Message sending method and device, equipment and storage medium

By parsing and verifying the destination IPv6 address of the received neighbor request message on the router, using neighbor table, connection tracking mechanism and whitelist for filtering, the problem of corruption of abnormal messages in the IPv6 protocol system for local area network communication is solved, and the problem of abnormal messages in the IPv6 protocol system is realized. Effective filtering of abnormal messages and protection of normal data communication.

CN119496627APending Publication Date: 2025-02-21CHENGDU OPPO TELECOMM TECH CORP LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202311030280.6
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2023-08-15
Publication Date
2025-02-21

AI Technical Summary

Technical Problem

In the IPv6 protocol system, the neighbor proxy function of the router forwards the messages received by the WAN side to the LAN side, causing the local area network communication to be damaged when the attacker sends a large number of messages, and the existing technology is difficult to effectively filter abnormal messages without Affects normal data communication.

Method used

By implementing a message sending method on the router, after listening to neighbor request messages on the WAN side, it parses its destination IPv6 address and verifying through neighbor tables, connection tracking mechanisms and whitelists. If the address passes verification, forward the message; otherwise, the message is discarded.

Benefits of technology

This method can effectively discard abnormal messages without affecting normal data communication, realize filtering of abnormal messages, and protect the stability of local area network communication.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119496627A_ABST
    Figure CN119496627A_ABST
Patent Text Reader

Abstract

The invention provides a message sending method and device, equipment and a storage medium, and belongs to the technical field of computers. The method comprises the following steps: in response to monitoring of a neighbor request message sent to a wide area network side of a first node, analyzing the neighbor request message to obtain an IPv6 address carried by the neighbor request message; under the condition that the target IPv6 address does not exist in the neighbor table of the first node, verifying the target IPv6 address based on a connection tracking mechanism; under the condition that the destination IPv6 address passes verification, forwarding the neighbor request message to the local area network side of the first node; and when the target IPv6 address does not pass the verification and the target IPv6 address does not exist in the white list, discarding the neighbor request message. According to the scheme, the abnormal message received by the wide area network side of the first node can be discarded while normal data communication is not affected, and the effect of filtering the abnormal message is achieved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a message sending method, device, equipment and storage medium. Background Art

[0002] In the IPv6 (Internet Protocol Version 6) protocol system, router devices usually enable the neighbor proxy function by default to ensure normal data communication between nodes. For example, for a node representing a router device, the node is connected to multiple upper-level router devices on the WAN side, and the node is connected to multiple lower-level devices on the LAN side. Through the neighbor proxy function of the node, the message received by the node on the WAN side can be forwarded to the LAN side of the node, thereby realizing data communication between the upper-level router device and the lower-level device. However, if an attacker sends a large number of messages to the WAN side of the node, and the neighbor proxy function further forwards the message to the LAN side of the node, the LAN communication of the node will be damaged. Therefore, how to filter the messages sent to the LAN side of the node is a technical problem that needs to be solved.

[0003] In the related art, the number of messages forwarded to the LAN side of the node is usually limited by limiting the number of messages received per second by the WAN side of the node. When the number of messages received per second by the WAN side of the node exceeds the number threshold, the WAN side of the node will no longer receive messages and will discard all messages sent to the WAN side.

[0004] However, using the above method may result in the risk of normal messages being discarded, affecting normal data communication. Summary of the invention

[0005] The embodiments of the present application provide a message sending method, device, equipment and storage medium, which can discard abnormal messages without affecting normal data communication, thereby achieving the effect of filtering abnormal messages. The technical solution is as follows:

[0006] According to one aspect of an embodiment of the present application, a method for sending a message is provided, the method comprising:

[0007] In response to monitoring a neighbor request message sent to the wide area network side of the first node, parsing the neighbor request message to obtain a destination Internet Protocol version 6 IPv6 address carried by the neighbor request message, wherein the neighbor request message is used to request a physical address of a target device, the target device is a downstream device connected to the first node on the local area network side, and the destination IPv6 address is an IPv6 address of the target device;

[0008] In the case where the destination IPv6 address does not exist in the neighbor table of the first node, verifying the destination IPv6 address based on a connection tracking mechanism, the neighbor table is used to record the neighbor node of the first node, the IPv6 address of the neighbor node and the physical address of the neighbor node, and the connection tracking mechanism is a mechanism for recording the source IPv6 address carried by the service request;

[0009] If the destination IPv6 address passes the verification, forwarding the neighbor solicitation message to the local area network side of the first node;

[0010] If the destination IPv6 address fails to pass the verification and the destination IPv6 address does not exist in the whitelist, the neighbor request message is discarded, and the whitelist includes the IPv6 addresses of the downstream devices that do not need to send service requests.

[0011] According to another aspect of an embodiment of the present application, a message sending device is provided, the device comprising:

[0012] a message parsing module, configured to, in response to monitoring a neighbor request message sent to the wide area network side of the first node, parse the neighbor request message to obtain a destination Internet Protocol version 6 IPv6 address carried by the neighbor request message, wherein the neighbor request message is used to request a physical address of a target device, the target device is a downstream device connected to the first node on the local area network side, and the destination IPv6 address is an IPv6 address of the target device;

[0013] An address verification module, configured to verify the destination IPv6 address based on a connection tracking mechanism when the destination IPv6 address does not exist in the neighbor table of the first node, the neighbor table being used to record the neighbor node of the first node, the IPv6 address of the neighbor node and the physical address of the neighbor node, and the connection tracking mechanism being a mechanism for recording the source IPv6 address carried in the service request;

[0014] A message forwarding module, configured to forward the neighbor request message to the local area network side of the first node when the destination IPv6 address passes the verification;

[0015] The message discarding module is used to discard the neighbor request message when the destination IPv6 address fails to pass the verification and the destination IPv6 address does not exist in the white list. The white list includes the IPv6 addresses of the downstream devices that do not need to send service requests.

[0016] In some embodiments, the address verification module is used to obtain the connection tracking table of the first node based on the connection tracking mechanism when the destination IPv6 address does not exist in the neighbor table of the first node, the connection tracking table is generated by the connection tracking mechanism, and the connection tracking table records the source IPv6 address carried by the service request sent by the downstream device connected to the first node on the local area network side; and verify whether the destination IPv6 address exists in the connection tracking table.

[0017] In some embodiments, the message forwarding module is used to determine that the destination IPv6 address has passed verification when the destination IPv6 address exists in the connection tracking table, and forward the neighbor request message to the local area network side of the first node.

