112 results about "IPv4" patented technology

The invention discloses a fusion quantum secure communication method of an NAT gateway, and relates to the technical field of communication network information security and quantum information. Comprising the steps of 1, creating a fusion quantum security communication system of an NAT gateway, 2, adopting a quantum hybrid encryption architecture through a quantum security module, and internally arranging a quantum key distribution unit and an anti-quantum computing acceleration chipset, 3, expanding a quintuple mapping structure of NAT through a dynamic address mapping and quantum encryption module, newly adding a quantum security dimension field QSV, and carrying out quantum encryption on the quantum key distribution unit and the anti-quantum computing acceleration chipset. And 4, developing a protocol non-inductive conversion engine through a hybrid protocol stack cooperation module, supporting an IPv4 / IPv6 dual-stack quantum tunnel and a quantum key inheritance protocol to realize cross-protocol family encryption parameter migration, dynamically adjusting a quantum encapsulation mode in an address conversion process, and dynamically associating an internal network address port with a quantum key parameter and a channel fingerprint feature. And 5, constructing a quantum perception type session state machine through an anti-quantum attack session management module, and performing a joint decision-making mechanism through quantum entanglement state monitoring and classical traffic feature analysis.

The invention relates to a hardware routing table look-up method based on segmented unified storage. The method comprises the following steps: firstly, acquiring an IPv4 / IPv6 routing prefix, dividing the IPv4 / IPv6 routing prefix into 1-4 address fields according to 32 bits, allocating a unique forward and backward segment identifier for each field, constructing table entries containing the segment identifiers, 32-bit segment data and a next hop, and uniformly storing the table entries into the same TCAM. During table lookup, segmenting an address to be looked up according to the same rule, querying the TCAM from a first segment by taking segment data as a key, and recording a backward segment identifier and a next hop after hit; and if the backward segment identifier is invalid, directly returning to the corresponding next hop, and if the backward segment identifier is valid, continuing query by taking the identifier and the next segment of data as a joint key. And when the table item is not hit or the identification verification fails, selecting the table item with the longest prefix and the valid next hop in the matched section, and returning to the next hop. According to the invention, IPv4 / IPv6 routing table entries can be uniformly stored, the TCAM space utilization rate is improved, and meanwhile, the hardware table look-up efficiency is guaranteed.

The invention discloses a corresponding management method for IPV4 and IPV6 addresses of the same user of network dual stacks, and relates to the technical field of network address management, network system nodes are divided into a main control node, a replica synchronization node and an edge cache node, a layered management architecture is constructed, hotspot users with frequent write-in are identified, a flow partitioning and path arbitration strategy is adopted, and the IPV4 and IPV6 addresses of the same user of the network dual stacks are correspondingly managed. The method comprises the following steps of: dynamically allocating an auxiliary book group, constructing a state deviation evaluation function, judging the consistency degree according to a version and hash information, selecting a corresponding synchronization strategy, fusing various mechanisms to form an execution layer consistency maintenance closed loop, and performing IPV4 and IPV6 address mapping relation management in a distributed environment. According to the management method, the stability, the accuracy and the reliability of the dual-stack user address mapping management system in a multi-source asynchronous operation environment are effectively enhanced by constructing a layered execution architecture which takes a main control node as a core, a copy synchronization node as a distribution guarantee and an edge cache node as a response terminal.

The invention discloses an IPv4 / IPv6 dual-stack network intelligent operation and maintenance management method and system based on AI, and relates to the field of AI. The method comprises the steps that through full-link multi-source data collection and feature processing of network equipment, terminals, protocols and services, a structured data set is constructed; real-time evaluation and visual monitoring of the network state are realized by using a multi-task AI model; once an abnormality is found, a fault node and a propagation path are accurately positioned through a fault diagnosis model; integrating various model outputs to automatically generate and execute a targeted operation and maintenance strategy; and on-line iterative optimization of the AI model and the knowledge base is driven through continuous effect evaluation and data feedback, so that the dual-stack network intelligent operation and maintenance capability of autonomous circulation is formed. The method has the advantages that AI enabling and dual-stack adaptation are focused, full-link multi-source data acquisition is taken as support, accurate evaluation, rapid diagnosis and intelligent decision making are realized through a multi-task fusion AI model, the operation and maintenance efficiency and the network stability are improved, and the labor cost is reduced.

