IPV4 to IPV6

Transition From IPv4 to IPv6

Tukiyooo 0 IPv4, IPv4/IPv6, IPv6, Transition 01:04

One problem in transition from <a href="http://ipv4-ipv6.blogspot.com/" target="_blank">IPv4 to IPv6</a> completely is that IPv6 
is not backward compatible. This results in a situation where either a 
site is on IPv6 or it is not. Unlike an implementation of new 
technology where the newer one is backward compatible so the older 
system can still work with the newer without any additional changes. 
To overcome this short-coming, there exist few technologies which can be used in slow and smooth transition from IPv4 to IPv6: 
<h2>
Dual Stack Routers</h2>
A router can be installed with both IPv4 and IPv6 addresses 
configured on its interfaces pointing to the network of relevant IP 
scheme. 
<figure>
<img caption="Dual Stack Router" src="http://www.tutorialspoint.com/ipv6/images/dual_stack_router.jpg" />
<figcaption align="center">[Image: Dual Stack Router]</figcaption>
</figure>In above diagram, a Server which is having IPv4 as well as IPv6 
address configured for it now can speak with all hosts on IPv4 network 
and IPv6 network with help of Dual Stack Router. Dual Stack Router, can
 communicate with both networks and provides a medium for hosts to 
access Server without changing their respective IP version. 
<h2>
Tunneling</h2>
In a scenario where different IP versions exist on intermediate path 
or transit network, tunneling provides a better solution where user’s 
data can pass through a non-supported IP version. 
<figure>
<img caption="Tunneling" src="http://www.tutorialspoint.com/ipv6/images/tunneling.jpg" />
<figcaption align="center">[Image: Tunneling]</figcaption>
</figure>The above diagram depicts how two remote IPv4 networks can 
communicate via Tunnel, where the transit network was on IPv6. Vice 
versa is also possible where transit network is on IPv6 and remote sites
 which intends to communicate, are on IPv4. 
<h2>
NAT Protocol Translation</h2>
This is another important method of transition to IPv6 by means of a 
NAT-PT (Network Address Translation – Protocol Translation) enabled 
device. With help of NAT-PT device, actual conversion happens between 
IPv4 and IPv6 packets and vice versa. See the diagram below: 
<figure>
<img caption="NAT-PT" src="http://www.tutorialspoint.com/ipv6/images/nat.jpg" />
<figcaption align="center">[Image: NAT - Protocol Translation]</figcaption>
</figure>

A host with IPv4 address sends a request to IPv6 enabled Server on 
Internet which does not understand IPv4 address. In this scenario, 
NAT-PT device can help them communicate. When IPv4 host sends a request
 packet to IPv6 Server, NAT-PT device/router, strips down the IPv4 
packet, removes IPv4 header and adds IPv6 header and passes it through 
the Internet. When a response from IPv6 Server comes for IPv4 host, the
 router does vice versa. 
http://ipv4-ipv6.blogspot.com/2014/07/one-problem-in-transition-from-ipv4-to.html

Transition From IPv4 to IPv6

One problem in transition from IPv4 to IPv6 completely is that IPv6 is not backward compatible. This results in a situation where either ...

What is IPv4 and IPv6 ?

Tukiyooo 0 IPv4, IPv4/IPv6, IPv6, Setup IPv6 01:02

<div class="_5pbx userContent" data-ft="{"tn":"K"}">
<a href="http://ipv4-ipv6.blogspot.com/" target="_blank">What is IPv4 and IPv6. ?</a> 
 Are you confused between IPv4 and IPv6 .Here I have listed the Differences between them. 
 IPv4 :- 1) All the addresses of IPv4 are 32 bit length 2)The support of IPsec is only Optional 3)The Senders and Forwarding Routers will do the Fragmentation 4) Broadcasts Messages are available too 5)Static of IP addresses or Dynamic configuration is required to Configure IP address 6)No Packet Flow identification 7) Internet group Management Protocol ( IGMP ) is used for the Multicast Group Membership. 
 IPv6:- 1) All the addresses of IPv4 are 128 bit length 2) Inbuilt IPsec Support 3) Only Sender will do the Fragmentation 4)) Broadcasts Messages are not available.Instead a Link local scope all nodes multi cast address is used for Broadcast 5)Auto configuration of Addresses is Available 6)Packet Flow identification is available within the IPv6 header Using the Flow Label Field 7) IGMP is replaced with the Neighbour Discovery Protocol. 
 Author: <a class="profileLink" href="https://www.facebook.com/1337vickz" rel="nofollow" target="_blank">Vicky singh</a></div>

What is IPv4 and IPv6 ?

What is IPv4 and IPv6. ? Are you confused between IPv4 and IPv6 .Here I have listed the Differences between them. IPv4 :- 1) All the ...

World IPv6 day (Test Flight)

Tukiyooo 0 IPv4/IPv6, IPv6, Setup IPv6, Test Flight 10:27

<div class="_5rgo">
<div class="msg _599f _5tfq">
<div>
Today is the 
World IPv6 day or "Test Flight" day and the goal of the Test Flight Day 
is to motivate organizations across the industry – Internet service 
providers, hardware makers, operating system vendors and web companies –
 to prepare their services for IPv6 to ensure a successful transition as
 IPv4 addresses run out. 
 
Including Google, Facebook, Yahoo!, Akamai and Limelight Networks will offer their contents over IPv6 for 24 hours. 
 
You can check your IPv6 through the <a href="http://lm.facebook.com/l.php?u=http%3A%2F%2Ftest-ipv6.com%2F&h=dAQEBlw_3&s=1" rel="nofollow" target="_blank">http://test-ipv6.com/</a>. 
 
Google has announced that if any problem occured to visit Google then they recommend to use ipv4.google.com rather using <a href="http://lm.facebook.com/l.php?u=http%3A%2F%2Fwww.google.com%2F&h=TAQEEBq0U&s=1" rel="nofollow" target="_blank">www.google.com</a> on june 8. 
 
