|
|
|
|
|
Title:
|
Implementation of a Mobile IPv6 ALG/Proxy for Netfilter |
|
Type:
|
Bachelor/Master's thesis |
|
Student:
|
Jan Engelhardt |
|
Supervisor:
|
Niklas Steinleitner |
|
Status:
|
ongoing |
|
|
|
|
Description
Network elements such as firewalls are an integral aspect of a majority of IP networks today, given the state of security in the Internet, threats, and vulnerabilities to data networks. Mobile IPv6 defines mobility support for IPv6 nodes. Since firewalls are not aware of MIPv6 protocol details, they will
probably interfere with the smooth operation of the protocol. The problems caused by firewalls to Mobile IPv6 are documented in RFC4487. The IETF has formed an design team to work on this problems.
The student is expected to implement one potential solution - a Mobile IPv6 aware application layer gateway (ALG) also called Proxy. This should be done as extension for the Linux packet filtering framework netfilter (iptables).
|
Requirements
Good programming skills in C/C++; good understanding of computer networking and knowledge of mobile networking.
Knowledge about "Netfilter" would be helpful but is not required.
|
Links
Mobile IPv6(RFC3775): http://www.faqs.org/rfcs/rfc3775.html Mobile IPv6 and Firewalls: Problem Statement(RFC4487): http://www.ietf.org/rfc/rfc4487.txt Guidelines for firewall vendors regarding MIPv6 traffic: draft-krishnan-mip6-firewall-vendor-03.txt Guidelines for firewall administrators regarding MIPv6 traffic: draft-krishnan-mip6-firewall-admin-03.txt Netfilter: http://www.netfilter.org
|
|
|