[0018] In some embodiments, the address verification module is further used to search the destination IPv6 address in the whitelist if the destination IPv6 address fails to pass the verification, and the whitelist includes the IPv6 addresses of the downstream devices that do not need to send the service request;

[0019] The message forwarding module is further configured to forward the neighbor request message to the local area network side of the first node when the destination IPv6 address exists in the whitelist.

[0020] In some embodiments, the apparatus further comprises:

[0021] A message receiving module, used to receive a neighbor advertisement message sent by the local area network side of the first node, wherein the neighbor advertisement message is a reply message to the neighbor request message, and the neighbor advertisement message carries the physical address of the target device;

[0022] The message forwarding module is also used to forward the neighbor advertisement message to the wide area network side of the first node, and the second node reads the neighbor advertisement message from the wide area network side of the first node. The second node is the node connected to the first node on the wide area network side, and the second node is used to forward the message to the target device according to the physical address carried by the neighbor advertisement message.

[0023] In some embodiments, the apparatus further comprises:

[0024] The node adding module is used for adding a node representing the target device, the IPv6 address of the target device and the physical address of the target device in the neighbor table in response to receiving the neighbor advertisement message.

[0025] In some embodiments, the apparatus further comprises:

[0026] An address acquisition module, configured to determine, in the neighbor table of the first node, a physical address corresponding to the destination IPv6 address, where the physical address is the physical address of the target device;

[0027] The message forwarding module is further configured to send a neighbor advertisement message to the wide area network side of the first node based on the physical address, wherein the neighbor advertisement message carries the physical address.

[0028] In some embodiments, the apparatus further comprises:

[0029] An address determination module, configured to determine the destination IPv6 address as an untrusted address if the destination IPv6 address fails to pass verification and the destination IPv6 address does not exist in the whitelist;

[0030] The message parsing module is further configured to, in response to monitoring any message sent to the wide area network side of the first node, parse the message to obtain a destination IPv6 address carried by the message;

[0031] The message discarding module is further configured to discard the message when the destination IPv6 address carried by the message is an untrusted address.

[0032] According to another aspect of an embodiment of the present application, a network device is provided, comprising a processor and a memory; the memory stores at least one program code, and the at least one program code is used to be executed by the processor to implement the message sending method as described in the above aspect.

[0033] According to another aspect of an embodiment of the present application, a chip is provided, which includes a programmable logic circuit and / or program instructions. When the chip runs on a network device, it is used to implement the message sending method described in the above aspect.

[0034] According to another aspect of an embodiment of the present application, a computer-readable storage medium is provided, wherein the storage medium stores at least one program code, and the at least one program code is used to be executed by a processor to implement the message sending method as described in the above aspects.

[0035] According to another aspect of an embodiment of the present application, a computer program product is provided. The computer program product stores at least one program code, and the at least one program code is used to be executed by a processor to implement the message sending method described in the above aspect.

[0036] The embodiment of the present application provides a message sending method. For a router with a neighbor proxy function turned on, after detecting that the router receives a neighbor request message on the wide area network side, the destination IPv6 address carried by the neighbor request message is queried or verified through the neighbor table, the connection tracking mechanism and the white list in sequence. Through the above query and verification, even if the destination IPv6 address does not exist in the neighbor table, it can be determined that the router has a hanging device with an IPv6 address as the destination IPv6 address on the local area network side when the destination IPv6 address passes the verification of the connection tracking mechanism, and the neighbor request message is not an abnormal message. Therefore, the router can forward the neighbor request message to the local area network side of the router through the neighbor proxy function. When the destination IPv6 address fails to pass the verification and the destination IPv6 address does not exist in the white list, the above neighbor request message may be an abnormal message, and the router does not need to respond to the abnormal message and directly discards the neighbor request message. Through the above method, it is possible to discard abnormal messages without affecting normal data communication, thereby achieving the effect of filtering abnormal messages. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0038] Figure 1 It is a schematic diagram of an implementation environment provided by an embodiment of the present application;

[0039] Figure 2 It is a flow chart of a message sending method provided in an embodiment of the present application;

[0040] Figure 3 is a flowchart of another message sending method provided in an embodiment of the present application;

[0041] Figure 4 This is a flow chart of sending a message provided by an embodiment of the present application;

[0042] Figure 5 It is a structural diagram of a message sending device provided in an embodiment of the present application;

[0043] Figure 6 It is a structural diagram of another message sending device provided in an embodiment of the present application;

[0044] Figure 7 It is a structural block diagram of a terminal provided in an embodiment of the present application. DETAILED DESCRIPTION

[0045] In order to make the objectives, technical solutions and advantages of the present application clearer, the implementation methods of the present application will be further described in detail below in conjunction with the accompanying drawings.

[0046] In this article, "at least one" means one or more, and "plurality" means two or more. "And / or" describes the association relationship of the associated objects, indicating that three relationships can exist. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. The character " / " generally indicates that the associated objects are in an "or" relationship.

[0047] It should be noted that the information (including but not limited to user's device information, user's personal information, etc.), data (including but not limited to data used for analysis, stored data, displayed data, etc.) and signals involved in this application are all authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with the relevant laws, regulations and standards of the relevant countries and regions. For example, the neighbor request messages and neighbor announcement messages involved in this application are all obtained with full authorization.

[0048] Figure 1 is a schematic diagram of an implementation environment provided by an embodiment of the present application. Figure 1 , the implementation environment includes a network device 101, a network device 102 and a terminal 103. The network device 101, the network device 102 and the terminal 103 are connected via a wired network or a wireless network.

[0049] Optionally, network device 101 and network device 102 can be various types of devices such as routers, switches, hubs, gateways, wireless access points, etc. The embodiment of the present application takes the example that network device 101 and network device 102 are both routers. Correspondingly, network device 101 is router 101, and network device 102 is router 102. The local area network (LAN) side interface of router 101 is connected to the wide area network (WAN) side interface of router 102. Terminal 103 is connected to the LAN side interface of router 102. Therefore, router 101 is the upper router connected to router 102 on the WAN side, and terminal 103 is the lower hanging device connected to router 102 on the LAN side. Optionally, the terminal 101 can be various types of terminals such as mobile phones, desktop computers, laptops, tablet computers, smart watches, etc.