Although
 you havent IPv6 , its not problem because they are not going to 
completly cwitch to IPv6 , They going to use both IP versions for the 
users on 8 th of june. 
 
you can read  more about google announcement from <a href="http://lm.facebook.com/l.php?u=http%3A%2F%2Fipv4.google.com%2Fsupport%2Fwebsearch%2Fbin%2Fanswer.py%3Fanswer%3D1299266%26topic%3D8995%26hl%3Den&h=LAQEDhFFy&s=1" rel="nofollow" target="_blank">ipv4.google.com/support/websearch/bin/answer.py?answer=1299266&topic=8995&hl=en</a></div>
</div>
</div>

World IPv6 day (Test Flight)

Today is the World IPv6 day or "Test Flight" day and the goal of the Test Flight Day is to motivate organizations across the ...

Solving the IP Address Chicken-and-Egg Challenge

Tukiyooo 0 Challenge, computer, Facebook, hardware manufacturers, IP address, ISPs, mobile phone, OS makers, Solving, Telecom carriers, Web companies 10:25

<a href="https://scontent-b.xx.fbcdn.net/hphotos-xpa1/t1.0-0/165639_494742522199_1812395_n.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" class="img" data-store="{"imgsrc":"https:\/\/scontent-b.xx.fbcdn.net\/hphotos-xpa1\/t1.0-0\/165639_494742522199_1812395_n.jpg"}" height="150" src="https://scontent-b.xx.fbcdn.net/hphotos-xpa1/t1.0-0/165639_494742522199_1812395_n.jpg" width="180" /></a>We’re announcing today our participation in <a href="http://lm.facebook.com/l.php?u=http%3A%2F%2Fwww.isoc.org%2Fworldipv6day&h=DAQErAJSI&s=1" rel="nofollow" target="_blank">World IPv6 Day</a>,
 along with Google, Yahoo!, Akamai, Limelight Networks, and the Internet
 Society. June 8, 2011, will be the first global-scale "test flight" of 
IPv6, the next generation protocol for the Internet. And best of all, 
it’s open to everyone who’s interested in testing their IPv6 service. 
 
This
 is a big step forward for the Internet because the current protocol, 
IPv4 (also known as IP), will run out of addresses this year. Since 
every endpoint on the Internet — whether it’s a computer, mobile phone, 
or TV — relies on a unique IP address to communicate, we need more 
addresses so they can all stay connected. 
 
As a next 
generation protocol, IPv6 provides a vast number of addresses by today's
 standards — 4 billion times the number that are available under IPv4. 
Telecom carriers, ISPs, OS makers, hardware manufacturers, Web 
companies, and governments around the world are depending on IPv6 to 
continue growth of the Internet. World IPv6 Day — a 24 hour period 
during which Internet companies will test IPv6 — is an important step 
that enables the technology to move forward in a globally coordinated 
setting. 
 
Testing IPv6 is important because recent studies 
indicate about 0.05% of Internet users (1 in 2,000) can’t reliably 
connect to websites that enable both IPv4 and IPv6 addresses (known as 
"dual-stacked" websites). This has resulted in a classic chicken-and-egg
 puzzle right now: websites don’t want to enable IPv6 because a small 
number of their users may have trouble connecting. At the same time, 
doing nothing means that ever more users will have trouble connecting to
 these dual-stacked websites, and ISPs will turn to less effective 
technical alternatives like Large Scale NAT (see below). 
 
To
 break this conundrum, we need to take a small, concerted step for just 
24 hours, where Web companies, ISPs, hardware/software makers, and users
 work together and synchronize plans, communication, and support. 
 
Why IPv6 Is Important to Facebook 
The
 switch to IPv6 is especially important for us at Facebook as we pursue 
our mission of helping the world connect and share online. Since last 
summer, we’ve offered Facebook over IPv6 at <a href="http://www.v6.facebook.com/?refid=22" rel="nofollow" target="_blank">www.v6.facebook.com</a>
 (addressed 2620:0:1cfe:face:b00c::3 in true hexadecimal IPv6 hacker 
fashion; note that the v6 link works only from IPv6 endpoints). World 
IPv6 Day will allow us to test our infrastructure and code more widely 
with low risk to our service and users. 
 
The day also 
promotes awareness among hardware and software suppliers, and should 
encourage everyone to create robust IPv6 products and fix buggy ones. 
Between now and June 8th, there’s an opportunity for the entire industry
 to ensure hardware and software isn’t just IPv6-capable, but that it 
can reliably connect people to dual-stacked websites. 
 
This
 year's exhaustion of IPv4 addresses isn’t exactly a sky-is-falling 
situation, because there are always economic and technical solutions 
when there's enough energy put behind a big problem. An economic 
solution is for organizations to buy IPv4 addresses from others willing 
to sell them. But this isn’t a sustainable solution, and it’s perhaps 
not completely fair when you consider how the Internet has historically 
been fully open and accessible. On the technical side, there are many 
protocols and devices in different stages of maturity. But some v4-to-v6
 transitional protocols are so old they are nearly phased-out or 
obsolete. 
 
LSN: A Technical Alternative 
One
 newer solution being proposed is Large Scale NAT (Network Address 
Translation) or LSN, also called Carrier Grade NAT. NAT basically 
translates one address into another, typically a private address into a 
public address and vice-versa. Many users and sites do this today on a 
small scale. Your laptop may have the private address 192.168.1.10, 
which is translated by your home router into a public address provided 
by your ISP. The public address is unique and the address you depend on 
for global Internet connectivity. So what happens when your ISP runs out
 of addresses? Before address exhaustion, it would simply apply for and 
receive new addresses. But that is no longer the case. 
 
<img class="img" data-store="{"imgsrc":"https:\/\/scontent-b.xx.fbcdn.net\/hphotos-xpa1\/t1.0-0\/s280x280\/167495_494743352199_5361035_n.jpg"}" height="171" src="https://scontent-b.xx.fbcdn.net/hphotos-xpa1/t1.0-0/s280x280/167495_494743352199_5361035_n.jpg" width="280" /> 
 
Enter
 LSN. The plan here is to give your endpoint, like your home router, a 
private address instead of a public one and then translate your traffic 
at a new, heavy-duty LSN device that lives elsewhere on the Internet. 
Thus, your laptop's private address will be translated to another 
private address at your home router, which will then be translated again
 into a public address at this new LSN device. Thousands of users share a
 single IP address thanks to the massive translator. What’s unclear is 
whether this will give us the same performance, reliability, and 
security we have on the Internet today. And the people deploying LSN are
 not exactly thrilled about having to use it — it's more out of 
necessity because most websites aren’t yet dual-stacked to handle an 
end-to-end IPv6 connection. 
 
