(19)
(11)EP 2 724 508 B1

(12)EUROPEAN PATENT SPECIFICATION

(45)Mention of the grant of the patent:
14.08.2019 Bulletin 2019/33

(21)Application number: 12730042.4

(22)Date of filing:  06.06.2012
(51)International Patent Classification (IPC): 
H04L 29/06(2006.01)
(86)International application number:
PCT/IB2012/052859
(87)International publication number:
WO 2012/176087 (27.12.2012 Gazette  2012/52)

(54)

PREVENTING NEIGHBOR-DISCOVERY BASED DENIAL OF SERVICE ATTACKS

VERHINDERUNG VON DIENSTVERWEIGERUNGSANGRIFFEN AUF DER BASIS DER ERKENNUNG VON NACHBARZELLEN

PRÉVENTION D'ATTAQUES PAR DÉNI DE SERVICE FONDÉES SUR UNE DÉCOUVERTE DE VOISIN


(84)Designated Contracting States:
AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

(30)Priority: 21.06.2011 US 201113165348

(43)Date of publication of application:
30.04.2014 Bulletin 2014/18

(73)Proprietor: Telefonaktiebolaget LM Ericsson (publ)
164 83 Stockholm (SE)

(72)Inventor:
  • HALPERN, Joel
    Leesburg, Virginia 20176 (US)

(74)Representative: Ericsson 
Patent Development Torshamnsgatan 21-23
164 80 Stockholm
164 80 Stockholm (SE)


(56)References cited: : 
  
  • MUTAF P ET AL: "Compact neighbor discovery (a bandwidth defense through bandwidth optimization)", INFOCOM 2005. 24TH ANNUAL JOINT CONFERENCE OF THE IEEE COMPUTER AND CO MMUNICATIONS SOCIETIES. PROCEEDINGS IEEE MIAMI, FL, USA 13-17 MARCH 2005, PISCATAWAY, NJ, USA,IEEE, PISCATAWAY, NJ, USA, vol. 4, 13 March 2005 (2005-03-13), pages 2711-2719, XP010829297, DOI: 10.1109/INFCOM.2005.1498554 ISBN: 978-0-7803-8968-7
  • NIKANDER P ET AL: "IPv6 Neighbor Discovery (ND) Trust Models and Threats; rfc3756.txt", 20040501, 1 May 2004 (2004-05-01), XP015009536, ISSN: 0000-0003
  • GAEIL AN ET AL: "Effective Control of Abnormal Neighbor Discovery Congestion on IPv6 Local Area Network", 1 January 2006 (2006-01-01), UBIQUITOUS INTELLIGENCE AND COMPUTING : THIRD INTERNATIONAL CONFERENCE, UIC 2006, WUHAN, CHINA, SEPTEMBER 3 - 6, 2006 ; PROCEEDINGS; [LECTURE NOTES IN COMPUTER SCIENCE ; 4159], SPRINGER, BERLIN, DE, PAGE(S) 966 - 976, XP019039562, ISBN: 978-3-540-38091-7 abstract; figures 1,2 * sections 1-3 *
  • NARTEN T ET AL: "RFC 2461: Neighbor Discovery for IP Version 6", IETF REQUEST FOR COMMENTS, XX, XX, 1 December 1998 (1998-12-01), pages 1-93, XP002198179,
  
Note: Within nine months from the publication of the mention of the grant of the European patent, any person may give notice to the European Patent Office of opposition to the European patent granted. Notice of opposition shall be filed in a written reasoned statement. It shall not be deemed to have been filed until the opposition fee has been paid. (Art. 99(1) European Patent Convention).


Description

FIELD OF THE INVENTION



[0001] Embodiments of the invention relate to a method and system for preventing denial of service attacks, where the attacks are based on the Neighbor Discovery protocol of the Internet Protocol version 6 (IPv6).

BACKGROUND



[0002] The Internet Protocol version 6 (IPv6) is designed to address the issue of address exhaustion in Internet Protocol version 4 (IPv4). In conjunction with expanding the address space from 32 bits to 128 bits, IPv6 introduces a number of changes. For example, IPv6 increases the number of bits that is used to number the hosts in a subnet, and moves from a media-based Address resolution Protocol (ARP) to an IP-based Neighbor Discovery protocol. IPv6 subnets are defined by the standards to have at least 64 bits for numbering the hosts, where before a subnet might have 6 to 12 bits for numbering the hosts.

[0003] Operators and security analysts have noticed a problematic effect of the new larger subnets. The numbering space for a subnet is now 16 quintillion entries. Clearly, no subnet will use any noticeable fraction of these entries.

[0004] One problem with the larger subnet is that a remote attacker could send a series of packets to a subnet, addressed to different randomly chosen potential hosts. In the current practice, this would cause the border router to send into the subnet a stream of neighbor discovery packets, and to create cache entries for this information. As the table space in the router is limited, this attack can easily overrun the available table space, and cause the router to lose track of actual hosts, and to prevent new legitimate hosts from registering.

