基于IPv6规模部署下的网络安全风险防范措施研究

Research on Network Security Risk Prevention Measures Based on IPv6 Scale Deployment

近几年,国内IPv6用户数量不断增加,这表示产业发展已经顺利过渡到流量提升的阶段,考虑到IPv6、IPv4的网络性能指标大致相同,但前者有部分指标优于后者,业内人士纷纷加大了对IPv6进行研究的力度,希望能够使其得到快速推广。文章以IPv6规模部署为背景,先从IPv6、互联网层面出发,分析了潜在风险及成因,例如,协议存在漏洞、过渡方案有待升级等,随后,分别针对不同风险的成因制定了相应的防范措施,包括完善协议、升级过渡方案还有增强防护能力等,希望为IPv6规模部署提供参考。

In recent years,the number of IPv6 users in China has been increasing,which means that the industrial development has successfully transited to the stage of traffic enhancement.Considering that the network performance indicators of IPv6 and IPv4 are roughly the same,but some indicators of the former are better than the latter,industry insiders have increased their efforts to research IPv6,hoping to promote it rapidly.Taking the scale deployment of IPv6 as the background,the article first analyzes the potential risks and causes from the IPv6 and Internet levels,such as protocol vulnerabilities,transition plans to be upgraded,etc.Then,corresponding preventive measures are formulated for the causes of different risks,including improving the protocol,upgrading the transition plans,and enhancing the protection capability.I hope it can help people to deploy IPv6 on a large scale.