IPv6 vs. LSN 
Many
 people have spent years working IPv6, which is a longer-term and more 
reliable solution than LSN. Adopting IPv6 means that people with IPv6 
addresses can talk to IPv6-enabled, dual-stack sites without 
translators. The following chart describes some other aspects of LSN 
compared to end-to-end IPv6 connectivity. 
 
<img class="img" data-store="{"imgsrc":"https:\/\/scontent-b.xx.fbcdn.net\/hphotos-xfa1\/t1.0-0\/s280x280\/166116_494743382199_4204840_n.jpg"}" height="183" src="https://scontent-b.xx.fbcdn.net/hphotos-xfa1/t1.0-0/s280x280/166116_494743382199_4204840_n.jpg" width="280" /> 
 
We
 hope you'll follow along in the coming months and then join us for 
World IPv6 Day on June 8, 2011, when the Internet takes a big step 
forward! 
 
Acknowledgements 
Many people contributed to our IPv6 efforts and this event, notably <a href="http://www.facebook.com/wlawton?refid=22" rel="nofollow" target="_blank">Will Lawton</a>, <a href="http://www.facebook.com/ps?refid=22" rel="nofollow" target="_blank">Paul Saab</a>, <a href="http://www.facebook.com/jallen?refid=22" rel="nofollow" target="_blank">John Allen</a>, and <a href="http://www.facebook.com/jonnythaw?refid=22" rel="nofollow" target="_blank">Jonny Thaw</a> at Facebook, Lorenzo Colitti at Google, and Tore Anderson at Redpill Linpro.

Solving the IP Address Chicken-and-Egg Challenge

We’re announcing today our participation in World IPv6 Day , along with Google, Yahoo!, Akamai, Limelight Networks, and the Internet Socie...

C++ Internet Protocol and Socket Address Classes

Tukiyooo 0 C++, Internet, IP address, IPv4, IPv4/IPv6, IPv6, Protocol, Socket 19:18

<pre>C++ Internet Protocol and Socket Address Classes

Document Number: TBD
Date: TBD
Author: Aleksandar Fabijanic <alex AT pocoproject.org>
 Günter Obiltschnig <guenter.obiltschnig AT appinf.com>

Content

1. Revision History

2. Motivation and Scope

3. IP Address
 3.1. Usage Examples
 3.1.1. IPv4
 3.1.2. IPv6
 3.2. Header <ip_address> synopsis

5. Socket Address
 5.1. Usage Examples
 5.2. Header <socket_address> synopsis

6. Conclusion

7. Acknowledgments

1. Revision History

- Oct 10 2012: created

2. Motivation and Scope

Given the pervasiveness of networking and Internet, there is a
pressing need for standard networking support in C++ language.
This proposal addresses the concerns of IP and socket addresses;
it is aimed to be one of the fundamental building blocks and
steps toward the Standard C++ Network Library goal.

This proposal is based on IP and socket address implementations
in the Net library in C++ Portable Components (POCO) [6] framework.
POCO framework has been open sourced in 2005 by its principal
sponsor (Applied Informatics Software Engineering GmbH) and is
currently licensed under Boost Software License and used in
production by numerous commercial entities as well as other
open source projects [7].

The scope of the proposal is description of functionality,
interfaces and usage examples for a set of classes providing
functionality to store and manipulate Internet Protocol
(IPv4 and v6) as well as socket (IP address + port) addresses.

3. IP Address

The ip_address class represents an Internet Protocol host
address. The address can belong to either IPv4 or IPv6 
(if the target platform supports it) address family.

Relational operators (==, !=, <, <=, >, >=) are supported. 
Notably, an IPv4 address is never equal to an IPv6 
address, even if the IPv6 address is IPv4 compatible and 
the addresses are logically the same.

For underlying IP address bit manipulation, bitwise operators
(&, |, ^, ~) are supported.

3.1 Usage Examples

3.1.1. IPv4:

ip_address ia("127.0.0.1");
assert (ia.family() == ip_address::ipv4);
assert (ia.to_string() == "127.0.0.1");
assert (ip.is_loopback());

ip_address addr("10.0.0.51");
ip_address mask(24, ip_address::ipv4);
assert(mask.prefix_len() == 24);

ip_address net = addr & mask;
assert(net.to_string() == "10.0.0.0");

ip_address host("0.0.0.51");
assert((net | host) == addr);
assert((~mask).to_string() == "0.0.0.255");

3.1.2. IPv6

ip_address ia("1080:0:0:0:8:600:200a:425c");
assert (ia.family() == ip_address::ipv6);
assert (ia.to_string() == "1080::8:600:200a:425c");

ip_address ia(62, ip_address::ipv6);
assert(ia.to_string() == "ffff:ffff:ffff:fffc::");

3.2. Header <ip_address> synopsis

namespace std {
namespace net {

typedef int socklen_t;

class ip_address {
public:
typedef std::vector<IPAddress> list;

enum family
/// Possible address families for IP addresses.
{
 ipv4
#ifdef _STD_HAVE_IPv6
 ,ipv6
#endif
};
 
ip_address();
 /// Creates a wildcard (zero) IPv4 ip_address.

ip_address(const ip_address& addr);
 /// Creates an ip_address by copying another one.

explicit IPAddress(family family);
 /// Creates a wildcard (zero) ip_address for the given address family.

explicit ip_address(const std::string& addr);
 /// Creates an IPAddress from the string containing
 /// an IP address in presentation format (dotted decimal
 /// for IPv4, hex string for IPv6).
 /// Depending on the format of addr, IPv4 or an IPv6 address is 
 /// created. See to_string() for details on the supported formats.
 /// Throws std::runtime_exception if the address cannot be parsed.

ip_address(const std::string& addr, Family family);
 /// Creates an ip_address from the string containing
 /// an IP address in presentation format (dotted decimal
 /// for IPv4, hex string for IPv6).

ip_address(const void* addr, socklen_t length);
 /// Creates an IPAddress from a native internet address.
 /// A pointer to an in_addr or an in6_addr structure may be passed.

ip_address(const void* addr, socklen_t length, uint32_t scope);
 /// Creates an IPAddress from a native internet address.
 /// A pointer to a in_addr or a in6_addr structure may be 
 /// passed. Additionally, for an IPv6 address, a scope ID
 /// may be specified. The scope ID will be ignored if an IPv4
 /// address is specified.

ip_address(uint32_t prefix, family family);
 /// Creates an ip_address mask with the given length of prefix.

ip_address(const struct sockaddr& sockaddr);
 /// Creates an ip_address from sockaddr structure.

