EXAMINING AND CONTROLLING IPv6 EXTENSION HEADERS

摘要

Methods and systems for selectively blocking, allowing and/or reformatting IPv6 headers by traversing devices are provided. According to one embodiment, a traversing device receives an Internet Protocol (IP) version 6 (IPv6) packet or packet fragment. One or more security checks are applied to extension headers of the IPv6 packet or packet fragment. If a security check of the one or more security checks is determined to be violated, then one or more appropriate countermeasures are identified and performed.

主权项

1. A method comprising
receiving, by a traversing device, an Internet Protocol (IP) version 6 (IPv6) packet or packet fragment; applying, by the traversing device, one or more security checks to extension headers of the IPv6 packet or packet fragment; and if a security check of the one or more security checks is determined to be violated, then identifying and performing, by the traversing device, one or more appropriate countermeasures.