[0050] In some embodiments, when the WAN-side IPV6 PD (Internet Protocol Version 6 Prefix Delegation) of the router 102 does not allocate an address prefix to the downstream device, the IPv6 address segment allocated by the router 102 to the downstream device on the LAN side defaults to the subnet segment or the same network segment of the IPv6 address of the WAN-side interface of the router 102. For example, the router 101 allocates the network segment of the prefix 2001:250:1006:6151 / 64 to the WAN side of the router 102. The IPv6 address of the WAN-side interface of the router 102 is 2001:250:1006:6151::3 / 64, and the IPv6 address allocated by the router 102 to its downstream device terminal 103 is 2001:250:1006:6151::128 / 64.

[0051] After the terminal 103 sends a service request to other nodes, the messages replied by other nodes to the terminal 103 are returned to the router 101. Since the router 101 does not obtain the physical address of the terminal 103, the router 101 sends a neighbor request message to the WAN side of the router 102 to request the physical address of the terminal 103. Among them, the destination IPv6 address carried by the neighbor request message is the IPv6 address of the terminal 103. However, since the IPv6 address of the WAN side interface of the router 102 is different from the destination IPv6 address carried in the neighbor message request. Therefore, the WAN side of the router 102 will not respond to the neighbor request message, but directly discard the neighbor request message, resulting in the router 101 being unable to obtain the physical address of the terminal 103 and unable to forward the message to the terminal 103.

[0052] In order to solve the above problem, the neighbor proxy function is enabled by default in the router 102. Through the neighbor proxy function, the neighbor request message received by the WAN side of the router 102 can be monitored, and the neighbor request message can be forwarded to the LAN side of the router 102. If the terminal 103 replies to the neighbor advertisement message carrying the physical address, the neighbor advertisement message is forwarded to the WAN side of the router 102 through the neighbor proxy function. Through the above method, the router 101 can obtain the physical address carried by the neighbor advertisement message from the WAN side of the router 102, and then return the message to the terminal 103 according to the physical address, thereby realizing the normal transmission of the message.

[0053] The message sending method provided in the embodiment of the present application can be applied in the above-mentioned scenario of forwarding messages to the LAN side of the router 102 through the neighbor proxy function. For example, through the message sending method provided in the embodiment of the present application, it can be determined whether the message received by the router 102 on the WAN side is a normal message or an abnormal message. In the case that the message is an abnormal message, the message is discarded; in the case that the message is a normal message, the message is forwarded to the LAN side of the router 102 through the neighbor proxy function, thereby achieving the filtering effect of abnormal messages.

[0054] Of course, the message sending method provided in the embodiment of the present application can also be applied in other scenarios, such as preventing NDP (Neighbor Discovery Protocol) attacks, preventing NS (Neighbor Solicitation) message attacks, preventing forged message attacks, and preventing flooding attacks, etc. The embodiment of the present application does not limit this.

[0055] Figure 2 This is a flow chart of a message sending method provided in an embodiment of the present application, see Figure 2 , the method comprising:

[0056] 201. In response to monitoring a neighbor request message sent to the wide area network side of the first node, the neighbor request message is parsed to obtain a destination Internet Protocol version 6 IPv6 address carried by the neighbor request message, the neighbor request message is used to request the physical address of a target device, the target device is a downstream device connected to the first node on the local area network side, and the destination IPv6 address is the IPv6 address of the target device.

[0057] In the embodiment of the present application, the first node may be a network device such as a router, a switch or a hub. The embodiment of the present application is described by taking the first node as a router as an example. The router includes a wide area network (WAN) side interface and a local area network (LAN) side interface. The device to which the router is connected through the WAN side interface is the upstream device of the router, such as an upper-level router; the device to which the router is connected through the LAN side interface is the downstream device of the router, such as a mobile phone or a computer.

[0058] When a terminal sends a service request message to other nodes, the reply message from other nodes is first returned to the upper router of the router. If the upper router does not obtain the physical address of the terminal, the upper router sends a neighbor request message to the WAN side of the router to request the physical address of the terminal. In order to identify the terminal corresponding to the physical address requested by the neighbor request message, the neighbor request message carries the IPv6 (Internet Protocol Version 6) address of the terminal (that is, the target device).

[0059] In the IPv6 protocol system, the neighbor proxy function of the router is usually enabled by default. The neighbor proxy function of the router can monitor the messages sent to the WAN side of the router. When monitoring the neighbor request message sent to the WAN side of the router, the router parses the neighbor request message through the neighbor proxy function to obtain the destination IPv6 address carried in the neighbor request message.

[0060] 202. When the destination IPv6 address does not exist in the neighbor table of the first node, the destination IPv6 address is verified based on the connection tracking mechanism. The neighbor table is used to record the neighbor nodes of the first node, the IPv6 addresses of the neighbor nodes and the physical addresses of the neighbor nodes. The connection tracking mechanism is a mechanism for recording the source IPv6 address carried by the service request.

[0061] In an embodiment of the present application, after the router obtains the destination IPv6 address, the router first searches for the destination IPv6 address in the local neighbor table. The local neighbor table of the router is the neighbor table of the first node. The neighbor nodes of the router, the IPv6 addresses of the neighbor nodes, and the physical addresses of the neighbor nodes are recorded in the local neighbor table. Among them, in the IPv6 protocol system, the router can discover the neighbor nodes in the communication link and the address information such as the IPv6 addresses and physical addresses of the neighbor nodes through NDP (Neighbor Discovery Protocol), and maintain the address information of the above-mentioned neighbor nodes and the reachable paths of the neighbor nodes through the local neighbor table.

[0062] If the destination IPv6 address does not exist in the local neighbor table, the router verifies the destination IPv6 address through the connection tracking mechanism. The connection tracking mechanism is used to record the source IPv6 address carried by the service request transmitted through the router. Since the service request sent by the router's downstream device will pass through the router, and the source IPv6 address carried by the service request is the IPv6 address of the downstream device. Therefore, by verifying the destination IPv6 address through the connection tracking mechanism, it is possible to determine whether the target device is a downstream device connected to the router on the LAN side, and whether the target device is a downstream device that actively sends a service request.

[0063] 203. When the destination IPv6 address passes the verification, forward the neighbor solicitation message to the local area network side of the first node.

[0064] In an embodiment of the present application, in the case where the connection tracking mechanism has recorded the destination IPv6 address, the destination IPv6 address has passed the verification of the connection tracking mechanism, and the target device corresponding to the destination IPv6 address is the downstream device connected to the router on the LAN side. Therefore, the router forwards the neighbor request message to the LAN side through the neighbor proxy function, and the target device replies with a neighbor advertisement message carrying its own physical address. Then, the router forwards the neighbor advertisement message to the WAN side of the router through the neighbor proxy function. The upper-level router can read the physical address carried in the neighbor advertisement message on the WAN side of the router, and send a message to the target device based on the physical address, thereby realizing data communication between the upper-level router and the target device.