The invention relates to an IPv4 / IPv6 traffic scheduling method, device and equipment in a dual-stack environment and a storage medium, and the method comprises the steps: deploying IPv4 / IPv6 translation equipment and a traffic scheduling DNS component, and configuring a traffic scheduling rule on the traffic scheduling DNS component; matching a DNS request domain name initiated by a dual-stack terminal based on the traffic scheduling rule; and executing traffic scheduling operation according to a matching result, and accessing the data path. Through cooperative work of a flow scheduling DNS component and translation equipment, an IPv4 / IPv6 path is selected according to a domain name or an address range based on a demand factor configuration rule table, and IPv4 / IPv6 flow scheduling in a dual-stack network environment is realized.

The invention relates to a multi-tenant unified storage routing table item compression method and system based on identification mapping. The method comprises the following steps: in a routing table entry insertion stage, dynamically distributing a minimum available reduce ID for each new tenant, and ensuring that an IP prefix space of the new tenant is not overlapped with a tenant using the same reduce ID; in the lookup stage, a message VNI is firstly converted into a reduce ID through a mapping table realized based on an RAM, then the reduce ID and a destination IP are used as a joint key to look up the TCAM, and by constructing a mapping relation from the VNI to the reduce ID, the table item bit width of the TCAM is remarkably reduced on the premise of ensuring the routing correctness. The method is suitable for an IPv4 / IPv6 multi-tenant environment, the hardware area and power consumption can be effectively reduced especially in an FPGA or ASIC high-performance data plane, and meanwhile the line speed forwarding capacity is kept.

The application provides a lightweight inter-satellite routing implementation method and system suitable for a VDES constellation, the method comprising: a satellite pre-storing the topology of the entire constellation; a satellite sending end dividing data to be sent into smaller data packets, and encapsulating each data packet according to an IPv4 or IPv6 protocol; a gateway station specifying a central satellite and broadcasting to the entire constellation; each satellite calculating the shortest path from itself to the central satellite according to the central satellite by using a shortest path algorithm; sending IP data packets to the central satellite according to the calculated path; the central satellite sending data to the gateway station; the gateway station sending data and forwarding rules to the central satellite after processing; and the central satellite sending data to a destination satellite according to the forwarding rules. The application realizes interconnection and intercommunication between VDES satellites, and the protocol of the application is simple and reliable, and is suitable for running in a satellite on-board environment.

The application relates to a unified IPv4 / IPv6 address management method in an IPv6 evolution environment, which comprises the following steps: arranging all IPv4 and IPv6 address segments, planning IPv4 and IPv6 communication scenarios, allocating IPv4 and IPv6 mapping address segments, defining IPv4 and IPv6 address translation rules according to the IPv4 and IPv6 mapping address segments, generating an IPv4 and IPv6 address translation rule set, and generating corresponding mapping addresses for each real IPv4 / IPv6 address according to the IPv4 and IPv6 address translation rule set. In the process of IPv6 evolution, the real IPv4 / IPv6 address, the mapping IPv4 / IPv6 address and the IPv4 / IPv6 address translation rule involved in the IPv4 / IPv6 coexistence and communication scenario can be effectively managed.

This invention relates to a dual-stack network asset discovery method based on multi-protocol collaborative detection and intelligent fingerprint analysis; it includes the following steps: multi-source parallel acquisition: collecting network layer information of various terminal devices in the intranet through command line interface or application programming interface; data cleaning and standardization: after acquisition, cleaning and standardizing the raw data; target device identification and detection strategy generation: based on the cleaned address list and combined with device information, identifying the target device type and automatically generating corresponding detection parameters; multi-protocol asset detection packet sending: sending detection packets to target IPv4 and IPv6 addresses according to configuration parameters; response data parsing and fingerprint recognition: performing structured parsing and multi-dimensional recognition on the received response data; dual-stack network data fusion and statistical analysis: after fingerprint recognition, fusing and analyzing the IPv4 and IPv6 detection results and constructing a unified asset database.

A user plane function (UPF) of a telecommunications network configured to prioritize IPv6 addresses over IPv4 addresses for transmitting content over the telecommunications network from a content server to a user device. The UPF can receive a content request at including a uniform resource locator (URL) pointing to a resource on a host server. The UPF can also receive DNS queries including an AAAA and A record request. The UPF can forward the AAAA record and A record to a DNS server and receive an IPv6 and IPv4 address in response. The UPF can either delay A record transmission to the user device or transmit an x-header to the user device to facilitate an IPv6 client-server connection. The UPF can generate a data packet with the resource from the host server and transmit it to the user device using the IPv6 client-server connection.

