "When an entry in the NDP table times out on a host, it may either be deleted " "or the host may try to validate it by sending the NS message again." #: ../../protocols/ipv6.rst:747 #, read-only msgid "" "This is not the only usage of the Neighbor Solicitation and Neighbor " "Advertisement messages. They are also used to detect the utilization of " "duplicate addresses. In the network above, consider what happens when a new " "host is connected to the LAN. If this host is configured by mistake with the " "same address as ``hostA`` (i.e. ``2001:db8:1234:5678::AA``), problems could " "occur. Indeed, if two hosts have the same IPv6 address on the LAN, but " "different MAC addresses, it will be difficult to correctly reach them. IPv6 " "anticipated this problem and includes a `Duplicate Address Detection` " "Algorithm (DAD). When an IPv6 address [#flinklocal]_ is configured on a " "host, by any means, the host must verify the uniqueness of this address on " "the LAN. For this, it multicasts an ICMPv6 Neighbor Solicitation that " "queries the network for its newly configured address. The IPv6 source " "address of this NS is set to ``::`` (i.e. the reserved unassigned address) " "if the host does not already have an IPv6 address on this subnet). If the NS " "does not receive any answer, the new address is considered to be unique and " "can safely be used. Otherwise, the new address is refused and an error " "message should be returned to the system administrator or a new IPv6 address " "should be generated. The `Duplicate Address Detection` Algorithm can prevent " "various operational problems that are often difficult to debug." msgstr "" "This is not the only usage of the Neighbor Solicitation and Neighbor " "Advertisement messages. They are also used to detect the utilization of " "duplicate addresses. In the network above, consider what happens when a new " "host is connected to the LAN. If this host is configured by mistake with the " "same address as ``hostA`` (i.e. ``2001:db8:1234:5678::AA``), problems could " "occur. Indeed, if two hosts have the same IPv6 address on the LAN, but " "different MAC addresses, it will be difficult to correctly reach them. IPv6 " "anticipated this problem and includes a `Duplicate Address Detection` " "Algorithm (DAD). When an IPv6 address [#flinklocal]_ is configured on a " "host, by any means, the host must verify the uniqueness of this address on " "the LAN. For this, it multicasts an ICMPv6 Neighbor Solicitation that " "queries the network for its newly configured address. The IPv6 source " "address of this NS is set to ``::`` (i.e. the reserved unassigned address) " "if the host does not already have an IPv6 address on this subnet). If the NS " "does not receive any answer, the new address is considered to be unique and " "can safely be used. Otherwise, the new address is refused and an error " "message should be returned to the system administrator or a new IPv6 address " "should be generated. The `Duplicate Address Detection` Algorithm can prevent " "various operational problems that are often difficult to debug." #: ../../protocols/ipv6.rst:753 #, read-only msgid "" "Few users manually configure the IPv6 addresses on their hosts. They prefer " "to rely on protocols that can automatically configure their IPv6 addresses. " "IPv6 supports two such protocols : DHCPv6 and the Stateless Address " "Autoconfiguration (SLAAC)." msgstr "" "Few users manually configure the IPv6 addresses on their hosts. They prefer " "to rely on protocols that can automatically configure their IPv6 addresses. " "IPv6 supports two such protocols : DHCPv6 and the Stateless Address " "Autoconfiguration (SLAAC)." #: ../../protocols/ipv6.rst:764 #, read-only msgid "" "The Stateless Address Autoconfiguration (SLAAC) mechanism defined in " ":rfc:`4862` enables hosts to automatically configure their addresses without " "maintaining any state. When a host boots, it derives its identifier from its " "datalink layer address [#fprivacy]_ as explained earlier and concatenates " "this 64 bits identifier to the `FE80::/64` prefix to obtain its link-local " "IPv6 address. It then multicasts a Neighbor Solicitation with its link-local " "address as a target to verify whether another host is using the same link-" "local address on this subnet. If it receives a Neighbor Advertisement " "indicating that the link-local address is used by another host, it generates " "another 