IPv6 Firewall Architecture - A Prototype Designed to Demonstrate Quality-of-Service, Multicast and Mobility

Kyeong Yoo, Masters Student

CSSE, University of Canterbury

Fri Nov 26 15:10:00 NZDT 2004 in Room 031, MSCS

Abstract

IPv6 (Internet Protocol Version 6) provides many advantages over the current Internet Protocol (IPv4) and is predicted to become the protocol of choice for both wired and wireless networks in the near future. The key benefits of IPv6 include: substantially increased address space (128-bits), enhanced routing capabilities, improved quality of service (QoS), configurable security functionality, multicasting facilities, mobility with support for direct tunneling, address auto-configuration, and others.

IPv6 firewalls need to protect the trusted networks from the new types of attack, but at the same time they should not block legitimate applications using the full features of IPv6 protocol. A variety security vulnerabilities and threats to IPv6 networks have been reported and identified and it will be important to build an IPv6-based firewall that will be resilient to such attacks.

In this seminar, we present a prototype IPv6 firewall which will protect an IPv6 network from various network attacks. The firewall also supports IPv6 features such as QoS, multicast and Mobile IPv6.