~ip_address();
 /// Destroys the IPAddress.

ip_address& operator = (const ip_address& addr);
 /// Assigns an IPAddress.
  
void swap(ip_address& address);
 /// Swaps the IPAddress with another one.
  
family family() const;
 /// Returns the address family (ipv4 or ipv6) of the address.

uint32_t scope() const;
 /// Returns the IPv6 scope identifier of the address. Returns 0 if
 /// the address is an IPv4 address, or the address is an
 /// IPv6 address but does not have a scope identifier.

std::string to_string() const;
 /// Returns a string containing a representation of the address
 /// in presentation format.
 /// For IPv4 addresses the result will be in dotted-decimal (d.d.d.d) notation.
 /// The preferred form is x:x:x:x:x:x:x:x, where the 'x's are the hexadecimal 
 /// values of the eight 16-bit pieces of the address. This is the full form.
 /// Example: 1080:0:0:0:8:600:200a:425c
 /// It is not necessary to write the leading zeros in an individual field. 
 /// However, there must be at least one numeral in every field, except as 
 /// described below.
 /// It is common for IPv6 addresses to contain long strings of zero bits. 
 /// In order to make writing addresses containing zero bits easier, a special
  /// syntax is  available to compress the zeros. The use of "::" indicates multiple
 /// groups of 16-bits of zeros. 
 /// The "::" can only appear once in an address. The "::" can also be used to 
 /// compress the leading and/or trailing zeros in an address. 
 /// Example: 1080::8:600:200a:425c
 /// For dealing with IPv4 compatible addresses in a mixed environment,
 /// a special syntax is available: x:x:x:x:x:x:d.d.d.d, where the 'x's are the 
 /// hexadecimal values of the six high-order 16-bit pieces of the address, 
 /// and the 'd's are the decimal values of the four low-order 8-bit pieces of the 
 /// standard IPv4 representation address. Example: ::ffff:192.168.1.120
 /// If an IPv6 address contains a non-zero scope identifier, it is added
 /// to the string, delimited by a percent character. On Windows platforms,
 /// the numeric value (which specifies an interface index) is directly
 /// appended. On Unix platforms, the name of the interface corresponding
 /// to the index (interpretation of the scope identifier) is added.

bool is_wildcard() const;
 /// Returns true iff the address is a wildcard (all zero) address.
  
bool is_broadcast() const;
 /// Returns true iff the address is a broadcast address.
 /// Only IPv4 addresses can be broadcast addresses. In a broadcast
 /// address, all bits are one. For an IPv6 address, returns always false.
 
bool is_loopback() const;
 /// Returns true iff the address is a loopback address.
 /// For IPv4, the loopback address is 127.0.0.1.
 /// For IPv6, the loopback address is ::1.
 
bool is_multicast() const;
 /// Returns true iff the address is a multicast address.
 /// IPv4 multicast addresses are in the
 /// 224.0.0.0 to 239.255.255.255 range
 /// (the first four bits have the value 1110).
 /// IPv6 multicast addresses are in the
 /// FFxx:x:x:x:x:x:x:x range.
  
bool is_unicast() const;
 /// Returns true iff the address is a unicast address.
 /// An address is unicast if it is neither a wildcard,
 /// broadcast or multicast address.
  
bool is_link_local() const;
 /// Returns true iff the address is a link local unicast address.
 /// IPv4 link local addresses are in the 169.254.0.0/16 range,
 /// according to RFC 3927.
 /// IPv6 link local addresses have 1111 1110 10 as the first
 /// 10 bits, followed by 54 zeros.
  
bool is_site_local() const;
 /// Returns true iff the address is a site local unicast address.
 /// IPv4 site local addresses are in on of the 10.0.0.0/24,
 /// 192.168.0.0/16 or 172.16.0.0 to 172.31.255.255 ranges.
 /// Originally, IPv6 site-local addresses had FEC0/10 (1111 1110 11) 
 /// prefix (RFC 4291), followed by 38 zeros. Interfaces using  
 /// this mask are supported, but obsolete; RFC 4193 [3] prescribes
 /// fc00::/7 (1111 110) as local unicast prefix.
  
bool is_ipv4_compatible() const;
 /// Returns true iff the address is IPv4 compatible.
 /// For IPv4 addresses, this is always true.
 /// For IPv6, the address must be in the ::x:x range (the
 /// first 96 bits are zero).

bool is_ipv4_mapped() const;
 /// Returns true iff the address is an IPv4 mapped IPv6 address.
 /// For IPv4 addresses, this is always true.
 /// For IPv6, the address must be in the ::FFFF:x:x range.
 
bool is_well_known_mcast() const;
 /// Returns true iff the address is a well-known multicast address.
 /// For IPv4, well-known multicast addresses are in the 224.0.0.0/8 range.
 /// For IPv6, well-known multicast addresses are in the 
 /// FF0x:x:x:x:x:x:x:x range.
 
bool is_node_local_mcast() const;
 /// Returns true iff the address is a node-local multicast address.
 /// IPv4 does not support node-local addresses, thus the result is
 /// always false for an IPv4 address.
 /// For IPv6, node-local multicast addresses are in the
 /// FFx1:x:x:x:x:x:x:x range.
 