64 bits identifier and sends again a Neighbor Solicitation. If there " "is no answer, the host considers its link-local address to be valid. This " "address will be used as the source address for all NDP messages sent on the " "subnet." msgstr "" "The Stateless Address Autoconfiguration (SLAAC) mechanism defined in " ":rfc:`4862` enables hosts to automatically configure their addresses without " "maintaining any state. When a host boots, it derives its identifier from its " "datalink layer address [#fprivacy]_ as explained earlier and concatenates " "this 64 bits identifier to the `FE80::/64` prefix to obtain its link-local " "IPv6 address. It then multicasts a Neighbor Solicitation with its link-local " "address as a target to verify whether another host is using the same link-" "local address on this subnet. If it receives a Neighbor Advertisement " "indicating that the link-local address is used by another host, it generates " "another 64 bits identifier and sends again a Neighbor Solicitation. If there " "is no answer, the host considers its link-local address to be valid. This " "address will be used as the source address for all NDP messages sent on the " "subnet." #: ../../protocols/ipv6.rst:766 #, read-only msgid "" "To automatically configure its global IPv6 address, the host must know the " "globally routable IPv6 prefix that is used on the local subnet. IPv6 routers " "regularly multicast ICMPv6 Router Advertisement messages that indicate the " "IPv6 prefix assigned to the subnet. The Router Advertisement message " "contains several interesting fields." msgstr "" "To automatically configure its global IPv6 address, the host must know the " "globally routable IPv6 prefix that is used on the local subnet. IPv6 routers " "regularly multicast ICMPv6 Router Advertisement messages that indicate the " "IPv6 prefix assigned to the subnet. The Router Advertisement message " "contains several interesting fields." #: ../../protocols/ipv6.rst:772 #, read-only msgid "Format of the ICMPv6 Router Advertisement message" msgstr "Format of the ICMPv6 Router Advertisement message" #: ../../protocols/ipv6.rst:774 #, read-only msgid "" "This message is sent from the link-local address of the router on the " "subnet. Its destination is the IPv6 multicast address that targets all IPv6 " "enabled hosts (i.e. ``ff02::1``). The `Cur Hop Limit` field, if different " "from zero, allows specifying the default `Hop Limit` that hosts should use " "when sending IPv6 packets from this subnet. ``64`` is a frequently used " "value. The `M` and `O` bits are used to indicate that some information can " "be obtained from DHCPv6. The `Router Lifetime` parameter provides the " "expected lifetime (in seconds) of the sending router acting as a default " "router. This lifetime enables planning the replacement of a router by " "another one in the same subnet. The `Reachable Time` and the `Retrans Timer` " "parameter are used to configure the utilization of the NDP protocol on the " "hosts attached to the subnet." msgstr "" "This message is sent from the link-local address of the router on the " "subnet. Its destination is the IPv6 multicast address that targets all IPv6 " "enabled hosts (i.e. ``ff02::1``). The `Cur Hop Limit` field, if different " "from zero, allows specifying the default `Hop Limit` that hosts should use " "when sending IPv6 packets from this subnet. ``64`` is a frequently used " "value. The `M` and `O` bits are used to indicate that some information can " "be obtained from DHCPv6. The `Router Lifetime` parameter provides the " "expected lifetime (in seconds) of the sending router acting as a default " "router. This lifetime enables planning the replacement of a router by " "another one in the same subnet. The `Reachable Time` and the `Retrans Timer` " "parameter are used to configure the utilization of the NDP protocol on the " "hosts attached to the subnet." #: ../../protocols/ipv6.rst:776 #, read-only msgid "" "Several options can be included in the Router Advertisement message. The " "simplest one is the MTU option that indicates the MTU to be used within the " "subnet. Thanks to this option, it is possible to ensure that all devices " "attached to the same subnet use the same MTU. Otherwise, operational " "problems could occur. The `Prefix` option is more important. It provides " "information about the prefix(es) that is (are) advertised by the router on " "the