IPv6详解.第2卷.高级协议实现(英文影印版)(IPv6的权威参考书，好评如潮)

.1.6.3　link state advertisement and lsa types　35
1.6.4　lsa formats　37
1.6.5　ospf tree construction and route computation　46
1.7　code introduction　49
1.8　ipv6 routing table in the bsd kernel　50
1.8.1　scope zone representation in the routingtable　53
1.9　routing api　55
1.9.1　routing sockets　55
1.9.2　dumping routing table via sysctl()　62
1.10　overview of route6d daemon　65
1.11　common data structures, routines and global variables　65
1.11.1　structures for ripng messages　65
1.11.2　route6d’s routing table　67
1.11.3　structures for local interfaces　68
1.11.4　route6d route filter entry　70
1.11.5　subroutines and global variables　72
1.12　interface configuration　74
1.12.1　ifconfig() function　74
1.12.2　ifconfig1() function　77
1.12　ripng protocol operation　81
1.13.1　sendrequest() function　82
1.13.2　riprecv() function　83
1.13.3　riprequest() function　96
1.13.4　ripsend() function　97
1.13.5　ripalarm() function　104
1.14　routing operation using route6d　105
1.14.1　a leaf network　105
1.14.2　a simple loop network　108
1.14.3　a hierarchical network　111
2　ipv6 multicasting　113
2.1　introduction　113
2.2　ipv6 multicast address to layer-2 multicast addressmapping　114
2.2　multicast listener discovery protocol　114
2.3.1　mld protocol message format　115
2.3.2　router alert option　116
2.3.3　source address selection　116
2.3.4　destination address selection　116
2.3.5　mld querier　116
2.3.6　operational variables　117
2.3.7　mld join process　118
2.3.8　mld leave process　119
2.4　multicast routing fundamentals　120
2.4.1　reverse path forwarding　120
2.4.2　multicast routing models　121
2.4.3　protocol independent multicast　125
2.4.4　ipv6 specific issues about pim　128
2.4.5　ipv6 multicast future—mldv2 and ssm　130
2.5　code introduction　131
2.6　mld implementation　133
2.6.1　types and structures　133
2.6.2　mld6_init() function　136
2.6.3　joining a group: mld6_start_listening()function　137
2.6.4　leaving a group: mld6_stop_listening()function　139
2.6.5　input processing: mld6_input() function　140
2.6.6　mld6_fasttimeo() function　144
2.6.7　mld6_sendpkt() function　146
2.6.8　mld_allocbuf() function　149
2.7　ipv6 multicast interface: mif6{} structure　150
2.8　ipv6 multicast routing api　152
2.8.1　ip6_mrouter_set() function　152
2.8.2　ip6_mrouter_init() function　155
2.8.3　ip6_mrouter_get() function　156
2.8.4　set_pim6() function　157
2.8.5　add_m6if() function　157
2.8.6　del_m6if() function　160
2.8.7　ip6_mrouter_done() function　161
2.8.8　mrt6_ioctl() function　164
2.8.9　get_mif6_cnt() function　164
2.9　ipv6 multicast forwarding cache　165
2.9.1　add_m6fc() function　166
2.9.2　del_m6fc() function　171
2.9.3　expire_upcalls() function　172
2.9.4　get_sg_cnt() function　173
2.10 ipv6 multicast forwarding　174
2.10.1　ip6_mforward() function　175
2.10.2　ip6_mdq() function　183
2.10.3　phyint_send() function　189
2.10.4　register_send() function　192
2.10.5　socket_send() function　194
2.10.6　pim6_input() function　195
2.11　ipv6 multicast operation　202
2.11.1　ifmcstat command　202
2.11.2　enable ipv6 multicast routing　203
2.11.3　pim6dd and pim6sd routing daemons　203
2.11.4　pim6stat output　203
2.11.5　netstat command　206
3　dns for ipv6　207
3.1　introduction　207
3.2　basics of dns definitions and protocols　208
3.2.1　dns, domains, and zones　208
3.2.2　resource records and zone files　210
3.2.3　dns transaction and packet format　212
3.2.4　name resolution and caching　214
3.2　ipv6-related topics about dns　217
3.3.1　aaaa resource record　217
3.3.2　dns reverse tree for ipv6　217
3.3.3　ipv6 transport for dns　219
3.3.4　packet size issue and edns0　219
3.3.5　misbehaving dns servers against aaaa　222
3.3.6　obsolete standards　225
3.4　implementation of ipv6 dns resolver　226
3.4.1　_dns_getaddrinfo() function　229