The present invention discloses a domain name query method, device, non-volatile storage medium, and electronic device. The method comprises: obtaining a first domain name query request for a target domain name based on a first domain name type, wherein the first domain name query request is used to indicate a query in a preset cache space for a first domain name address based on Internet Protocol version 6 (IPv6) corresponding to the target domain name and the first domain name type; if the first domain name address cannot be found in the preset cache space, converting the first domain name request to a second domain name query request based on a second domain name type, wherein the second domain name query request is used to indicate a query in the preset cache space for a second domain name address based on Internet Protocol version 4 (IPv4) corresponding to the target domain name and the second domain name type; and converting the second domain name address to the first domain name address according to a preset algorithm mapping table. The present invention solves the technical problem that the prior art cannot enable services that only support IPv4 to support the use of an IPv6 single stack.

The invention provides an IPv6 conversion processing method and device, equipment, a medium and a product, and the method comprises the steps: obtaining an original access request sent by a user, parsing a source station domain name requested to be accessed by the original access request into an IPv6 address, and obtaining a target access request after the parsing; sending the target access request to a proxy server matched with the user through an intelligent load balancing server, so that the proxy server forwards the target access request to an IPv4 address of a source station; and obtaining response content fed back by the source station, and forwarding the response content to the user.

The application discloses a networking method and system based on dynamic IPv6 addresses, wherein the system comprises terminal equipment and a VPN gateway, and the terminal equipment accesses a network through the VPN gateway. The dynamic change of the IPv6 address of the VPN gateway (if the public IPv4 address is sufficient, the method is also applicable) can effectively alleviate the network asset exposure surface and reduce the possibility of being attacked by taking advantage of the unlimited nature of the IPv6 address.

The present disclosure provides an IPv6 conversion processing method, device, equipment, medium and product, wherein the method comprises: obtaining an original access request sent by a user, and resolving a source station domain name requested by the original access request into an IPv6 address to obtain a target access request after resolution; sending the target access request to a proxy server matched with the user through an intelligent load balancing server, so that the proxy server forwards the target access request to an IPv4 address of a source station; and obtaining response content fed back by the source station, and forwarding the response content to the user.

The invention relates to a dual-stack network asset discovery method based on multi-protocol cooperative detection and intelligent fingerprint analysis. Comprising the following steps: multi-source parallel acquisition: acquiring network layer information of each terminal device in an intranet through a command line interface or an application programming interface; data cleaning and standardization: after acquisition is completed, cleaning and standardization operation is performed on the original data; target equipment identification and detection strategy generation: according to the cleaned address list, in combination with equipment information, identifying the type of target equipment, and automatically generating corresponding detection parameters; sending a multi-protocol asset detection message: sending the detection message to the target IPv4 and IPv6 addresses according to the configuration parameters; response data analysis and fingerprint identification: carrying out structured analysis and multi-dimensional identification on the received response data; and dual-stack network data fusion and statistical analysis: after fingerprint identification is completed, carrying out fusion analysis on IPv4 and IPv6 detection results, and constructing a unified asset database.

The invention discloses a message forwarding method and device based on an automatic tunnel, and a medium, belongs to the technical field of network transmission, and is used for solving the technical problem that a final output interface is difficult to directly determine to complete message forwarding due to the fact that a route needs to be searched again by taking transfer as transition in an existing transmission mechanism for converting IPv6 to IPv4. The method comprises the following steps: performing query processing on a preset tunnel routing table according to an IPV6 destination IP address of a message received by an entry end, and determining a table item hit result; according to a table item hit result, carrying out directional search processing on the corresponding tunnel forwarding table, and determining packaging information; according to an outer-layer source IPV4 address in the packaging information and based on an inner-layer IPV6 destination IP address, packaging an outer-layer IPV4 destination IP address to obtain outer ring port sending message information; and searching the new message with the virtual routing forwarding label for the target IP address of the IPV4 of the related outer layer to obtain a final output interface in a common routing table.

The invention discloses an internet of things module gateway collaborative IPv4 service transparent transmission system and method, and aims to solve the core contradiction that an IPv6 single-stack internet of things module with strictly limited resources cannot efficiently access an IPv4 server. According to the invention, bidirectional protocol conversion is realized through cooperation of the module side and the gateway side. A lightweight CLAT module is integrated on the module side, an IPv4 message generated by a standard IPv4 Socket API called by an application program is intercepted, the IPv4 message is packaged into an IPv6 message according to the RFC 2473 IP-in-IP standard, and the IPv6 message is sent to a gateway through an LTE network in cooperation with a deeply-cut LwIP protocol stack. The gateway side receives the IPv6 message through the PLAT module, decapsulates and extracts an original IPv4 message, then completes dynamic mapping of a module IPv6 address and a gateway public network IPv4 address through an NAT44 engine, and forwards the IPv6 message to a target IPv4 server; and the flow is reversely executed in the downlink direction. And meanwhile, the NAT table activity and gateway fault automatic switching are maintained through a heartbeat engine. The IPv4 service transparent transmission system and the IPv4 service transparent transmission method meet the scene requirements of low power consumption and high real-time property of the Internet of Things.