subnet." msgstr "" "Several options can be included in the Router Advertisement message. The " "simplest one is the MTU option that indicates the MTU to be used within the " "subnet. Thanks to this option, it is possible to ensure that all devices " "attached to the same subnet use the same MTU. Otherwise, operational " "problems could occur. The `Prefix` option is more important. It provides " "information about the prefix(es) that is (are) advertised by the router on " "the subnet." #: ../../protocols/ipv6.rst:782 #, read-only msgid "The Prefix information option" msgstr "The Prefix information option" #: ../../protocols/ipv6.rst:787 #, read-only msgid "" "The key information placed in this option are the prefix and its length. " "This allows the hosts attached to the subnet to automatically configure " "their own IPv6 address. The `Valid` and `Preferred` `Lifetimes` provide " "information about the expected lifetime of the prefixes. Associating some " "time validity to prefixes is a good practice from an operational viewpoint. " "There are some situations where the prefix assigned to a subnet needs to " "change without impacting the hosts attached to the subnet. This is often " "called the IPv6 renumbering problem in the literature :rfc:`7010`. A very " "simple scenario is the following. An SME subscribes to one ISP. Its router " "is attached to another router of this ISP and advertises a prefix assigned " "by the ISP. The SME is composed of a single subnet and all its hosts rely on " "stateless address configuration. After a few years, the SME decides to " "change of network provider. It connects its router to the second ISP and " "receives a different prefix from this ISP. At this point, two prefixes are " "advertised on the SME's subnet. The old prefix can be advertised with a " "short lifetime to ensure that hosts will stop using it while the new one is " "advertised with a longer lifetime. After sometime, the router stops " "advertising the old prefix and the hosts stop using it. The old prefix can " "now be returned back to the first ISP. In larger networks, renumbering an " "IPv6 remains a difficult operational problem [LeB2009]_." msgstr "" "The key information placed in this option are the prefix and its length. " "This allows the hosts attached to the subnet to automatically configure " "their own IPv6 address. The `Valid` and `Preferred` `Lifetimes` provide " "information about the expected lifetime of the prefixes. Associating some " "time validity to prefixes is a good practice from an operational viewpoint. " "There are some situations where the prefix assigned to a subnet needs to " "change without impacting the hosts attached to the subnet. This is often " "called the IPv6 renumbering problem in the literature :rfc:`7010`. A very " "simple scenario is the following. An SME subscribes to one ISP. Its router " "is attached to another router of this ISP and advertises a prefix assigned " "by the ISP. The SME is composed of a single subnet and all its hosts rely on " "stateless address configuration. After a few years, the SME decides to " "change of network provider. It connects its router to the second ISP and " "receives a different prefix from this ISP. At this point, two prefixes are " "advertised on the SME's subnet. The old prefix can be advertised with a " "short lifetime to ensure that hosts will stop using it while the new one is " "advertised with a longer lifetime. After sometime, the router stops " "advertising the old prefix and the hosts stop using it. The old prefix can " "now be returned back to the first ISP. In larger networks, renumbering an " "IPv6 remains a difficult operational problem [LeB2009]_." #: ../../protocols/ipv6.rst:789 #, read-only msgid "" "Upon reception of this message, the host can derive its global IPv6 address " "by concatenating its 64 bits identifier with the received prefix. It " "concludes the SLAAC by sending a Neighbor Solicitation message targeted at " "its global IPv6 address to ensure that no other host is using the same IPv6 " "address." msgstr "" "Upon reception of this message, the host can derive its global IPv6 address " "by concatenating its 64 bits identifier with the received prefix. It " "concludes the SLAAC by sending a Neighbor Solicitation message targeted at " "its global IPv6 address to ensure that no other host is using the same IPv6 " "address." #: ../../protocols/ipv6.rst:791 #, read-only