基于SRv6的网络安全技术研究  

Research on network security technology for SRv6

作　　者：鲁冬杰 杨凯 庄小君 陈佳 赵宇航 LU Dong-jie;YANG Kai;ZHUANG Xiao-jun;CHEN Jia;ZHAO Yu-hang(China Mobile Research Institute,Beijing 100053,China)

机构地区：[1]中国移动通信有限公司研究院,北京100053

出　　处：《电信工程技术与标准化》2022年第12期27-33,共7页Telecom Engineering Technics and Standardization

摘　　要：SRv6技术基于源路由实现网络智慧编程,改变了IP网络报文路由转发机制,对网络安全防护带来新的挑战。本文深入分析SRv6源路由带来的安全威胁和SRv6技术对边界安全产品带来的挑战,研究SRv6源路由安全防护技术和边界安全产品SRv6防护技术。以SRv6信任域为基础的防护技术,降低SRv6源路由威胁防护难度,并支持根据SRv6网络方案和安全防护需求灵活选择防护技术,为保护SRv6网络安全提供技术参考。SRv6 intelligent programming technology was based on source routing, changed the IP network packet routing and forwarding mechanism, and the challenges to IP network security need to be studied and resolved urgently. The security threats brought by SRv6 source routing and the challenges brought by SRv6 technology to border security products are analyzed in depth, and the SRv6 source routing security protection technology and border security product SRv6 protection technology are studied. The protection technology based on SRv6 trust domain reduced the difficulty of SRv6 source routing threat protection, and supported fl exible selection of technical measures according to SRv6 network and security requirements, providing technical reference for protecting SRv6 network security.

关 键 词：SRv6网络安全 SRv6源路由威胁 SRv6源路由安全 

分 类 号：TN918[电子电信—通信与信息系统]