[0005] There are existing techniques that remediate this attack in certain scenarios, such as when the subnet is a subscriber subnet using Point-to-Point Protocol over Ethernet (PPPoE). However, there is no general prophylactic approach for preventing the attack.

[0006] Mutaf P et al in "Compact neighbor discovery (a bandwidth defense through bandwidth optimization)" disclose a stateless defense against the Neighbor Discovery Denial-of-Service (ND-DoS) attack in IPv6. The ND-DoS attack consists of remotely flooding a target subnet with bogus packets destined for random interface identifiers; a different one for each malicious packet. The 128-bit IPv6 address reserves its 64 low-order bits for the interface ID. Consequently, the malicious packets are very likely to fall on previously unresolved addresses and the target access router (or leaf router) is obliged to resolve these addresses by sending neighbor solicitation packets. Neighbor solicitation packets are link layer multicast (or broadcast), and hence also forwarded by bridges. As a consequence, the attack may consume important bandwidth in subnets with wireless bridges or access points. This problem is particularly important in the presence of mobile IPv6 devices that expect incoming sessions from the Internet. In this case, address resolution is crucial for the access router to reliably deliver incoming sessions to idle mobile devices with unknown MAC addresses. They propose using Bloom filters. Multiple IPv6 addresses (bogus or real) that are waiting in the access router's address resolution queue are compactly represented using a Bloom filter. By broadcasting a single neighbor solicitation message that carries the Bloom filter, multiple IPv6 addresses are concurrently solicited. Legitimate neighbor solicitation triggering packets are not denied service. An on-link host can detect its address in the received Bloom filter and return its MAC address to the access router.

[0007] Nikander P et al in "IPv6 Neighbor Discovery (ND) Trust Models and Threats", RFC 3756 from May 2004 disclose that the existing IETF standards specify that IPv6 Neighbor Discovery (ND) and Address Autoconfiguration mechanisms may be protected with IPsec Authentication Header (AH). However, the specifications limit the security solutions to manual keying due to practical problems faced with automatic key management. They specify three different trust models and discuss the threats pertinent to IPv6 Neighbor Discovery. The purpose of this discussion is to define the requirements for Securing IPv6 Neighbor Discovery.

[0008] Gaeil An et al "Effective Control of Abnormal Neighbor Discovery Congestion on IPv6 Local Area Network" disclose that the Neighbor Discovery (ND) protocol is very important in ubiquitous networks because it can provide IP auto-configuration and address resolution. However, a malicious user can make access router of local area network (LAN) generate useless ND protocol messages by sending it abnormal data packets with fictitious destination IP address. If a malicious user sends the access router the enormous volume of abnormal traffic, this may result in network congestion and degrade quality of service (QoS) not only for ND-requested normal traffic, but also for ND-free normal traffic. They propose a scheme that is able to control ND congestion by rate-limiting ND protocol messages generated by abnormal data packet. In our scheme, when an access router receives a ND-requested packet, it checks if the destination IP address of the packet exists actually on the target LAN. If yes, it sends out the ND message for the packet using good QoS in packet forwarding service. Otherwise, it uses bad QoS. To learn topology of the target LAN, the router monitors all traffic from the target LAN.

SUMMARY



[0009] The present invention provides a method of preventing denial-of-service attacks on hosts attached to a subnet according to Claim 1.

[0010] The present invention also provides a network element for preventing denial of service attacks on hosts attached to a subnet according to Claim 7.

BRIEF DESCRIPTION OF THE DRAWINGS



[0011] The present invention is illustrated by way of example, and not by way of limitation, in the figures of the accompanying drawings in which like references indicate similar elements. It should be noted that different references to "an" or "one" embodiment in this disclosure are not necessarily to the same embodiment, and such references mean at least one. Further, when a particular feature, structure, or characteristic is described in connection with an embodiment, it is submitted that it is within the knowledge of one skilled in the art to effect such feature, structure, or characteristic in connection with other embodiments whether or not explicitly described.

Figure 1 is a block diagram illustrating one embodiment of a network configuration.

Figure 2 is a block diagram illustrating an embodiment of a network element such as a router.

Figure 3 is a flow diagram of one embodiment of a method performed by a router for preventing neighbor-discovery based attacks.

Figure 4 is a flow diagram of one embodiment of a method performed by a router for maintaining a Neighbor Discovery table.

Figure 5 is a diagram of a first embodiment of a message flow between the routers and the hosts on a subnet.

Figure 6 is a diagram of a second embodiment of a message flow between the routers and the hosts on a subnet.

Figure 7 is a diagram of a third embodiment of a message flow between the routers and the hosts on a subnet.