msgid "Router Advertisements and Hop Limits" msgstr "Router Advertisements and Hop Limits" #: ../../protocols/ipv6.rst:793 #, read-only msgid "" "ICMPv6 Router Advertisements messages are regularly sent by routers. They " "are destined to all devices attached to the local subnet and no router " "should ever forward them to another subnet. Still, these messages are sent " "inside IPv6 packets whose `Hop Limit` is always set to ``255``. Given that " "the packet should not be forwarded outside of the local subnet, the reader " "could expect instead a `Hop Limit` set to ``1``. Using a `Hop Limit` set to " "``255`` provides one important benefit from a security viewpoint and this " "hack has been adapted in several Internet protocols. When a host receives a `" "Router Advertisement` message, it expects that this message has been " "generated by a router attached to the same subnet. Using a `Hop Limit` of " "``255`` provides a simple check for this. If the message was generated by an " "attacker outside the subnet, it would reach the subnet with a decremented `" "Hop Limit`. Checking that the `Hop Limit` is set to ``255`` is a simple " "[#fsend]_ verification that the packet was generated on this particular " "subnet. :rfc:`5082` provides other examples of protocols that use this hack " "and discuss its limitations." msgstr "" "ICMPv6 Router Advertisements messages are regularly sent by routers. They " "are destined to all devices attached to the local subnet and no router " "should ever forward them to another subnet. Still, these messages are sent " "inside IPv6 packets whose `Hop Limit` is always set to ``255``. Given that " "the packet should not be forwarded outside of the local subnet, the reader " "could expect instead a `Hop Limit` set to ``1``. Using a `Hop Limit` set to " "``255`` provides one important benefit from a security viewpoint and this " "hack has been adapted in several Internet protocols. When a host receives a `" "Router Advertisement` message, it expects that this message has been " "generated by a router attached to the same subnet. Using a `Hop Limit` of " "``255`` provides a simple check for this. If the message was generated by an " "attacker outside the subnet, it would reach the subnet with a decremented `" "Hop Limit`. Checking that the `Hop Limit` is set to ``255`` is a simple " "[#fsend]_ verification that the packet was generated on this particular " "subnet. :rfc:`5082` provides other examples of protocols that use this hack " "and discuss its limitations." #: ../../protocols/ipv6.rst:796 #, read-only msgid "" "Routers regularly send Router Advertisement messages. These messages are " "triggered by a timer that is often set at approximately 30 seconds. Usually, " "hosts wait for the arrival of a Router Advertisement message to configure " "their address. This implies that hosts could sometimes need to wait 30 " "seconds before being able to configure their address. If this delay is too " "long, a host can also send a `Router Solicitation` message. This message is " "sent towards the multicast address that corresponds to all IPv6 routers " "(i.e. ``FF01::2``) and the default router will reply." msgstr "" "Routers regularly send Router Advertisement messages. These messages are " "triggered by a timer that is often set at approximately 30 seconds. Usually, " "hosts wait for the arrival of a Router Advertisement message to configure " "their address. This implies that hosts could sometimes need to wait 30 " "seconds before being able to configure their address. If this delay is too " "long, a host can also send a `Router Solicitation` message. This message is " "sent towards the multicast address that corresponds to all IPv6 routers " "(i.e. ``FF01::2``) and the default router will reply." #: ../../protocols/ipv6.rst:798 #, read-only msgid "" "The last point that needs to be explained about ICMPv6 is the `Redirect` " "message. This message is used when there is more than one router on a subnet " "as shown in the figure below." msgstr "" "The last point that needs to be explained about ICMPv6 is the `Redirect` " "message. This message is used when there is more than one router on a subnet " "as shown in the figure below." #: ../../protocols/ipv6.rst:819 #, read-only msgid "" "In this network, ``router1`` is the default router for all hosts. The second " "router, ``router2`` provides connectivity to a specific IPv6 subnet, e.g. " "``2001:db8:abcd::/48``. These