The application discloses a kind of IPv4 over IPv6 tunnel's traffic statistics method, it is related to tunnel field in data communication, and different types of flow application are defined using the optional field in the TOS of inner IPv4 message;Different types of traffic are mapped for different mapping labels, which are used for inner subdivision dimension traffic statistics, to refine the granularity of traffic statistics;IPv6 flow label-based IPFIX completes traffic statistics. By mapping the flow characteristics of the inner message to the IPv6 flow label of the outer layer, the IPv6 flow label outside the IPFIX can be counted to the IPv4 traffic inside, improving the statistical efficiency and reducing the CPU overhead.

The invention discloses a dual-stack selection method for DNS (domain name system) area transmission and a related device, a first server respectively sends query requests of authorization start records SOA to a plurality of servers providing area data for the first server, P pieces of response information are obtained after waiting for a first time length, if IP addresses corresponding to the P pieces of response information are IPv4 addresses, the first server sends the query requests to the plurality of servers, and if the IP addresses corresponding to the P pieces of response information are IPv4 addresses, the first server sends the query requests to the plurality of servers; if yes, continuing to wait for a second time length to obtain Q pieces of response information, improving the probability of receiving the response information of the IPv6 address, then preferentially sorting the P pieces of response information and M IP addresses with the same serial number in the Q pieces of response information according to the IPv6 address to obtain a sorting result, and finally sending an area transmission XFR request according to the sorting result, therefore, the first server can preferentially select the server with the IPv6 address to carry out regional data synchronization, and the migration of traffic to an IPv6 network is accelerated.

The invention discloses a method and device for automatically detecting network routing fluctuation based on Newcastle equipment, and the method comprises the steps: selecting a certain leaf matrix based on a configured trace matrix, and carrying out the configuration of trace basic data; based on the selected trace basic data, calling a trace task scheduling generation capability, and generating a leaf matrix trace scheduling task and an xxljob scheduling task; based on the leaf matrix trace scheduling task and the xxljob scheduling task, calling trace capability to perform trace on the selected trace basic data, and storing a trace result in a database; analyzing the trace result according to an anomaly judgment rule and a path analysis rule to obtain abnormal equipment and path change data; and performing summary presentation, detail presentation and path change presentation on trace results. According to the method and the device, unified matrix view display and state management of an IPv4 / IPv6 / SRv6 path are realized; and path abnormity is judged through multiple dimensions such as baseline comparison, hop count change and equipment type consistency.

The embodiment of the invention provides an IP address statistical system and method, electronic equipment, a medium and a program product, and relates to the field of wireless communication. The system comprises a first service module used for receiving IP address demand basic information of each network element deployed in a network function virtualization (NFV) network cloud system platform; the second service module is used for receiving docking configuration information of each network element of the NFV network cloud and an external system; the third service module is used for receiving resource pool deployment parameters; the resource pool deployment parameter is used for indicating the actual deployment scale of each network element under different networking types in a single resource pool, and the actual deployment scale at least comprises the actual deployment number of each network element in the single resource pool; and the fourth service module is used for counting the number of IPv4 and / or IPv6 addresses of each NFV network cloud resource pool based on the IP address demand basic information of each network element, the docking configuration information and the resource pool deployment parameters.

The application provides a space-based heterogeneous multi-link networking selection transmission method, which comprises the following steps: step one, user terminal networking; step two, link quality estimation: the user terminal and the satellite periodically count the data volume of the transceiver, and estimate the communication quality of each transmission link in combination with the link load and the packet loss rate; step three, link selection; step four, link switching: in the service communication, the sending end decides the communication link switching by using the cumulative sum control chart technique according to the link state, so as to ensure that the service data is always transmitted through the optimal link; and step five, satellite protocol conversion: the satellite converts the protocols of various communication link frames into unified network layer data packets through address mapping, so as to realize the hinged communication of the multiple heterogeneous links by the routing of the IPv4 unified service data packets. The method of the application realizes the heterogeneous terminal networking by uniformly taking IP as the data bearing on the satellite, realizes the link optimization by using the link quality estimation and the control chart technique, and improves the flexibility and efficiency of the satellite communication.