bool is_link_local_mcast() const;
 /// Returns true iff the address is a link-local multicast address.
 /// For IPv4, link-local multicast addresses are in the
 /// 224.0.0.0/24 range. Note that this overlaps with the range for well-known
 /// multicast addresses.
 /// For IPv6, link-local multicast addresses are in the
 /// FFx2:x:x:x:x:x:x:x range.

bool is_site_local_mcast() const;
 /// Returns true iff the address is a site-local multicast address.
 /// For IPv4, site local multicast addresses are in the 239.255.0.0/16 range.
 /// For IPv6, site-local multicast addresses are in the
 /// FFx5:x:x:x:x:x:x:x range.

bool is_org_local_mcast() const;
 /// Returns true iff the address is a organization-local multicast address.
 /// For IPv4, organization-local multicast addresses are in the
 /// 239.192.0.0/16 range.
 /// For IPv6, organization-local multicast addresses are in the
 /// FFx8:x:x:x:x:x:x:x range.

bool is_global_mcast() const;
 /// Returns true iff the address is a global multicast address.
 /// For IPv4, global multicast addresses are in the 
 /// 224.0.1.0 to 238.255.255.255 range.
 /// For IPv6, global multicast addresses are in the
 /// FFxF:x:x:x:x:x:x:x range.
 
bool operator == (const ip_address& addr) const;
 /// Returns true if IP addresses are equal.

bool operator != (const ip_address& addr) const;
 /// Returns true if IP addresses are not equal.

bool operator < (const ip_address& addr) const;
 /// Returns true if this IP address is lesser than addr.

bool operator <= (const ip_address& addr) const;
 /// Returns true if this IP address is lesser than or equal to addr.

bool operator >  (const ip_address& addr) const
 /// Returns true if this IP address is greater than addr.

bool operator >= (const ip_address& addr) const;
 /// Returns true if this IP address is greater than or equal to addr.

ip_address operator & (const ip_address& addr) const;
 /// Performs a bitwise ANd operation and returns result.

ip_address operator | (const ip_address& addr) const;
 /// Performs a bitwise OR operation and returns result.

ip_address operator ^ (const ip_address& addr) const;
 /// Performs a bitwise XOR operation and returns result.

ip_address operator ~ () const;
 /// Performs a bitwise NOT operation on this IP address and returns result.
  
socklen_t length() const;
 /// Returns the length in bytes of the internal socket address structure. 
  
const void* addr() const;
 /// Returns the internal address structure.
  
uint32_t af() const;
 /// Returns the address family (AF_INET or AF_INET6) of the address.

unit32_t prefix_len() const;
 /// Returns the prefix length.
  
void mask(const ip_address& mask);
 /// Masks the IP address using the given netmask, which is usually
 /// a IPv4 subnet mask. Only supported for IPv4 addresses.
 /// The new address is (address & mask).
  
void mask(const ip_address& mask, const ip_address& set);
 /// Masks the IP address using the given netmask, which is usually
 /// a IPv4 subnet mask. Only supported for IPv4 addresses.
 /// The new address is (address & mask) | (set & ~mask).
  
static ip_address assign(const std::string& addr);
 /// Creates an IPAddress from the string containing
 /// an IP address in presentation format (dotted decimal
 /// for IPv4, hex string for IPv6).
 /// Depending on the format of addr, either an IPv4 or
 /// an IPv6 address is created.
 /// See to_string() for details on the supported formats.
 /// Throws std::runtime_exception if the address cannot be parsed.

static bool try_assign(const std::string& addr, IPAddress& result);
 /// Tries to interpret the given address string as an
 /// IP address in presentation format (dotted decimal
 /// for IPv4, hex string for IPv6).
 /// Returns true and stores the IPAddress in result if the
 /// string contains a valid address.
 /// Returns false and leaves result unchanged otherwise.

static IPAddress wildcard(Family family = ipv4);
 /// Returns a wildcard IPv4 or IPv6 address.
  
static IPAddress broadcast();
 /// Returns a broadcast IPv4 address (255.255.255.255).
};
}} // namespace std::net

4. Socket Address

This class represents an internet (IP) endpoint/socket address. The address
can belong either to the IPv4 or the IPv6 address family and consists of a
host IP  address and a port number.

4.1 Usage Examples

socket_address wild;
assert (wild.host().is_wildcard());
assert (wild.port() == 0);

socket_address sa1("192.168.1.100", 100);
assert (sa1.host().to_string() == "192.168.1.100");
assert (sa1.port() == 100);

socket_address sa2("192.168.1.100", "100");
assert (sa2.host().to_string() == "192.168.1.100");
assert (sa2.port() == 100);

socket_address sa3("192.168.1.100", "ftp");
assert (sa3.host().to_string() == "192.168.1.100");
assert (sa3.port() == 21);

socket_address sa4("www.appinf.com", 80);
assert (sa4.host().toString() == "50.57.108.29");
assert (sa4.port() == 80);

4.2 Header <socket_address> synopsis

namespace std {
namespace net {
class socket_address
 /// This class represents an (IP) socket address.
 /// The address can belong either to the IPv4 or the IPv6 address
 /// family and consists of a host address and a port number.
{
public:
socket_address();
 /// Creates a wildcard (all zero) IPv4 socket_address.

socket_address(const ip_address& host, uint_16t port);
 /// Creates a socket_address from an IP address and a port number.

socket_address(const std::string& host, uint_16t port);
 /// Creates a socket_address from an IP address and a port number.
 /// The IP address must either be a domain name, or it must
 /// be in dotted decimal (IPv4) or hex string (IPv6) format.

socket_address(const std::string& host, const std::string& port);
 /// Creates a socket_address from an IP address and a
 /// service name or port number.
 /// The IP address must either be a domain name, or it must
 /// be in dotted decimal (IPv4) or hex string (IPv6) format.
 /// The given port must either be a decimal port number, or
 /// a service name (as typically returned in struct servent
 /// by the getservbyname() call.

explicit socket_address(const std::string& host_and_port);
 /// Creates a socket_address from an IP address or host name and a
 /// port number/service name. Host name/address and port number
 /// must be separated by a colon. In case of an IPv6 address, the
 /// address part must be enclosed in brackets.
 /// 
 /// Examples:
 ///     192.168.1.10:80
 ///     [::ffff:192.168.1.120]:2040
 ///     www.appinf.com:8080

socket_address(const socket_address& addr);
 /// Creates a socket_address by copying another one.

socket_address(const struct sockaddr* addr, socklen_t length);
 /// Creates a socket_address from a native socket address.