two routers attached to the same subnet can be " "used in different ways. First, it is possible to manually configure the " "routing tables on all hosts to add a route towards ``2001:db8:abcd::/48`` " "via ``router2``. Unfortunately, forcing such manual configuration boils down " "all the benefits of using address auto-configuration in IPv6. The second " "approach is to automatically configure a default route via ``router1`` on " "all hosts. With such route, when a host needs to send a packet to any " "address within ``2001:db8:abcd::/48``, it will send it to ``router1``. " "``router1`` would consult its routing table and find that the packet needs " "to be sent again on the subnet to reach ``router2``. This is a waste of " "time. A better approach would be to enable the hosts to automatically learn " "the new route. This is possible thanks to the ICMPv6 `Redirect` message. " "When ``router1`` receives a packet that needs to be forwarded back on the " "same interface, it replies with a `Redirect` message that indicates that the " "packet should have been sent via ``router2``. Upon reception of a `Redirect`" " message, the host updates it forwarding table to include a new transient " "entry for the destination reported in the message. A timeout is usually " "associated with this transient entry to automatically delete it after some " "time." msgstr "" "In this network, ``router1`` is the default router for all hosts. The second " "router, ``router2`` provides connectivity to a specific IPv6 subnet, e.g. " "``2001:db8:abcd::/48``. These two routers attached to the same subnet can be " "used in different ways. First, it is possible to manually configure the " "routing tables on all hosts to add a route towards ``2001:db8:abcd::/48`` " "via ``router2``. Unfortunately, forcing such manual configuration boils down " "all the benefits of using address auto-configuration in IPv6. The second " "approach is to automatically configure a default route via ``router1`` on " "all hosts. With such route, when a host needs to send a packet to any " "address within ``2001:db8:abcd::/48``, it will send it to ``router1``. " "``router1`` would consult its routing table and find that the packet needs " "to be sent again on the subnet to reach ``router2``. This is a waste of " "time. A better approach would be to enable the hosts to automatically learn " "the new route. This is possible thanks to the ICMPv6 `Redirect` message. " "When ``router1`` receives a packet that needs to be forwarded back on the " "same interface, it replies with a `Redirect` message that indicates that the " "packet should have been sent via ``router2``. Upon reception of a `Redirect`" " message, the host updates it forwarding table to include a new transient " "entry for the destination reported in the message. A timeout is usually " "associated with this transient entry to automatically delete it after some " "time." #: ../../protocols/ipv6.rst:826 #, read-only msgid "" "An alternative is the Dynamic Host Configuration Protocol (DHCP) defined in " ":rfc:`2131` and :rfc:`3315`. DHCP allows a host to automatically retrieve " "its assigned IPv6 address, but relies on server. A DHCP server is " "associated to each subnet [#fdhcpserver]_. Each DHCP server manages a pool " "of IPv6 addresses assigned to the subnet. When a host is first attached to " "the subnet, it sends a DHCP request message in a UDP segment " "(the DHCP server listens on port 67). As the host knows neither its IPv6 " "address nor the IPv6 address of the DHCP server, this UDP segment is sent " "inside a multicast packet target at the DHCP servers. The DHCP request may " "contain various options such as the name of the host, its datalink layer " "address, etc. The server captures the DHCP request and selects an unassigned " "address in its address pool. It then sends the assigned IPv6 address in a " "DHCP reply message which contains the datalink layer address of the host and " "additional information such as the subnet mask, the address of the default " "router or the address of the DNS resolver. The DHCP reply also specifies the " "lifetime of the address allocation. This forces the host to renew its " "address allocation once it expires. Thanks to the limited lease time, IP " "addresses are automatically returned to the pool of addresses when hosts " "are powered off." msgstr "" "An alternative is the Dynamic Host Configuration