[0065] 204. If the destination IPv6 address fails to pass the verification and the destination IPv6 address does not exist in the whitelist, discard the neighbor request message, and the whitelist includes the IPv6 addresses of the downstream devices that do not need to send service requests.

[0066] In an embodiment of the present application, the router can also connect to other types of downstream devices on the LAN side. For example, a downstream device that does not need to actively send a service request. Since the above-mentioned type of downstream device does not need to actively send a service request to the router, the connection tracking mechanism does not record the IPv6 address of the downstream device. It should be noted that although the above-mentioned type of downstream device does not actively initiate a service request, it needs to passively receive the connection request sent by the wide area network side of the router. Therefore, in order to enable the above-mentioned type of downstream device to receive the neighbor request message, the application manufacturer can add the IPv6 address of the downstream device to the whitelist. Accordingly, when the destination IPv6 address fails to pass the verification, the router searches for the destination IPv6 address in the whitelist. When the destination IPv6 address exists in the whitelist, the target device is a downstream device that does not need to actively send a service request. The router forwards the neighbor request message to the LAN side of the router through the neighbor proxy function, and the target device replies with a neighbor notification message carrying its own physical address. When the destination IPv6 address does not exist in the whitelist, the target device is not a downstream device of the router. The neighbor request message is an abnormal message. The router directly discards the neighbor solicitation message without responding to abnormal messages.

[0067] The embodiment of the present application provides a message sending method. For a router with a neighbor proxy function turned on, after detecting that the router receives a neighbor request message on the wide area network side, the destination IPv6 address carried by the neighbor request message is queried or verified through the neighbor table, the connection tracking mechanism and the white list in sequence. Through the above query and verification, even if the destination IPv6 address does not exist in the neighbor table, it can be determined that the router has a hanging device with an IPv6 address as the destination IPv6 address on the local area network side when the destination IPv6 address passes the verification of the connection tracking mechanism, and the neighbor request message is not an abnormal message. Therefore, the router can forward the neighbor request message to the local area network side of the router through the neighbor proxy function. When the destination IPv6 address fails to pass the verification and the destination IPv6 address does not exist in the white list, the above neighbor request message may be an abnormal message, and the router does not need to respond to the abnormal message and directly discards the neighbor request message. Through the above method, it is possible to discard abnormal messages without affecting normal data communication, thereby achieving the effect of filtering abnormal messages.

[0068] Figure 3 is a flowchart of another message sending method provided in an embodiment of the present application, see Figure 3 , the method comprising:

[0069] 301. In response to monitoring a neighbor request message sent to the wide area network side of the first node, the neighbor request message is parsed to obtain a destination Internet Protocol version 6 IPv6 address carried by the neighbor request message, the neighbor request message is used to request the physical address of a target device, the target device is a downstream device connected to the first node on the local area network side, and the destination IPv6 address is the IPv6 address of the target device.

[0070] In the embodiment of the present application, the first node may be a network device such as a router, a switch or a hub. The embodiment of the present application is described by taking the first node as a router as an example. The router includes a WAN side interface and a LAN side interface. The device to which the router is connected through the WAN side interface is the upstream device of the router, such as an upper-level router; the device to which the router is connected through the LAN side interface is the downstream device of the router, such as a mobile phone or a computer.

[0071] When a terminal sends a service request message to other nodes, the reply message from other nodes is first returned to the upper router of the router. If the upper router does not obtain the physical address of the terminal, the upper router sends a neighbor request message to the WAN side of the router to request the physical address of the terminal. In order to identify the terminal corresponding to the physical address requested by the neighbor request message, the neighbor request message carries the IPv6 address of the terminal (that is, the target device).

[0072] In the IPv6 protocol system, the neighbor proxy function of the router is usually enabled by default. The neighbor proxy function of the router can monitor the messages sent to the WAN side of the router. When monitoring the neighbor request message sent to the WAN side of the router, the router parses the neighbor request message through the neighbor proxy function to obtain the destination IPv6 address carried by the neighbor request message. Among them, the destination IPv6 address is the IPv6 address of the host requested by the neighbor request message.

[0073] 302. Search for a destination IPv6 address in a neighbor table of the first node, where the neighbor table is used to record neighbor nodes of the first node, the IPv6 addresses of the neighbor nodes, and the physical addresses of the neighbor nodes.

[0074] In an embodiment of the present application, after the router obtains the destination IPv6 address, the router first searches for the destination IPv6 address in the local neighbor table. Wherein, the local neighbor table of the router is the neighbor table of the first node. The neighbor node of the router, the IPv6 address of the neighbor node, and the physical address of the neighbor node are recorded in the local neighbor table. Wherein, in the IPv6 protocol system, the router can discover the neighbor node in the communication link and the address information such as the IPv6 address and physical address of the neighbor node through NDP, and maintain the address information of the above-mentioned neighbor node and the reachable path of the neighbor node through the local neighbor table.

[0075] When the destination IPv6 address exists in the local neighbor table, the router executes the following steps 303-304; when the destination IPv6 address does not exist in the neighbor table, the router executes the following step 305.

[0076] 303. When the destination IPv6 address exists in the neighbor table of the first node, determine a physical address corresponding to the destination IPv6 address in the neighbor table, where the physical address is a physical address of the target device.

[0077] In an embodiment of the present application, when the destination IPv6 address exists in the local neighbor table of the router, the target device is a neighbor node of the router. The router can directly determine the physical address of the target device from the local neighbor table. For example, the router determines the physical address corresponding to the destination IPv6 address in the local neighbor table as the physical address of the target device.

[0078] 304. Based on the physical address, send a neighbor advertisement message to the wide area network side of the first node, where the neighbor advertisement message carries the physical address.

[0079] In the embodiment of the present application, the router encapsulates the neighbor advertisement message according to the physical address of the target device, and sends the neighbor advertisement message to the wide area network side of the router. The upper router can read the physical address carried in the neighbor advertisement message on the wide area network side of the router, and send a message to the target device according to the physical address, thereby realizing data communication between the upper router and the target device.

[0080] 305. When the destination IPv6 address does not exist in the neighbor table of the first node, verify the destination IPv6 address based on a connection tracking mechanism, where the connection tracking mechanism is a mechanism for recording a source IPv6 address carried in a service request.