~socket_address();
 /// Destroys the socket_address.

socket_address& operator = (const socket_address& addr);
 /// Assigns another socket_address.

void swap(socket_address& addr);
 /// Swaps the socket_address with another one.

ip_address host() const;
 /// Returns the host IP address.

uint_16t port() const;
 /// Returns the port number.

socklen_t length() const;
 /// Returns the length of the internal native socket address.

const struct sockaddr* addr() const;
 /// Returns a pointer to the internal native socket address.

uint32_t af() const;
 /// Returns the address family (AF_INET or AF_INET6) of the address.

std::string to_string() const;
 /// Returns a string representation of the address.

ip_address::family family() const;
 /// Returns the address family of the host's address.

bool operator < (const socket_address& addr) const;
 /// Less than operator.

bool operator == (const socket_address& addr) const;
 /// Equal operator.

bool operator != (const socket_address& addr) const;
 /// Not equal operator.

};
}} // namespace std::net

6. Conclusion

Class interfaces for IP and socket address as well as rationale for their 
introduction in C++ Standard and usage examples were described in this 
proposal. This proposal is one of the starting points and building blocks 
for C++ Standard Networking Library. Implementation of the described 
functionality is currently available in POCO framework [6]; the 
implementation differs in naming scheme from this proposal. Given a 
positive feedback on the proposal, implementation  will be available 
in the near future as a standalone implementation in standard-compliant 
naming convention, with accompanying tests and code examples.

7. Acknowledgements

POCO original author (Günter Obiltschnig)
POCO project contributors and users

References

[1] RFC 791
[2] RFC 2460
[3] RFC 4193
[4] RFC 3513
[5] RFC 3879
[6] C++ Portable Components: http://pocoproject.org
[7] List of known POCO users: http://pocoproject.org/forum/viewtopic.php?f=11&t=3826

C++ Internet Protocol and Socket Address Classes

C++ Internet Protocol and Socket Address Classes Document Number: TBD Date: TBD Author: Aleksandar Fabijanic <alex AT pocoproject.or...

What is tunneltrace?

Tukiyooo 0 Internet Protocol Version4 and IPv6, IPv4/IPv6, protocolos DNS (sistema de nombre de dominio) en linux y en windows protocolos DNS, tunnels, tunneltrace 19:15

TUNNELTRACE-RS v1.0                                =================== What is tunneltrace? -------------------- Tunneltrace is a tool used for detecting IPv6 in IPv4 tunnels. More precisely, Tunneltrace can run in 2 modes: Mode 1:   Given two IPv4 Addresses it checks if there is a tunnel between them. If there is evidence of the presence of a tunnel, tunneltrace outputs a confidence value, which provides a measure of the probability that the tunnel exists, and tries to determine the IPv6 addresses of the endpoints. Mode 2:   Tunneltrace can also determine, given an IPv6 Address, the full Path from the node where tunneltrace is launched to the given address. From the Path determined tunneltrace identifies the Path MTU and all the tunnels inside the path, and for each tunnel found it tries to find the IPv4 addresses of the endpoints and outputs a confidence value. Techniques used --------------- Tunneltrace uses three techniques to detect tunnels: 1) IPv4 spoofing 2) DNS lookups 3) Queries to the 6bone registry Each of the above techniques has a degree of confidence. The confidence value output by tunneltrace is the sum of the confidence values of each technique that succeeded. Brief description of the techniques ----------------------------------- 1. IPv4 spoofing These are the main techniques used by tunneltrace. By encapsulating an IPv6 packet in an IPv4 packet having the source address of one of the tunnel endpoints, tunneltrace can trick the other endpoint into treating the packet as if it had come from the tunnel. Tunneltrace uses four spoofing techniques:     a) Injected Ping        Encapsulated IPv6 echo request to a pingable IPv6 interface. Used to        determine if there is a tunnel.     b) Dying Packet        Similar to the above, but injects packets with a Hop Count field of 1.        Used to determine the IPv6 addresses of the tunnel endpoints.     c) Ping Pong Packet        Similar to the above, but attempts to determine the address of one        endpoint if the address of the other endpoint is known.     d) Fragmented Injection        As Injected Ping but puts the IPv6 echo request message into three IPv4 fragments 2. DNS Lookups Looks for AAAA records with the endpoint hostnames, if we are running tunneltrace in mode 1. Looks for A records with the endpoint hostnames (retreived by a reverse-lookup),if we are running tunneltrace in mode 2. 3. Queries to the 6bone registry Looks for a corresponding entry in the 6bone registries. Tunneltrace requires a copy of the 6bone registry file to be stored locally in /etc/6bone.db or in the directory where tunneltrace is installed. You may download this file from ftp://whois.6bone.net/6bone/6bone.db.gz A detailed description of the techniques used can be found in the papers available at the URL: http://www.dia.uniroma3.it/~compunet/tunneldiscovery/tunneling-noms.pdf 4) Path MTU Discovery Tunneltrace tries to send ICMPv6 packets with the MTU of the node where it is running and using Hop Limit manipulation for determining the Path (Modifing the HL field). If it receives a ICMPv6 message of Packet-Too-Big, from that point on it will send packets with the MTU specified in the Packet-Too-Big messagge, until it doesn't receive antoher packet too big messagge, and so on. 5) Fragmented IPv6 in IPv4 Path MTU Discovery If Tunneltrace finds on its Path a Tunnel, it tryes to use the outern endpoint of it as Vantage Point for Path MTU Discovery , by creating an IPv6 Packet of the MTU of the source node in IPv4 Fragments of 68 bytes. So to be able to do Path MTU Discovery (and PATH TRACING with Hop Limit manipulation) from the Vantage Point. This repeatably for every new Vantage Point that Tunneltrace finds further on in the Path. How confidence values are calculated ------------------------------------ The Confidence value output by tunneltrace is calculated using the following criteria: Spoofing Techniques ->   Injected Ping success on 1 Endpoint only  : 5 Confidence Points    Injected Ping success of both Endpoints   : 7 Confidence Points   Dying Packet success on each Endpoint     : 1 Confidence point   Ping Pong Packet success on one Endpoint (if Dying Packet didn't work)                                             : 1 Confidence point If Spoofing Techniques succeeded, then ->   6bone registries lookup success           : 1 Confidence points If no Spoofing Technique succeeded, then ->   DNS lookups success                             : 1 Confidence points   6bone registries lookup success           : 4 Confidence points Compiling tunneltrace --------------------- To compile tunneltrace, run the build.sh script in the distribution. Compilation requires the C++ development libraries to be installed. Tunneltrace is known to compile on Linux and FreeBSD, but should also compile and run on other platforms such as Solaris. Tunneltrace runs on both littleEndian and bigEndian machines. Using tunneltrace ----------------- 1. Prerequisites Due to the use of spoofing techniques that require raw sockets, you must be root to run tunneltrace. Some of the techniques used by tunneltrace require a reference IPv6 address. This address must be globally routed or, at a minimum, reachable from the tunnel endpoints. The reference IPv6 address may be specified on the command line using the -h parameter or in the file /etc/tunneltrace.ip. As stated previously, tunneltrace also requires a 6bone registry dump in the file /etc/6bone.db or in the directory where tunneltrace is installed. You may run multiple istances of tunneltrace in parallel, since each one recognizes its own packets. 2. Usage Tunneltrace's syntax is the following : Mode 1: tunneltrace [ -h reference IPv6 ] [ -v ] <source IPv4> <dest IPv4>     Where <source IPv4> AND <dest IPv4>: IPv4 addresses or hostnames Mode 2: tunneltrace [ -h reference IPv6 ] <dest IPv6>     Where <dest IPv6>: IPv6 address or hostname Tunneltrace exits with an error if <source IPv4> or <dest IPv4> are not valid IPv4 addresses or resolvable hostnames or if the reference IPv6 is not a valid IPv6 address or <dest IPv6> is not a valid IPv6 address or resolvable hostname or is not reachable. The -v option is used for generating Parametric OUTPUT (on one line) in order to see the techniques that worked in detail Output format ------------- The output format of tunneltrace is the following: Mode 1: # tunneltrace <source IPv4> <dest IPv4> source_host(source_IPv4) -> dest_host(dest_IPv4) source_IPv6 -> dest_IPv6 ; CONFIDENCE X/10 Mode 2: # tunneltrace <dest IPv6> 1         host_1(IPv6_1)  MTU 2         host_2(IPv6_2)  MTU source_host1(source_IPv4_1) -> dest_host2(dest_IPv4_2) source_IPv6_1 -> dest_IPv6_2 ; CONFIDENCE X/10 3         host_3(IPv6_3)  MTU . . 8         host_dest(IPv6_dest)  MTU If none of the techniques worked, tunneltrace will output a confidence value of zero and one or both of the IPv6 addresses will be shown as "unknown". Credits ------- Tunneltrace was developed as part of Davide De Micco's master thesis in collaboration with the Computer Networks research group at Roma Tre University. Contributors are: Davide De Micco Lorenzo Colitti Giuseppe Di Battista Emanuele Conti Maurizio Patrignani