The embodiment of the present specification provides an application server access method, a chip module, a terminal and a storage medium, and relates to the technical field of communication. The application server access method comprises the following steps: detecting that a first domain name is accessed for a target application; sending a first domain name resolution request to a domain name system server, so as to request a plurality of first IPv4 addresses and a plurality of first IPv6 addresses corresponding to the first domain name; sending a first connection request to the application server, wherein the first connection request comprises a first target IPv6 address in the plurality of first IPv6 addresses; in response to the network quality being lower than a set quality level when the application server is accessed based on the first target IPv6 address, and detecting that the target application accesses the first domain name again; sending a second domain name resolution request to the domain name system server, so as to request a plurality of second IPv4 addresses and a plurality of second IPv6 addresses corresponding to the first domain name; and sending a second connection request to the application server, wherein the second connection request comprises a second target IPv6 address in the plurality of second IPv6 addresses.

The invention provides a routing isolation method, a routing isolation device and network equipment. According to the technical scheme, on the basis of a BGP IPv4 address family, an isolation address family is defined through a BGP Open message, and a routing isolation identifier and an isolation strategy identifier are packaged in a BGP Update message. When a network device learns or generates a new route under the isolation address family, a corresponding route isolation identifier and an isolation strategy identifier are carried in a BGP Update message, so that the new route can be accurately written into an isolation route list different from an IPv4 route list; according to the method, isolation of a newly added route and an original service route in storage, routing and notification levels is achieved, interference of the newly added route on the original route is expected to be avoided, and therefore the influence range caused by route attribute modification is strictly limited in network equipment associated with an isolation routing table and cannot be diffused to the whole network, and the network efficiency is improved. And the network evolution risk and the operation and maintenance complexity are greatly reduced.

This disclosure describes techniques and mechanisms to enable streamlined and simplified connectivity to host servers in data centers that utilize automated containerized networking. The techniques may be used individually or together to provide a fully automated, plug-and-play experience for the advertisement and discovery of IPv6 prefixes, simplify IPv6 routing to host servers, and provide reachability, visibility, and liveness detection. The techniques may eliminate the need for a BGP stack. The techniques may include extending a link layer discovery protocol stack running on a server to support adding a new TLV to LLDP probes sent to a top of rack router. The new TLV may advertise identifier(s) of the server (e.g., SRv6 Locator, IPv6 prefix(es), IPv4 prefix(es), etc.). The ToR may learn the identifier(s) of the server and may redistribute the server's reachability using routing protocol(s) of the network.

This invention relates to a method and apparatus for implementing SRV6 SFC dual-stack, comprising the following steps: configuring the next-hop for IPv4 and IPv6 dual-stack services between the SFF proxy and SF using a static END.AS; carrying the IPv4 and IPv6 dual-stack services within the same SRV6 TE POLICY tunnel; processing the IPv4 and IPv6 dual-stack services using the same static END.AS SID, and identifying the service type by stripping the outer IPv6 header and SRH header; selecting the corresponding next hop for processing according to the service type to achieve forwarding of IPv4 and IPv6 dual-stack services. This allows customers to access SFF and SF for dual-stack services while simplifying configuration and saving resources.

The present disclosure describes a device, computer-readable medium, and method for an IPV4-to-IPv6 redirect to enable use of application function-specific user endpoint identifiers (AF-specific UEIds). In one example, a method performed by a processing system includes receiving, from an application function of a communications network, a redirected request for an AF-specific UEId that is unique to a user endpoint device and the application function, where the redirected request includes an IPv6 address associated with the user endpoint device, querying a binding support function of the communications network for a subscription permanent identifier associated with the IPV6 address associated with the user endpoint device, querying an application function-specific management function for an AF-specific UEId associated with the subscription permanent identifier and an identifier of the application function, and forwarding the AF-specific UEId associated with the subscription permanent identifier and the identifier of the application function to the application function.

Systems and methods are described herein for validating an Internet Protocol (IP) version 6 (IPv6) address from an IP version 4 (IPv4) network. A method, according to one implementation, includes a step of receiving an IPv4-based request from a validation server that is configured to support an IPv4 address space. The method further includes a step of sending an IPv6-based request to a domain supporting an IPv6 address space. Also, the method includes receiving a response status code and domain validation information from the domain. Then, the method includes a step of passing the response status code and domain validation information to the validation server.

Presented herein are techniques to address a lack of path maximum transmission unit discovery in the context of, e.g., the control and provisioning of wireless access point (CAPWAP) protocol for multicast communications. In one embodiment, IPv4-IPv6-IPv4 network address translation is used to avoid a conservative maximum transmission unit size. In another embodiment, unicast and multicast path maximum transmission unit discovery techniques are executed to set the maximum transmission unit size for multicast communications.