[0081] In an embodiment of the present application, when the destination IPv6 address does not exist in the local neighbor table, the router verifies the destination IPv6 address through a connection tracking mechanism. The connection tracking mechanism is a mechanism provided by the router to record local connection information. The connection tracking mechanism can record information such as the source IPv6 address, the destination IPv6 address, and the protocol type of the service request carried by the service request transmitted through the router. Since the service request sent by the router's downstream device will pass through the router, and the source IPv6 address carried by the service request is the IPv6 address of the downstream device. Therefore, the IPv6 address of the downstream device that actively sends the service request connected to the router on the LAN side can be recorded through the connection tracking mechanism.

[0082] The router verifies the destination IPv6 address through the connection tracking mechanism, and can determine whether the target device is a downstream device that actively sends a service request to the router on the LAN side. If the destination IPv6 address passes the verification, the router executes the following step 306; if the destination IPv6 address fails the verification, the router executes the following step 307.

[0083] 306. When the destination IPv6 address passes the verification, forward the neighbor solicitation message to the local area network side of the first node.

[0084] In an embodiment of the present application, when the connection tracking mechanism has recorded the destination IPv6 address, the destination IPv6 address is verified, and the destination IPv6 address is on the LAN communication link of the router. The target device is a downstream device connected to the router on the LAN side. Therefore, the router forwards the neighbor request message to the LAN side through the neighbor proxy function, and the target device replies with a neighbor advertisement message carrying its own physical address. Then, the router forwards the neighbor advertisement message to the WAN side of the router through the neighbor proxy function. The upper-level router can read the physical address carried in the neighbor advertisement message on the WAN side of the router, and send a message to the target device according to the physical address, thereby realizing data communication between the upper-level router and the target device.

[0085] In some embodiments, the router can verify the destination IPv6 address through a connection tracking table. In the case where the destination IPv6 address does not exist in the neighbor table of the router, the router obtains the connection tracking table of the router based on the connection tracking mechanism. The connection tracking table is generated by the connection tracking mechanism. The connection tracking table records the source IPv6 address carried by the service request sent by the downstream device connected to the router on the local area network side. After the router obtains the connection tracking table, it verifies the destination IPv6 address by verifying whether the destination IPv6 address exists in the connection tracking table. In the case that the destination IPv6 address exists in the connection tracking table, the destination IPv6 address is verified. The router forwards the neighbor request message to the local area network side. In the case that the destination IPv6 address does not exist in the connection tracking table, the destination IPv6 address fails to be verified.

[0086] 307. When the destination IPv6 address fails to pass the verification, the destination IPv6 address is searched in the white list, where the white list includes the IPv6 addresses of the downstream devices that do not need to send the service request.

[0087] In an embodiment of the present application, when the destination IPv6 address fails to pass the verification, the target device corresponding to the destination IPv6 address is not a qualified downstream device. Among them, the qualified downstream device refers to the downstream device that actively sends a service request to which the router is connected on the LAN side. Since the router can also be connected to other types of downstream devices on the LAN side. For example, there is no need to actively send a service request to the downstream device, and the above-mentioned type of downstream device does not need to actively send a service request to the router. Therefore, the connection tracking mechanism does not record the IPv6 address of the above-mentioned type of downstream device. It should be noted that although the above-mentioned type of downstream device does not actively initiate a service request, it needs to passively receive the connection request sent by the wide area network side of the router. Therefore, in order to enable the above-mentioned type of downstream device to also receive the neighbor request message, the neighbor proxy function provides a whitelist registration mechanism to the application vendor. Based on the whitelist registration mechanism, the application vendor can add the IPv6 address of the downstream device to the whitelist according to the needs. Accordingly, when the destination IPv6 address fails to pass the verification, the router searches for the destination IPv6 address in the whitelist. The router executes the following step 308 or the following step 309 according to the search result.

[0088] 308. When the destination IPv6 address exists in the whitelist, forward the neighbor request message to the local area network side of the first node.

[0089] In an embodiment of the present application, when there is a destination IPv6 address in the whitelist, the target device is a downstream device connected to the router on the LAN side, and the target device is a downstream device that does not need to actively send a service request. The router forwards the neighbor request message to the LAN side of the router through the neighbor proxy function, and the target device replies with a neighbor advertisement message carrying its own physical address. Among them, after the router forwards the neighbor request message to the LAN side of the router through the neighbor proxy function, the downstream devices connected to the router on the LAN side can all receive the neighbor request message. However, only the downstream device whose IPv6 address is the same as the destination IPv6 address carried by the neighbor request message will respond to the neighbor request message. The downstream device whose IPv6 address is different from the destination IPv6 address will directly discard the neighbor request message. Since the IPv6 address of the target device is the same as the destination IPv6 address carried by the neighbor request message, the target device responds to the neighbor request message and replies to the router with a neighbor advertisement message.

[0090] In some embodiments, the router can forward the neighbor advertisement message replied by the local area network side to the wide area network side through the neighbor proxy function. After the router receives the neighbor advertisement message replied by the target device, it forwards the neighbor advertisement message to the wide area network side of the router, and the second node reads the neighbor advertisement message from the wide area network side of the router. Among them, the neighbor advertisement message is a reply message of the target device to the above-mentioned neighbor request message, and the neighbor advertisement message carries the physical address of the target device. The second node is the node connected to the first node on the wide area network side. The embodiment of the present application is explained by taking the second node as the upper router of the router as an example. The upper router can forward the message to the target device according to the physical address carried by the neighbor advertisement message.

[0091] In some embodiments, the router can add the IPv6 address and physical address of the target device in the local neighbor table. When the router receives a neighbor advertisement message replied by the target device, the target device is a neighbor node reachable by the router. Therefore, the router adds a neighbor node representing the target device, the IPv6 address of the target device, and the physical address of the target device in the local neighbor table. After receiving the neighbor advertisement message replied by the target device, the relevant address information of the target device is added to the local neighbor table, and the neighbor nodes reachable by the router can be continuously added to the local neighbor table. The next time the router receives a message whose destination IPv6 address is the IPv6 address of the target device, it can directly forward the message to the target device according to the physical address of the target device recorded in the local neighbor table, without sending a neighbor request message to the target device again, thereby improving the efficiency of message transmission.

[0092] 309. If the destination IPv6 address does not exist in the whitelist, discard the neighbor solicitation message.

[0093] In the embodiment of the present application, when the destination IPv6 address does not exist in the whitelist, the target device is not a device under the router. The router determines that the neighbor request message is an abnormal message and directly discards the neighbor request message without responding to the abnormal message.

