IPV6 Proxy Server: Open the door into IPv6

"51cto.com exclusive feature" to mention IPV6, I believe most people know-but also basically limited to "know" only. Since the birth of the 90 's in the middle of the last century, although the topic of IPV6 discussion has always been hot, but for the vast number of users, but very few can really use IPV6 application! What's the problem? On the one hand, the application of IPV6 itself is not much; on the other hand, or more crucially, the traditional IPV4 applications and IPV6 network can not be interconnected, making IPV6 network and application formed an isolated island: the traditional IPv4 users do not, the emerging IPV6 network development ... The root cause of this situation was that the IPV6 protocol was not compatible at the time. Earlier 51cto.com had reported that the Internet Engineering Task Force (IETF) had acknowledged that they had made a fatal mistake in IPV6 standards by not providing backward compatibility with the existing Internet Protocol IPv4. Leslie Daigle, chief Internet Technology officer at the Internet Association (Internet powering), said: "The lack of true backward compatibility with IPV4 is the only and biggest failure of (IPV6)." There was reason to do so, but the reality is that no one wants friends to stay in the IPv4 to upgrade themselves to IPV6. "The lack of a truly IPV6 application-oriented solution can only force the enterprise to consider whether to adopt a suitable migration solution or a full upgrade," Liqing, senior architect and security expert at the Bluecoat company, said in an interview with 51cto.com. "The huge cost of a full upgrade is enough to keep most businesses looking." 498) this.width=498 ' OnMouseWheel = ' javascript:return big (This) ' height=262 Alt=ipv6 Proxy server: Open the door to IPv6 src= "http:// Images.51cto.com/files/uploadimg/20090630/142427718.jpg "width=202 Border=0>, senior architect and security expert liqing of American Bluecoat, that is to say, The key to the current problem is how to solve the problem of transition and convergence of users from IPv4 to IPV6. Liqing said: "To the smooth transition to IPv6, need a bones, can safely migrate business applications and services strategy." "So, is there a strategy?" The answer is yes. This is the proxy device such as the IPV6 proxy server. The principle of the IPV6 agent device, the so-called IPV6 agent device, is, of course, a special device for proxy, transition, and conversion between IPV4 and IPV6 networks. Liqing introduced, through intelligent IPv6 agent equipment,Users do not need to address translation or rewrite the application or upgrade IT infrastructure to enable the smooth transition of applications, services, and data in IPV4 and IPV6 environments. In other words, the IPV6 agent device is built between the client and the server, regardless of whether the client is IPV4 or Ipv6,ipv6 agent device can adapt to the communication; In this way, when a traditional IPV4 client sends an application request to the IPV6 server, the IPV6 proxy device can intercept the IPV4 application request, and then convert it to the IPV6 request to the server; (see example below) 498) this.width=498 ' OnMouseWheel = ' javascript:return big (This) ' height=129 alt= ' "src=" http:// Images.51cto.com/files/uploadimg/20090619/161836312.jpg "width=466 border=0> Figure 1 What is the principle of implementing the above transformation? Liqing said that for Blue Coat intelligent IPv6 Agent device, the use of the TCP protocol is aborted and the encapsulation. As we all know, the TCP protocol is the fourth layer protocol that works on the IP protocol, while other applications are based on TCP or UDP protocol. Blue Coat IPV6 Agent device aborts a TCP request sent by the client, analyzes the application-layer protocol request, and then encapsulates the request for access and security policy with a new protocol, making a request to the server and responding to the client normally. In this way, in the client's view, the request and response are normal, without any address translation and other work, everything is transparent. For the server, it seems that the client-issued request itself is in line with the IPV6 protocol. For the existing enterprise IPV4 application, it is possible to use the IPV6 agent equipment to direct the high-speed, more secure IPV6 backbone network, and then use the IPV6 protocol to apply more services. 498) this.width=498 ' OnMouseWheel = ' javascript:return big (This) ' height=280 alt= ' "src=" http://images.51cto.com/ Files/uploadimg/20090619/1615101.jpg "width=635 border=0> map 2ipv6 Proxy device challenges using IPV6 agent devices, the ravines between IPv4 and IPv6 seem to beFilled up. But businesses may ask: are there any security factors for switching between two protocols? Moreover, the addition of such a device, will not affect the network's normal transmission speed and quality? Will it affect existing applications? Will it greatly increase the cost of the network? Liqing explained that for IPV6 agent equipment, it is indeed facing the challenges of the above problems. Summed up there are four aspects, you can use "SUVA" to express. The first is content security control, that is, how to use the IPV6 agent equipment, to ensure that the application of enterprises in line with the enterprise Management system and compliance, but also so that enterprises do not need to authenticate the existing security policy. The second is availability (usability), that is, product application is convenient and reliable, for the original application is transparent, convenient, the third is the application of visibility (Visibility), which is a high demand for IPV6 agent equipment, is not able to agent equipment through the application of visual management, Help network administrators to fully understand and control the application traffic and Web content, and then achieve effective monitoring of application performance and adjust network resources. Finally, application layer protocol and Business selection Acceleration (acceleration). As an intelligent agent equipment, IPV6 agent equipment should also assume the network and application acceleration functions, so as to provide the best help for enterprise applications. It should be said that these challenges are also leading to the relatively difficult development of IPV6 agent equipment. Liqing said that the Blue coat developed the first generation of IPV6 agent equipment in the 5-year period. The key point of their success is that the Intelligent IPV6 Agent device, after obtaining the client request, is not a simple address translation, but a number of management work, including the analysis of the application, audit and other security management, including content caching and other acceleration strategies. Only if the request complies with the Enterprise security management rules, the agent device sends its request and optimizes it. Market conditions for IPV6 conversion at present, the IPV6 backbone network has developed rapidly in China, Japan, the United States and many other countries, for example, China has already built the world's largest IPV6 backbone network (IPV6), and the Chinese government is planning to further increase the promotion of IPV6 trial commercial. The development of backbone network makes the application of IPv6 gradually out of island effect. At present, many countries IPV6 backbone network leasing prices are very low, especially in some emerging countries, the overall network infrastructure is set up on the IPV6. These good news to the IPV6 transformation market also brought the opportunity. Liqing says the current focus is on applications and business transitions, which are not clearly defined and highly complex, while Blue Coat intelligent IPv6 Agent equipment is the first breakthrough in its difficulties. Liqing also said that one of the important values of intelligent IPV6 agent devices is that it is transparent, secure, and does not need to change the application architecture to be an important choice for user experience, understanding and transition to IPV6.Optional。 Several experts also said that after the user has a firsthand experience of IPV6, IPV6 conversion will likely usher in a growth inflection point, and then form a IPV6 application of the climax. "51cto.com exclusive feature, reproduced please specify the source and the author!" 】