3.4.2　getanswer() function　235
3.4.3　res_queryn() function　243
3.4.4　resolver state structure　245
3.4.5　res_init() function　248
3.4.6　res_send() function　250
3.4.7　ipv6 reverse lookup: _dns_ghbyaddr()function　260
3.5　ipv6 dns operation with bind　264
3.5.1　overview of bind9　 265
3.5.2　getting bind9　 266
3.5.3　building and installing bind9　 266
3.5.4　configuring bind9　for ipv6 operation　267
3.5.5　implementation-specific notes　274
3.5.6　complete configuration example　282
3.5.7　dig and host utilities　286
4　dhcpv6　289
4.1　introduction　289
4.2　overview of the dhcpv6 protocol　290
4.2.1　cases for dhcpv6　290
4.2.2　definitions about dhcpv6　293
4.2.3　dhcpv6 message exchanges　297
4.2.4　summary of dhcpv6 options　310
4.2.5　interaction with neighbor discovery　319
4.2.6　comparison to dhcpv4　319
4.2　code introduction　320
4.3.1　common data structures and routines　320
4.4　client implementation　326
4.4.1　client-specific data structures　328
4.4.2　client6_mainloop() function　332
4.4.3　client6_timo() function　333
4.4.4　client6_send() function　338
4.4.5　client6_recv() function　344
4.4.6　client6_recvadvert() function　346
4.4.7　client6_recvreply() function　352
4.4.8　processing identity association　357
4.4.9　update_ia() function　359
4.4.10　update_address() function　365
4.4.11　reestablish_ia() function　369
4.4.12　ia_timo() function　374
4.4.12　release resources　379
4.5　server implementation　382
4.5.1　server6_mainloop() function　386
4.5.2　server6_recv() function　387
4.5.3　process_relayforw() function　391
4.5.4　react_solicit() function　396
4.5.5　react_request() function　401
4.5.6　make_ia() function　406
4.5.7　react_renew() function　417
4.5.8　react_rebind() function　419
4.5.9　binding_time() function　426
4.5.10　react_release() function　428
4.5.11　react_informreq() function　432
4.5.12　server6_send() function　434
4.6　relay agent implementation　439
4.6.1　relay6_loop() function　439
4.6.2　relay6_recv() function　441
4.6.3　relay_to_server() function　444
4.6.4　relay_to_client() function　450
4.7　implementation of dhcpv6 authentication ..　454
4.7.1　data structures related to dhcpv6 authentication　454
4.7.2　set_auth() function　455
4.7.2　process_auth() function (client side)　458
4.7.4　process_auth() function (server side)　462
4.8　dhcpv6 operation　468
4.8.1　building the dhcpv6 implementation　468
4.8.2　configuring a duid　469
4.8.3　configuring the dhcpv6 server　469
4.8.4　configuring the dhcpv6 client　470
4.8.5　configuring the dhcpv6 relay agent　474
4.8.6　configuring dhcpv6 authentication　475
4.8.7　configuring control command keys　476
4.8.8　operation of dhcpv6 services　476
5　mobile ipv6　485
5.1　introduction　485
5.2　mobile ipv6 overview　486
5.2.1　types of nodes　487
5.2.2　basic operation of mobile ipv6　488
5.2　header extension　491
5.3.1　alignment requirements　493
5.3.2　home address option　493
5.3.3　type　2　routing header　494
5.3.4　mobility header　495
5.3.5　mobility options　503
5.3.6　neighbor discovery messages　506
5.3.7　icmpv6 messages　509
5.4　procedure of mobile ipv6　512
5.4.1　protocol constants and variables　512
5.4.2　home registration　512
5.4.3　bi-directional tunneling　516
5.4.4　intercepting packets for a mobile node　518
5.4.5　returning home　519
5.5　route optimization　521
5.5.1　return routability　522
5.5.2　sending initial messages　522
5.5.3　responding to initial messages　523
5.5.4　computing a shared secret　525
5.5.5　verifying message　526
5.5.6　security considerations　527
5.5.7　de-register binding for correspondent nodes　528
5.5.8　backward compatibility　528
5.6　movement detection　529
5.7　dynamic home agent address discovery　530
5.8　mobile prefix solicitation/advertisement　533
5.9　relationship with ipsec　534
5.10　code introduction　537
5.10.1　statistics　537