[0094] In some embodiments, the router can determine the destination IPv6 address that has not been verified by the above-mentioned local neighbor table, connection tracking table and whitelist as an untrusted address. In the case where the destination IPv6 address does not exist in the local neighbor table, the connection tracking table and the whitelist, the router determines the destination IPv6 address as an untrusted address. In response to the router monitoring any message sent to the wide area network side of the router through the neighbor proxy function, the router parses the message through the neighbor proxy function to obtain the destination IPv6 address carried by the message. In the case where the destination IPv6 address carried by the message is an untrusted address, the router discards the message. By setting an untrusted address, when a message carrying an untrusted address is received, the message can be directly discarded without repeatedly verifying the IPv6 address, thereby improving the efficiency of message interception.

[0095] To more clearly illustrate the process of verifying the destination IPv6 address carried in the neighbor solicitation message, Figure 4 The flowchart of sending a message shown in FIG. 1 illustrates the above process. Figure 4 As shown, in response to the WAN side of the router receiving a neighbor request message, the router resolves the destination IPv6 address carried in the neighbor request message through the neighbor proxy function. Then, the router searches for the destination IPv6 address in the local neighbor table. In the case where the destination IPv6 address exists in the local neighbor table, the router replies to the WAN side with a neighbor advertisement message carrying the physical address through the neighbor proxy function according to the physical address corresponding to the destination IPv6 address in the local neighbor table. In the case where the destination IPv6 address does not exist in the local neighbor table, the router searches for the destination IPv6 address in the connection tracking table. In the case where the destination IPv6 address exists in the connection tracking table, the router forwards the neighbor request message to the LAN side, and forwards the neighbor advertisement message replied by the LAN side to the WAN side. In the case where the destination IPv6 address does not exist in the connection tracking table, the router searches for the destination IPv6 address in the white list. In the case where the destination IPv6 address exists in the white list, the router forwards the neighbor request message to the LAN side, and forwards the neighbor advertisement message replied by the LAN side to the WAN side. If the destination IPv6 address does not exist in the whitelist, the router discards the neighbor solicitation message.

[0096] It should be noted that the embodiment of the present application is described by taking the example of a router sending a neighbor request message. In some embodiments, the message sending method provided in the embodiment of the present application can also be applied to the scenario where the router sends other messages, and the embodiment of the present application does not limit this.

[0097] The embodiment of the present application provides a message sending method. For a router with a neighbor proxy function turned on, after detecting that the router receives a neighbor request message on the wide area network side, the destination IPv6 address carried by the neighbor request message is queried or verified through the neighbor table, the connection tracking mechanism and the white list in sequence. Through the above query and verification, even if the destination IPv6 address does not exist in the neighbor table, it can be determined that the router has a hanging device with an IPv6 address as the destination IPv6 address on the local area network side when the destination IPv6 address passes the verification of the connection tracking mechanism, and the neighbor request message is not an abnormal message. Therefore, the router can forward the neighbor request message to the local area network side of the router through the neighbor proxy function. When the destination IPv6 address fails to pass the verification and the destination IPv6 address does not exist in the white list, the above neighbor request message may be an abnormal message, and the router does not need to respond to the abnormal message and directly discards the neighbor request message. Through the above method, it is possible to discard abnormal messages without affecting normal data communication, thereby achieving the effect of filtering abnormal messages.

[0098] All the above optional technical solutions can be arbitrarily combined to form optional embodiments of the present application, which will not be described one by one here.

[0099] The following is an embodiment of the device of the present application, which can be used to execute the embodiment of the method of the present application. For details not disclosed in the embodiment of the device of the present application, please refer to the embodiment of the method of the present application.

[0100] Figure 5 Schematic diagram of a message sending device provided in an embodiment of the present application. Figure 5 The device includes: a message parsing module 501, an address verification module 502, a message forwarding module 503 and a message discarding module 504.

[0101] The message parsing module 501 is used to parse the neighbor request message in response to monitoring the neighbor request message sent to the wide area network side of the first node, and obtain the destination Internet Protocol version 6 IPv6 address carried by the neighbor request message, the neighbor request message is used to request the physical address of the target device, the target device is the downstream device connected to the first node on the local area network side, and the destination IPv6 address is the IPv6 address of the target device;

[0102] An address verification module 502 is used to verify the destination IPv6 address based on a connection tracking mechanism when the destination IPv6 address does not exist in the neighbor table of the first node. The neighbor table is used to record the neighbor node of the first node, the IPv6 address of the neighbor node, and the physical address of the neighbor node. The connection tracking mechanism is a mechanism for recording the source IPv6 address carried by the service request;

[0103] The message forwarding module 503 is used to forward the neighbor request message to the local area network side of the first node when the destination IPv6 address passes the verification;

[0104] The message discarding module 504 is used to discard the neighbor request message when the destination IPv6 address fails to pass the verification and the destination IPv6 address does not exist in the white list. The white list includes the IPv6 addresses of the downstream devices that do not need to send service requests.

[0105] In some embodiments, the address verification module 502 is used to obtain the connection tracking table of the first node based on the connection tracking mechanism when the destination IPv6 address does not exist in the neighbor table of the first node. The connection tracking table is generated by the connection tracking mechanism, and the connection tracking table records the source IPv6 address carried by the service request sent by the downstream device connected to the first node on the local area network side; verify whether the destination IPv6 address exists in the connection tracking table.

[0106] In some embodiments, the message forwarding module 503 is used to determine that the destination IPv6 address verification passes when the destination IPv6 address exists in the connection tracking table, and forward the neighbor request message to the local area network side of the first node.

[0107] In some embodiments, the address verification module 502 is further used to search for the destination IPv6 address in a whitelist when the destination IPv6 address fails to pass the verification, and the whitelist includes the IPv6 addresses of the downstream devices that do not need to send the service request;

[0108] The message forwarding module 503 is further configured to forward the neighbor request message to the local area network side of the first node when the destination IPv6 address exists in the whitelist.

[0109] In some embodiments, Figure 6 is a structural diagram of another message sending device provided in an embodiment of the present application, see Figure 6 , the device further comprises:

[0110] The message receiving module 505 is used to receive a neighbor advertisement message sent by the local area network side of the first node, where the neighbor advertisement message is a reply message to the neighbor request message, and the neighbor advertisement message carries the physical address of the target device;

[0111] The message forwarding module 503 is also used to forward the neighbor announcement message to the wide area network side of the first node, and the second node reads the neighbor announcement message from the wide area network side of the first node. The second node is the node connected to the first node on the wide area network side. The second node is used to forward the message to the target device according to the physical address carried by the neighbor announcement message.