What is tunneltrace?

TUNNELTRACE-RS v1.0 =================== What is tunneltrace? -----------------...

How to add IPv6 over IPv4 support to your network behind a NAT router

Tukiyooo 0 IPv4, IPv4/IPv6, IPv6, router, Setup IPv6 19:12

<pre>Firewall+IPv6 Tunnel mini-HOWTO
Hernán Freschi <hjf(at)hjf.com.ar>
version 0.1, 2002-11-27

How to add IPv6 over IPv4 support to your network behind a NAT router.
----------------------------------------------------------------------

Table of Contents

1. Introduction

1.1 Copyright
     1.2 Disclaimer
     1.3 Credits
     1.4 Changelog
  
  2. What's IPv6? What can it do for me?

3. How do I connect to the 6bone?

4. What should I allow through the firewall?

5. Configuring the IPv6 machines/routers

5.1. Linux

5.2. Windows

5.2.1 IPv6 stand-alone machine
    5.2.2 IPv6 network
      5.2.2.1 The Router
      5.2.2.2 The clients

6. Examples
     6.1 Windows PC using IPv6, behind iptables NAT/MASQ, with a tunnel from HE.
     6.2 Multiple Windows PCs using IPv6, behind iptables NAT/MASQ, with a tunnel from BTExact.

----------------------------------------------------------------------

1. Introduction

1.1 Copyright

This document is Copyright 2002 by Hernán Freschi. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.1 or any later version published by the Free Software Foundation with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license can be found at www.gnu.org.

1.2 Disclaimer 
Use the information in this document at your own risk. I disavow any potential liability for the contents of this document. Use of the concepts, examples, and/or other content of this document is entirely at your own risk.

All copyrights are owned by their owners, unless specifically noted otherwise. Use of a term in this document should not be regarded as affecting the validity of any trademark or service mark.

Naming of particular products or brands should not be seen as endorsements.

You are strongly recommended to take a backup of your system before major installation and backups at regular intervals.

1.3 Credits

Hernán Freschi <hjf(at)hjf.com.ar>

Microsoft, Windows, 2000, XP, SP1, .NET Server 2003 are all trademarks of Microsoft Corp.

Any comments or suggestions can be mailed to my mail address on: hjf(at)hjf.com.ar

This document is still in beta phase, so errors and omissions may be present.

1.4 Changelog

0.1 Initial Release.

Getting Started

2. What's IPv6? What can it do for me?

Sorry, that is beyond the scope of this document. This aims to make a iptables firewall to allow incoming traffic from an IPv6 tunnel.

3. How do I connect to the 6bone?

Through a tunnel broker!. Get your account (for free) at:

www.tunnelbroker.net (USA)
tb.ipv6.btexact.com (UK)
tb.ngnet.it (Italy?)