5.11　mobile ipv6 related structures　539
5.11.1　files　539
5.11.2　mobility header message—ip6_mh{} structure　539
5.11.3　binding refresh request message—ip6_mh_binding_request{}structure　541
5.11.4　home test init message—ip6_mh_home_test_init{}structure　541
5.11.5　care-of test init message—ip6_mh_careof_test_init{}structure　542
5.11.6　home test message—ip6_mh_home_test{}structure　543
5.11.7　care-of test message—ip6_mh_careof_test{}structure　543
5.11.8　binding update message—ip6_mh_binding_update{}structure　544
5.11.9　binding acknowledgment message—ip6_mh_binding_ack{}structure　545
5.11.10　binding error message—ip6_mh_binding_error{}structure　546
5.11.11　mobility option message structures　548
5.11.12　mobility option message—ip6_mh_opt{} structure　548
5.11.12　binding refresh advice option—ip6_mh_opt_refresh_advice{}structure　549
5.11.14　alternate care-of address option—ip6_mh_opt_altcoa{}structure　549
5.11.15　nonce index option—ip6_mh_opt_nonce_index{}structure　550
5.11.16　authentication data option—ip6_mh_opt_auth_data{}structure　550
5.11.17　the internal mobility option—mip6_mobility_options{}structure　551
5.11.18　home address option—ip6_opt_home_address{}structure　551
5.11.19　type　2　routing header—ip6_rthdr2{} structure　552
5.11.20　the modified router advertisement message—nd_router_advert{}structure　552
5.11.21　the modified prefix information option—nd_opt_prefix_info{}structure　553
5.11.22　advertisement interval option—nd_opt_adv_interval{}structure　554
5.11.22　home agent information option—nd_opt_homeagent_info{}structure　554
5.11.24　dynamic home agent address discovery request message—mip6_dhaad_req{} structure　555
5.11.25　dynamic home agent address discovery reply message—mip6_dhaad_rep{} structure　555
5.11.26　mobile prefix solicitation message—mip6_prefix_solicit{}structure　556
5.11.27　mobile prefix advertisement message—mip6_prefix_advert{}structure　556
5.11.28　binding cache entry—mip6_bc{} structure　557
5.11.29　binding update list entry—mip6_bu{} structure　559
5.11.30　home agent entry—mip6_ha{} structure　561
5.11.31　prefix entry—mip6_prefix{} structure　562
5.11.32　home virtual interface—hif_softc{} structure　563
5.12　macro and type definitions　567
5.12　global variables　570
5.14　utility functions　570
5.14.1　files　570
5.14.2　creation of ipv6 header　570
5.14.3　checksum computation　572
5.15　common mobility header processing　575
5.15.1　files　575
5.15.2　mobility header input　575
5.15.3　generating binding error messages　581
5.15.4　rate limitation of binding error messages　582
5.15.5　creation of binding error message　583
5.15.6　mobility header message delivery to raw sockets　585
5.16　home agent and correspondent node　588
5.16.1　files　589
5.16.2　binding update message input　589
5.16.3　binding cache entry management　598
5.16.4　mobility options processing　606
5.16.5　validation of binding update message for correspondentnode　608
5.16.6　kbm and authorization data computation　610
5.16.7　managing binding cache entry as correspondentnode　615
5.16.8　sending binding refresh request message　618
5.16.9　home registration processing　622
5.16.10　the dad procedure　628
5.16.11　proxy neighbor discovery control　634
5.16.12　home de-registration procedure　639
5.16.13　sending a binding acknowledgment message　642
5.16.14　nonce and nodekey management　649
5.16.15　receiving a home address option　653
5.16.16　sending packets to mobile nodes via tunnel　660
5.16.17　recovery of temporarily disabled proxy entry　664
5.16.18　receiving icmpv6 error messages　666
5.16.19　home agent list management　670
5.16.20　prefix list management　684
5.16.21　sending a mobile prefix advertisement message　684
5.16.22　constructing the payload　687
5.17　mobile node　689
5.17.1　files　689