[0112] In some embodiments, the apparatus further comprises:

[0113] The node adding module 506 is configured to add a node representing a target device, an IPv6 address of the target device, and a physical address of the target device to the neighbor table in response to receiving a neighbor advertisement message.

[0114] In some embodiments, the apparatus further comprises:

[0115] An address acquisition module 507 is used to determine a physical address corresponding to the destination IPv6 address in the neighbor table when the destination IPv6 address exists in the neighbor table of the first node, where the physical address is a physical address of a target device;

[0116] The message forwarding module 503 is further configured to send a neighbor advertisement message to the wide area network side of the first node based on the physical address, wherein the neighbor advertisement message carries the physical address.

[0117] In some embodiments, the apparatus further comprises:

[0118] An address determination module 508 is configured to determine the destination IPv6 address as an untrusted address if the destination IPv6 address fails to pass the verification and the destination IPv6 address does not exist in the whitelist;

[0119] The message parsing module 501 is further configured to, in response to monitoring any message sent to the wide area network side of the first node, parse the message to obtain a destination IPv6 address carried by the message;

[0120] The message discarding module 504 is further configured to discard the message when the destination IPv6 address carried by the message is an untrusted address.

[0121] The embodiment of the present application provides a message sending device. For a router with a neighbor proxy function turned on, after detecting that the router receives a neighbor request message on the wide area network side, the destination IPv6 address carried by the neighbor request message is queried or verified through the neighbor table, the connection tracking mechanism and the white list in sequence. Through the above query and verification, even if the destination IPv6 address does not exist in the neighbor table, it can be determined that the router has a hanging device with an IPv6 address of the destination IPv6 address on the local area network side when the destination IPv6 address passes the verification of the connection tracking mechanism, and the neighbor request message is not an abnormal message. Therefore, the router can forward the neighbor request message to the local area network side of the router through the neighbor proxy function. When the destination IPv6 address fails to pass the verification and the destination IPv6 address does not exist in the white list, the above neighbor request message may be an abnormal message, and the router does not need to respond to the abnormal message and directly discards the neighbor request message. Through the above method, it is possible to discard abnormal messages without affecting normal data communication, thereby achieving the effect of filtering abnormal messages.

[0122] It should be noted that the message sending device provided in the above embodiment, when sending a message, only uses the division of the above functional modules as an example. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the router is divided into different functional modules to complete all or part of the functions described above. In addition, the message sending device provided in the above embodiment and the message sending method embodiment belong to the same concept, and the specific implementation process is detailed in the method embodiment, which will not be repeated here.

[0123] An embodiment of the present application provides a terminal, which includes a processor and a memory; the memory stores at least one program code, and the at least one program code is used to be executed by the processor to implement the message sending method provided in the above-mentioned various method embodiments.

[0124] Figure 7 700 is a block diagram of a terminal provided in an embodiment of the present application. In some embodiments, the terminal 700 is a terminal such as a smart phone, a tablet computer, a wearable device, etc. that can access a wireless local area network as a wireless station. The terminal 700 in the present application includes at least one or more of the following components: a processor 710, a memory 720, and at least two wireless links 730.

[0125] In some embodiments, the processor 710 includes one or more processing cores. The processor 710 uses various interfaces and lines to connect various parts of the entire terminal 700, and executes various functions and processes data of the terminal 700 by running or executing program codes stored in the memory 720, and calling data stored in the memory 720. In some embodiments, the processor 710 is implemented in at least one hardware form of digital signal processing (DSP), field-programmable gate array (FPGA), and programmable logic array (PLA). The processor 710 can integrate one or more combinations of central processing unit (CPU), graphics processing unit (GPU), neural network processor (NPU) and modem. Among them, the CPU mainly processes the operating system, user interface and application programs; the GPU is responsible for rendering and drawing the content to be displayed on the display screen; the NPU is used to implement artificial intelligence (AI) functions; and the modem is used to process wireless communications. It is understandable that the above-mentioned modem may not be integrated into the processor 710, but may be implemented by a separate chip.

[0126] In some embodiments, the processor 710 is used to control the working conditions of at least two wireless links 730. Accordingly, the processor 710 is a processor integrated with a wireless fidelity (Wireless Fidelity, Wi-Fi) chip. The Wi-Fi chip is a chip with dual Wi-Fi processing capabilities. For example, the Wi-Fi chip is a dual-band dual concurrent (Dual Band Dual Concurrent, DBDC) chip, or a dual-band synchronous (Dual Band Simultaneous, DBS) chip, etc.

[0127] In some embodiments, the memory 720 includes a random access memory (RAM), and in some embodiments, the memory 720 includes a read-only memory (ROM). In some embodiments, the memory 720 includes a non-transitory computer-readable storage medium. The memory 720 can be used to store program codes. The memory 720 may include a program storage area and a data storage area, wherein the program storage area may store instructions for implementing an operating system, instructions for at least one function (such as a touch function, a sound playback function, an image playback function, etc.), instructions for implementing the following various method embodiments, etc.; the data storage area may store data created according to the use of the terminal 700 (such as audio data, a phone book), etc.

[0128] In some embodiments, the memory 720 stores reception schemes for receiving beacon frames of different wireless links 730, as well as identifiers of access nodes connected to different wireless links 730, identifiers of wireless links 730, and the like.

[0129] The at least two wireless links 730 are used to connect different access points (APs) to receive downlink data sent by the APs, wherein the different access points are access points in the same router or access points in different routers.

[0130] In some embodiments, the terminal 700 also includes a display screen. The display screen is a display component for displaying a user interface. In some embodiments, the display screen is a display screen with a touch function, through which the user can use any suitable object such as a finger or a touch pen to perform touch operations on the display screen. In some embodiments, the display screen is usually arranged on the front panel of the terminal 700. In some embodiments, the display screen is designed to be a full screen, a curved screen, a special-shaped screen, a double-sided screen or a folding screen. In some embodiments, the display screen is also designed to be a combination of a full screen and a curved screen, a combination of a special-shaped screen and a curved screen, etc., which is not limited in this embodiment.

[0131] In addition, those skilled in the art will appreciate that the structure of the terminal 700 shown in the above drawings does not limit the terminal 700, and the terminal 700 includes more or fewer components than shown in the drawings, or combines certain components, or arranges components differently. For example, the terminal 700 also includes components such as a microphone, a speaker, an input unit, a sensor, an audio circuit, a module, a power supply, and a Bluetooth module, which will not be described in detail here.