You could also use www.freenet6.net, but they use proprietary software, which doesn't run inside a network. But it's easier to implement and even assigns /48 subnets.

4. What should I allow through the firewall?

Everything that comes from the tunnel address, except ICMP (what for? let the linux box answer, so the packets dont get in the network). The rules I use are this:

iptables -A FORWARD -s <tunnel address> -p ! ICMP -i eth0 -j ACCEPT
iptables -t nat -A PREROUTING -i eth0 -j DNAT --to <internal router address>

And that's it. The outgoing packets don't need special treatment.

Note: This, of course, assumes that your Linux firewall doesn't handle the IPv6 packets. It's designed to run on tiny distros like FloppyFW (www.zelow.no/floppyfw) or LRP (www.lrp.org). With this, the firewall doesn't need support for IPv6. These packets are handled in an internal, more powerful (ie: with a hard disk) computer.

5. Configuring the IPv6 machines/routers

5.1 Linux

I don't have a linux box to experiment, you can either
a) Donate a hard disk, so I can install linux again or
b) Write this section for me :)

5.2 Windows (2000/XP/XP-SP1/.NET Server 2003 ONLY! Win9x is UNSUPPORTED).

First of all, you have to install IPv6 support:

C:\> ipv6 install
Installing...

Success.

5.2.1 IPv6 stand-alone machine:

Use your brokers script! If they didn't provide one, use these:

ipv6.exe rtu ::/0 2/::<tunnel address>
ipv6.exe adu 2/<your ipv6 address>

The 2/ is the Interface Index. It's usually 2, but it may vary. If in doubt, type

ipv6 if

and look for a line like this:

Interface 2: Automatic tunnel pseudo-interface

The number, obviously, is the one you are looking for.

5.2.2 IPv6 network

(Note: this applies only to the external network. If you need help setting up the IPv6 lan, read www.microsoft.com/ipv6)

5.2.2.1 The Router

Use your brokers script! If they didn't provide one, use these:

ipv6.exe rtu ::/0 2/::<tunnel address>
ipv6.exe adu 2/<your ipv6 address>
ipv6.exe rtu <your ipv6 subnet>/<your ipv6 netmask> 4 pub life 86400
ipv6.exe ifc 2 forw
ipv6.exe ifc 3 forw
ipv6.exe ifc 4 forw adv

2, 3, 4 are the interface indices. They may vary. To find out, type

ipv6 if

5.2.2.2 The clients

You don't need to do nothing, they are auto configured.

6. Examples:

6.1 Windows PC using IPv6, behind iptables NAT/MASQ, with a tunnel from HE.

Equipment required:
1 Box capable of running iptables (kernel = 2.4.x)
1 Box running Microsoft® Windows 2000, Windows XP (SP1), Windows .NET Server 2003.

Tunnel:
1 /127 Allocation from Hurricane Electric

+---+ +---+ \/\/\/\/\/ +------+ /\/\/\/\/\
 |WIN|------------|FFW|-----------/INTERNET\---------|TUNNEL|----------\ 6bone /
 +---+ +---+ \/\/\/\/\/ +------+ /\/\/\/\/\
10.42.42.100<->10.42.42.1 <-> 209.13.122.2 <-> ipv6.he.net <-> 2001:470:1F00:FFFF::xxxx

Configuration:
On the Linux box type:

iptables -A FORWARD -s 64.71.128.82 -p ! ICMP -i eth0 -j ACCEPT
iptables -t nat -A PREROUTING -s 64.71.128.82 -i eth0 -j DNAT --to 10.42.42.100

On the MS box type:

ipv6 rtu ::/0 2/::64.71.128.82 pub
ipv6 adu 2/2001:470:1F00:FFFF::xxxx

Congratulations. You are set.

Now try pinging to 6bone.net, for example.

6.2 Multiple Windows PCs using IPv6, behind iptables NAT/MASQ, with a tunnel from BTExact.

Equipment required:
1 Box capable of running iptables (kernel = 2.4.x)
n Boxes running Microsoft® Windows 2000, Windows XP (SP1), Windows .NET Server 2003.

Tunnel:
1 /64 Allocation from Hurricane Electric

+---+ +---+ +---+
  |WIN| |WIN| |WIN|
  +---+ +---+ +---+
    +-----+-----+
  +---+            +---+           \/\/\/\/\/         +------+          /\/\/\/\/\
--|WRT|------------|FFW|-----------/INTERNET\---------|TUNNEL|----------\  6bone /
  +---+            +---+           \/\/\/\/\/         +------+          /\/\/\/\/\

10.42.42.100<->10.42.42.1 <-> 209.13.122.2 <-> 193.113.58.80 <-> 2001:618:400::xxxx:xxxx

Configuration:
On the Linux box type:

iptables -A FORWARD -s 64.71.128.82 -p ! ICMP -i eth0 -j ACCEPT
iptables -t nat -A PREROUTING -s 64.71.128.82 -i eth0 -j DNAT --to 10.42.42.100

On the MS router type:

ipv6.exe rtu ::/0 2/::193.113.58.80
ipv6.exe adu 2/2001:618:400::xxxx:xxxx
ipv6.exe rtu 2001:618:400:xxxx::/64 4 pub life 86400
ipv6.exe ifc 2 forw
ipv6.exe ifc 3 forw
ipv6.exe ifc 4 forw adv

On the other machines type:

Nothing, they are auto configured. If they dont work, try:

ipv6 reset

If that doesn't work, check for a default route (::/0).

ipv6 rt

If there isn't one, try adding one:

ipv6 rtu ::/0 n/(your routers ipv6 address)

(where n is the interface index of the ethernet board connected to the network, usually 4).

If it works, but the next time you reboot, it does not auto configure, then maybe you are not publishing the default route in the router.

Congratulations. You are set.

Now try pinging to 6bone.net, for example. 
</pre>

How to add IPv6 over IPv4 support to your network behind a NAT router

Firewall+IPv6 Tunnel mini-HOWTO Hernán Freschi <hjf(at)hjf.com.ar> version 0.1, 2002-11-27 How to add IPv6 over IPv4 support to your ...