5.17.2　binding update list entry management　689
5.17.3　movement detection　699
5.17.4　configuring home addresses　711
5.17.5　sending a binding update message　721
5.17.6　receiving a binding acknowledgment message　737
5.17.7　receiving a type　2　routing header　750
5.17.8　receiving a binding refresh request message　754
5.17.9　receiving a binding error message　755
5.17.10　source address selection　758
5.17.11　home agent list management　763
5.17.12　prefix information management　772
5.17.13　receiving prefix information by router advertisementmessages　784
5.17.14　sending a mobile prefix solicitation message　793
5.17.15　receiving a mobile prefix advertisement message　796
5.17.16　sending a dynamic home agent address discovery requestmessage　804
5.17.17　receiving a dynamic home agent address discovery replymessage　808
5.17.18　receiving icmpv6 error messages　813
5.17.19　state machine　815
5.17.20　primary state machine　817
5.17.21　secondary state machine　837
5.17.22　virtual home interface　844
5.17.23　return routability and route optimization　857
5.17.24　route optimized communication　874
5.17.25　tunnel control　884
5.17.26　receiving packets from a tunnel　887
5.17.27　i/o control　889
5.18　mobile ipv6 operation　892
5.18.1　rebuilding a kernel with mobile ipv6 extension　892
5.18.2　rebuilding user space programs　893
5.18.3　ipsec signal protection　894
5.18.4　configuring node　897
5.18.5　viewing status information　899
5.18.6　viewing statistics　899
5.19　appendix　901
5.19.1　the manual page of mip6control　901
6　ipv6 and ip security　903
6.1　introduction　903
6.2　authentication header　904
6.3　encapsulating security payload　906
6.4　transport mode and tunnel mode　908
6.5　security association database　909
6.5.1　security policy database　910
6.5.2　security association database　911
6.5.3　sad and spd example　912
6.6　ipsec traffic processing　913
6.7　spd and sad management　914
6.7.1　manual keying and automatic keying　915
6.8　manual configuration　916
6.8.1　configuration file format　917
6.8.2　examples of manipulating sp entries　922
6.8.3　examples of manipulating sa entries　924
6.9　internet security association and key management protocol(isakmp) overview　925
6.9.1　isakmp exchanges　927
6.9.2　domain of interpretation　929
6.9.3　internet key exchange protocol　930
6.10　racoon operation　931
6.10.1　configuring racoon　931
6.10.2　configuration file format　932
6.11　scenarios　937
6.11.1　creating a vpn between 3 networks　938
6.11.2　creating star topology vpn　942
6.11.3　using transport mode ip security　945
6.11.4　connecting to the server from public access points　949
references　953
index ...　961

.　　Program names are displayed in bold fonts, as in route6d. The command line input and the output of a program are displayed in a constant-width font.
　　Accompanying CD-ROM
　　This book comes with two CD-ROMs,The first CD-ROM is an ISO image of FreeBSD4.8-RELEASE, which is the base operating system covered in Chapters 1, 2, 3, and'6. It is a bootable CD-ROM and includes installation files. The installation procedure is started by turning on the computer with the CD-ROM loaded. The detailed installation procedure can be found in the INSTALL. TXT file located in the root directory of the CD-ROM.
　　Similarly, the second CD-ROM is a bootable ISO image of FreeBSD4.9-RELEASE, which is the base operating system covered in Chapter 5.
　　Note:FreeBSD 4.8 and 4.9 RELEASEs are known to have several security flaws and are no longer supported by the FreeBSD project. Therefore, these systems should Only be used for referefiee on learning the KAME implementation as part of reading this book. It is not advisable touse these versions of FreeBSD in a production environment connected to Internet.