[0132] The present application also provides a computer-readable storage medium, which stores at least one program code, and the at least one program code is loaded and executed by the processor to implement the message sending method shown in the above embodiments.

[0133] The present application also provides a chip, which includes a programmable logic circuit and / or program instructions. When the chip runs on a terminal, it is used to implement the message sending method shown in the above embodiments.

[0134] The present application also provides a computer program product, which stores at least one program code, and the at least one program code is used to be executed by a processor to implement the message sending method shown in the above embodiments.

[0135] The serial numbers of the above-mentioned embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0136] Those skilled in the art can understand that all or part of the steps in the message sending method of the above embodiment can be completed by hardware, or can be completed by instructing related hardware through a program, and the program can be stored in a computer-readable storage medium, and the above-mentioned storage medium can be a read-only memory, a disk or an optical disk, etc. The above description is only an optional embodiment of the present application and is not intended to limit the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

Claims

1. A message sending method, characterized in that: The method comprises: In response to monitoring a neighbor request message sent to the wide area network side of the first node, parsing the neighbor request message to obtain a destination Internet Protocol version 6 IPv6 address carried by the neighbor request message, wherein the neighbor request message is used to request a physical address of a target device, the target device is a downstream device connected to the first node on the local area network side, and the destination IPv6 address is an IPv6 address of the target device; In the case where the destination IPv6 address does not exist in the neighbor table of the first node, verifying the destination IPv6 address based on a connection tracking mechanism, the neighbor table is used to record the neighbor node of the first node, the IPv6 address of the neighbor node and the physical address of the neighbor node, and the connection tracking mechanism is a mechanism for recording the source IPv6 address carried by the service request; If the destination IPv6 address passes the verification, forwarding the neighbor solicitation message to the local area network side of the first node; If the destination IPv6 address fails to pass the verification and the destination IPv6 address does not exist in the whitelist, the neighbor request message is discarded, and the whitelist includes the IPv6 addresses of the downstream devices that do not need to send service requests.

2. The method according to claim 1, characterized in that: When the destination IPv6 address does not exist in the neighbor table of the first node, verifying the destination IPv6 address based on a connection tracking mechanism includes: In a case where the destination IPv6 address does not exist in the neighbor table of the first node, based on the connection tracking mechanism, obtaining a connection tracking table of the first node, the connection tracking table being generated by the connection tracking mechanism, and the connection tracking table recording a source IPv6 address carried by a service request sent by a downstream device connected to the first node on the local area network side; Verify whether the destination IPv6 address exists in the connection tracking table.

3. The method according to claim 2, characterized in that When the destination IPv6 address passes the verification, forwarding the neighbor request message to the local area network side of the first node includes: In a case where the destination IPv6 address exists in the connection tracking table, it is determined that the destination IPv6 address verification passes, and the neighbor request message is forwarded to the local area network side of the first node.

4. The method according to claim 1, characterized in that The method further comprises: If the destination IPv6 address fails to pass the verification, searching the whitelist for the destination IPv6 address; When the destination IPv6 address exists in the whitelist, the neighbor solicitation message is forwarded to the local area network side of the first node.

5. The method according to claim 3 or 4, characterized in that: The method further comprises: receiving a neighbor advertisement message sent by the local area network side of the first node, wherein the neighbor advertisement message is a reply message to the neighbor request message, and the neighbor advertisement message carries the physical address of the target device; The neighbor advertisement message is forwarded to the wide area network side of the first node, and the second node reads the neighbor advertisement message from the wide area network side of the first node. The second node is a node connected to the first node on the wide area network side, and the second node is used to forward the message to the target device according to the physical address carried by the neighbor advertisement message.

6. The method according to claim 5, characterized in that The method further comprises: In response to receiving the neighbor advertisement message, a node representing the target device, the IPv6 address of the target device, and the physical address of the target device are added to the neighbor table.

7. The method according to claim 1, characterized in that The method further comprises: In a case where the destination IPv6 address exists in the neighbor table of the first node, determining a physical address corresponding to the destination IPv6 address in the neighbor table, the physical address being the physical address of the target device; Based on the physical address, a neighbor advertisement message is sent to the wide area network side of the first node, where the neighbor advertisement message carries the physical address.

8. The method according to claim 1, characterized in that: The method further comprises: If the destination IPv6 address fails to pass the verification and the destination IPv6 address does not exist in the whitelist, determining the destination IPv6 address as an untrusted address; In response to monitoring any message sent to the wide area network side of the first node, parsing the message to obtain a destination IPv6 address carried by the message; If the destination IPv6 address carried by the message is an untrusted address, the message is discarded.

9. A message sending device, characterized in that: The device comprises: a message parsing module, configured to, in response to monitoring a neighbor request message sent to the wide area network side of the first node, parse the neighbor request message to obtain a destination Internet Protocol version 6 IPv6 address carried by the neighbor request message, wherein the neighbor request message is used to request a physical address of a target device, the target device is a downstream device connected to the first node on the local area network side, and the destination IPv6 address is an IPv6 address of the target device; An address verification module, configured to verify the destination IPv6 address based on a connection tracking mechanism when the destination IPv6 address does not exist in the neighbor table of the first node, the neighbor table being used to record the neighbor node of the first node, the IPv6 address of the neighbor node and the physical address of the neighbor node, and the connection tracking mechanism being a mechanism for recording the source IPv6 address carried in the service request; A message forwarding module, configured to forward the neighbor request message to the local area network side of the first node when the destination IPv6 address passes the verification; The message discarding module is used to discard the neighbor request message when the destination IPv6 address fails to pass the verification and the destination IPv6 address does not exist in the white list. The white list includes the IPv6 addresses of the downstream devices that do not need to send service requests.

10. A network device, characterized in that: The network device includes a processor and a memory; the memory stores at least one program code, and the at least one program code is used to be executed by the processor to implement the message sending method according to any one of claims 1 to 8.

11. A computer-readable storage medium, characterized in that: The storage medium stores at least one program code, and the at least one program code is used to be executed by a processor to implement the message sending method according to any one of claims 1 to 8.

12. A chip, characterized in that: The chip includes a programmable logic circuit and / or program instructions, and when the chip runs on a network device, is used to implement the message sending method according to any one of claims 1 to 8.

13. A computer program product, comprising a computer program, characterized in that The computer program product stores at least one program code, and the at least one program code is used to be executed by a processor to implement the message sending method according to any one of claims 1 to 8.