基于IPv6流标签的IPsec无开销封装模式

Non-overhead Encapsulation Mode of IPsec based on IPv6 Flow Label

首先介绍了IPv6和IPsec基本概念,然后对标准IPsec协议中定义的两种传统的封装模式(传输模式、隧道模式)的功能和封装格式进行了介绍,分析了两种模式带来的传输开销及其它的问题,针对两种传统模式的缺陷,提出了一种具备机密性服务的封装模式,即基于IPv6流标签[1]的IPsec无开销封装模式,对IPv6流标签的特点、无开销封装实现方式进行了详细描述,最后,对无开销模式和传统封装模式的优缺点进行了比较,并对无开销封装模式在实际应用中的局限性进行了阐述。

Firstly,the basic concepts of IPv6 and IPsec are introduced.Then,the functions and encapsulation formats of two traditional encapsulation modes(transmission mode,tunnel mode)defined in the standard IPsec protocol are expounded,and the transmission overhead and other problems caused by the two modes analyzed.In view of the shortcomings of the two traditional modes,an encapsulation mode with confidentiality service is proposed,that is,an IPsec no-overhead encapsulation mode based on IPv6 flow labels[1].The characteristics of IPv6 flow labels and the implementation of no-overhead encapsulation are described in detail.Finally,the advantages and disadvantages of the no-overhead encapsulation mode and the traditional encapsulation mode are compared,and the limitations of the no-overhead encapsulation mode in practical applications are discussed.