　　The first CD-ROM also contains the 'KAME source code discussed in this book. It is accessed via the appendix directory located at the root directory, which has two subdirec-tories, kame-snap and rtadd6.
　　The kame-snap subdirectory contains the following archive files:
　　·kame-20030421-freebsd48-snap.tgz
　　A KAME snapshot for FreeBSD 4.8 taken on April 21, 2003.
　　·kame-20040712-freebsd49-snap.tgz
　　A KAME snapshot for FreeBSD 4.9 taken on July 12, 2004. This is referred to inChapter 5,and should be used with the FreeBSD 4.9 system contained in the second CD-ROM.
　　·kame-dhcp6-20050509 .tgz
　　KAME's DHCPv6 implementation included in a KAME snapshot taken on May 9, 2005,which is referred to in Chapter 4.
　　To install the KAME snapshot, unpack the archive, go down to the top level directory named kame (which is also referred to as $ { KANE } throughout this book), and see the INSTALL file located in the directory. For those who have the Core Protocols book, its Chapter 1 provides a more detailed description of the usage. Chapter 4 of this book explains how to install the DHCPv6 implementation.
　　The other subdirectory, rt add 6, contains the source code of the rt add 6 program referred to in Chapter 1, which was newly written for this book.
　　Source Code Copyright
　　This book presents many parts of the source code developed by the KAME project anid external contributors. It also refers to system header files that are part of the'FreeBSD distributions. All of the source code has copyright notices, which are available in the copy of the code contained in the CD-ROM discs.
　　Reporting Errors and Errata Page
　　The authors are happy to receive error reports on the content of this book, and plan to pro-vide an error correction page on the Internet. It will be'available at the following Web page:http://books, elsevier, com/companions/9780123704795.
　　Acknowledgments
　　The authors, first and foremost, thank all KAME developers. As in our first book,this book is half-filled with the KAME source code, which means they are the shadow authors of this book.
　　We are also deeply indebted to technical reviewers who read selected chapters of this book and provided many valuable comments and suggestions, as well as error cdrrections:Mark Andrews, David Borman, Francis Dupont, Daniel Hartmeier, Jeffrey Hsu,Akira Kato,T.J. Kniveton, Ted Lemon, Tsuyoshi Momose, George Neville-Neff, Yasuhiro Ohara, Shawn Routhier, Shoichi Sakane, Shigeya Suzuki, Shinsuke Suzuki, Christian Vogt, and Carl Williams.As with our first book, reviewing this book required thorough knowledge of the relhted pro-tocol specifications, as well as high level programming skills. We knew very few people have such talents, and we were very lucky to have the world's best reviewer team.
　　The book cover is based on the well-known KAME turtle image, which was designated as a project mascot, and was designed by Manabu Higashida and Chizunu Higashida.
　　Next, we would like to thank our editors Rick Adams, Rachel Roumeliotis, Dawnmarie Simpson, and the editorial staff at Morgan Kaufmann/Elsevier for their continuing patience and encouragement over the three and a half years of this project.
　　Finally, we are grateful to Gary R. Wright and W. Richard Stevens. Their work inspired us to start our own project and kept us confident about the value of this work.
　　LI, Qing--I would like to thank Rick Adams for his keen understanding of the importance of this book, as it fulfills a market void. His prompt acceptance of my book proposal has been an invaluable motivation. I want to thank my wife Huaying Cheng for her understanding and support of me during this book project. I would like to thank VMware Inc. for its donation of a single license for the VMware Workstation 4 software. I would also like to thank MKS Software for its donation of a single license for the MKS Toolkit for Enterprise Developers version 8.6 software.
　　JINMEI, Tatuya--I would like to thank my current and former managers at Toshiba for their approval and support of this work: Yukio Kamatani, To'shio Murai, Yasuhiro Katsube, and Atsushi Inoue. My thanks also go to my "supervisors" at the WIDE project, Jun Murai and Hiroshi Esaki.
　　SHIMA, Keiichi--I thank all of the people who worked hard to publish this book and those who supported this work, especially my manager Eiiti Wada at Internet Initiative Japan, Inc.Also my thanks go to all operators, engineers, and researchers of the Internet...