Protocol (DHCP) defined in " ":rfc:`2131` and :rfc:`3315`. DHCP allows a host to automatically retrieve " "its assigned IPv6 address, but relies on server. A DHCP server is " "associated to each subnet [#fdhcpserver]_. Each DHCP server manages a pool " "of IPv6 addresses assigned to the subnet. When a host is first attached to " "the subnet, it sends a DHCP request message in a UDP segment " "(the DHCP server listens on port 67). As the host knows neither its IPv6 " "address nor the IPv6 address of the DHCP server, this UDP segment is sent " "inside a multicast packet target at the DHCP servers. The DHCP request may " "contain various options such as the name of the host, its datalink layer " "address, etc. The server captures the DHCP request and selects an unassigned " "address in its address pool. It then sends the assigned IPv6 address in a " "DHCP reply message which contains the datalink layer address of the host and " "additional information such as the subnet mask, the address of the default " "router or the address of the DNS resolver. The DHCP reply also specifies the " "lifetime of the address allocation. This forces the host to renew its " "address allocation once it expires. Thanks to the limited lease time, IP " "addresses are automatically returned to the pool of addresses when hosts " "are powered off." #: ../../protocols/ipv6.rst:828 #, read-only msgid "" "Both SLAAC and DHCPv6 can be extended to provide additional information " "beyond the IPv6 prefix/address. For example, :rfc:`6106` defines options for " "the ICMPv6 ND message that can carry the IPv6 address of the recursive DNS " "resolver and a list of default domain search suffixes. It is also possible " "to combine SLAAC with DHCPv6. :rfc:`3736` defines a stateless variant of " "DHCPv6 that can be used to distribute DNS information while SLAAC is used to " "distribute the prefixes." msgstr "" "Both SLAAC and DHCPv6 can be extended to provide additional information " "beyond the IPv6 prefix/address. For example, :rfc:`6106` defines options for " "the ICMPv6 ND message that can carry the IPv6 address of the recursive DNS " "resolver and a list of default domain search suffixes. It is also possible " "to combine SLAAC with DHCPv6. :rfc:`3736` defines a stateless variant of " "DHCPv6 that can be used to distribute DNS information while SLAAC is used to " "distribute the prefixes." #: ../../protocols/ipv6.rst:834 #, read-only msgid "Footnotes" msgstr "Footnotes" #: ../../protocols/ipv6.rst:835 #, read-only msgid "" "The full list of allocated IPv6 multicast addresses is available at http://" "www.iana.org/assignments/ipv6-multicast-addresses" msgstr "" "The full list of allocated IPv6 multicast addresses is available at http://" "www.iana.org/assignments/ipv6-multicast-addresses" #: ../../protocols/ipv6.rst:837 #, read-only msgid "" "The IANA_ maintains the list of all allocated Next Header types at http://" "www.iana.org/assignments/protocol-numbers/" msgstr "" "The IANA_ maintains the list of all allocated Next Header types at http://" "www.iana.org/assignments/protocol-numbers/" #: ../../protocols/ipv6.rst:839 #, read-only msgid "" "When IPv4 was designed, the situation was different. The IPv4 header " "includes a checksum that only covers the network header. This checksum is " "computed by the source and updated by all intermediate routers that " "decrement the TTL, which is the IPv4 equivalent of the `HopLimit` used by " "IPv6." msgstr "" "When IPv4 was designed, the situation was different. The IPv4 header " "includes a checksum that only covers the network header. This checksum is " "computed by the source and updated by all intermediate routers that " "decrement the TTL, which is the IPv4 equivalent of the `HopLimit` used by " "IPv6." #: ../../protocols/ipv6.rst:841 #, read-only msgid "" "Until a few years ago, all hosts replied to `Echo request` ICMP messages. " "However, due to the security problems that have affected TCP/IP " "implementations, many of these implementations can now be configured to " "disable answering `Echo request` ICMP messages." msgstr "" "Until a few years ago, all hosts replied to `Echo request` ICMP messages. " "However, due to the security problems that have affected TCP/IP " "implementations, many of these implementations can now be configured to " "disable answering `Echo request` ICMP messages." #: ../../protocols/ipv6.rst:843 #, read-only msgid "" "For a discussion of the issues with the router alert IP option, see http://" "tools.ietf.org/html/draft-rahman-rtg-router-alert-dangerous-00 or http://" "tools.ietf.org/html/draft-rahman-rtg-router-alert-considerations-03" msgstr "" "For a discussion of the issues with the router alert IP option, see http://" "tools.ietf.org/html/draft-rahman-rtg-router-alert-dangerous-00 or http://" "tools.ietf.org/html/draft-rahman-rtg-router-alert-considerations-03" #: ../../protocols/ipv6.rst:846 #, read-only msgid "" "For simplicity, you assume that each datalink layer interface is assigned a " "64 bits MAC address. As we will see later, today's datalink layer " "technologies mainly use 48 bits MAC addresses, but the smaller addresses can " "easily be converted into 64 bits addresses." msgstr "" "For simplicity, you assume that each datalink layer interface is assigned a " "64 bits MAC address. As we will see later, today's datalink layer " "technologies mainly use 48 bits MAC addresses, but the smaller addresses can " "easily be converted into 64 bits addresses." #: ../../protocols/ipv6.rst:848 #, read-only msgid "" ":rfc:`4291` and :rfc:`4861` explain in more details how the IPv6 multicast " "address is determined from the target IPv6 unicast address. These details " "are outside the scope of this book, but may matter if you try to understand " "a packet trace." msgstr "" ":rfc:`4291` and :rfc:`4861` explain in more details how the IPv6 multicast " "address is determined from the target IPv6 unicast address. These details " "are outside the scope of this book, but may matter if you try to understand " "a packet trace." #: ../../protocols/ipv6.rst:850 #, read-only msgid "The DAD algorithm is also used with `link-local` addresses." msgstr "The DAD algorithm is also used with `link-local` addresses." #: ../../protocols/ipv6.rst:852 #, read-only msgid "" "Using a datalink layer address to derive a 64 bits identifier for each host " "raises privacy concerns as the host will always use the same identifier. " "Attackers could use this to track hosts on the Internet. An extension to the " "Stateless Address Configuration mechanism that does not raise privacy " "concerns is defined in :rfc:`4941`. These privacy extensions allow a host to " "generate its 64 bits identifier randomly every time it attaches to a subnet. " "It then becomes impossible for an attacker to use the 64-bits identifier to " "track a host." msgstr "" "Using a datalink layer address to derive a 64 bits identifier for each host " "raises privacy concerns as the host will always use the same identifier. " "Attackers could use this to track hosts on the Internet. An extension to the " "Stateless Address Configuration mechanism that does not raise privacy " "concerns is defined in :rfc:`4941`. These privacy extensions allow a host to " "generate its 64 bits identifier randomly every time it attaches to a subnet. " "It then becomes impossible for an attacker to use the 64-bits identifier to " "track a host." #: ../../protocols/ipv6.rst:857 #, read-only msgid "" "Using a `Hop Limit` of ``255`` prevents one family of attacks against " "ICMPv6, but other attacks still remain possible. A detailed discussion of " "the security issues with IPv6 is outside the scope of this book. It is " "possible to secure NDP by using the `Cryptographically Generated IPv6 " "Addresses` (CGA) defined in :rfc:`3972`. The Secure Neighbor Discovery " "Protocol is defined in :rfc:`3971`. A detailed discussion of the security of " "IPv6 may be found in [HV2008]_." msgstr "" "Using a `Hop Limit` of ``255`` prevents one family of attacks against " "ICMPv6, but other attacks still remain possible. A detailed discussion of " "the security issues with IPv6 is outside the scope of this book. It is " "possible to secure NDP by using the `Cryptographically Generated IPv6 " "Addresses` (CGA) defined in :rfc:`3972`. The Secure Neighbor Discovery " "Protocol is defined in :rfc:`3971`. A detailed discussion of the security of " "IPv6 may be found in [HV2008]_." #: ../../protocols/ipv6.rst:859 #, read-only msgid "" "In practice, there is usually one DHCP server per group of subnets and the " "routers capture on each subnet the DHCP messages and forward them to the " "DHCP server." msgstr "" "In practice, there is usually one DHCP server per group of subnets and the " "routers capture on each subnet the DHCP messages and forward them to the " "DHCP server."