DETAILED DESCRIPTION



[0012] In the following description, numerous specific details are set forth. However, it is understood that embodiments of the invention may be practiced without these specific details. In other instances, well-known circuits, structures and techniques have not been shown in detail in order not to obscure the understanding of this description. It will be appreciated, however, by one skilled in the art, that the invention may be practiced without such specific details. Those of ordinary skill in the art, with the included descriptions, will be able to implement appropriate functionality without undue experimentation.

[0013] Embodiments of the present invention provide a method and system that avoids the disadvantages of the prior art. As described above, the prior art cannot effectively prevent denial of service attacks that are based on the Neighbor Discovery protocol of the IPv6. The embodiments of the invention overcome these disadvantages of the prior art by providing an attack prevention technique and related behavioral changes that are needed to keep information accurate in the network elements (e.g., one or more routers).

[0014] Figure 1 is a block diagram illustrating one embodiment of a network configuration 100. In this embodiment, the network configuration 100 includes, but is not limited to, a subnet 150 (e.g., a local area network (LAN)) attached to a network 160 via one or more routers (e.g., a router 110). A number of hosts 120 are attached to the subnet 150 and have Internet Protocol (IP) addresses on the subnet 150. Each host 120 can be a server, a personal computer, a laptop device, a game console, a portable device, an appliance, or any device or component that can transmit and/or receive data over the network 160. The router 110 stores a data structure (referred to as a Neighbor Discovery (ND) table 170) that maps, for each subnet attached to the router 110, the on-subnet IP address of a host to the Media Access Control (MAC) address of that host.

[0015] The network configuration 100 also includes a number of remote network nodes ("remote nodes") 130 that access the hosts 120 via the router 110. In some scenarios, one of the remote nodes 130 may initiate an attack on the hosts 120. The attack can include sending large numbers of messages to different addresses allocated to the subnet 150. With the large number of possible addresses values (e.g., 16 quintillion values), it is very likely that a randomly-chosen address value does not actually name any of the hosts 120. When a packet with such a randomly-chosen address is received by the router 110 and that address is not recorded in the ND table 170, a conventional router would send a Neighbor Solicitation message onto the subnet 150 and creates a pending entry in the ND table 170, indicating (e.g., with a flag) that the entry is to be filled in after the destination host replies. However, none of the hosts 120 have the address specified in the packet and, therefore, no reply will be received from the destination host. As such, a stream of such packets that are sent within a short time will overflow the ND table 170 such that the router 110 cannot respond to legitimate requests of the hosts 120. If the attacker pursues the attack for a long enough period of time, this attack can prevent the hosts 120 on the subnet 150 from being reachable.

[0016] According to embodiments of the invention, when a packet is received from outside of a locally attached subnet, the router 110 checks whether the destination address (specifically, the destination host) is already known. A host is known to the router 110 if it has a corresponding entry in the ND table 170. If the host is not already known to the router 110, the router 110 discards the packet. As a result, the ND table 170 will not be filled by the attacks.

[0017] In some embodiments, the ND table 170 can be filled from messages/packets sent by the hosts 120 on the subnet 150. In some embodiments, the ND table 170 can store static entries that are created without the hosts 120 sending any messages/packets. These messages/packets are sent by the hosts 120 either in an unsolicited fashion, or in response to queries either from other hosts 120 on the subnet 150 or from the router 110. Entries in the ND table 170 have lifetimes, and are removed when they time out.

[0018] According to embodiments of the invention, when entries of the ND table 170 are near expiration, the router 110 will re-verify them. This re-verification is necessary for the primary mechanism (of dropping packets) to work, because it ensures that table entries for active hosts 120 stay in the ND table 170 and will not be deleted upon expiration. Thus, the router 110 can rely on the ND table 170 to filter out incoming packets that are likely from attackers. As a result, remote attackers cannot fill the subnet 150 with Neighbor Solicitation messages, nor fill the ND table 170 with pending entries, which the attacker intends to use to prevent valid entries from being created and used.

[0019] The ND table 170 can be implemented in various ways (using the full 128 bit address, or only the lower 64 bits; using hash tables, ternary content addressable memory (TCAM), binary trees (btrees), or other lookup structures). Embodiments of the invention can be applied to all such constructs, and the differences between these implementations will be ignored in the remainder of the description.

[0020] Figure 2 is a block diagram illustrating an embodiment of a network element such as the router 110 of Figure 1. In one embodiment, the router 110 includes, but is not limited to, a network processor 280 coupled to a memory 250. The memory 250 stores the neighbor discovery (ND) table 170, which maps, for each subnet attached to the router 110, an on-subnet IP destination address 251 of a host to a Media Access Control (MAC) address of that host. The router 110 includes a table population module 230, which populates the ND table 170 with host address information extracted from operations on the subnet 150; e.g., from packets sent by the hosts 120 in an unsolicited fashion, from packets sent by the hosts 120 in response to queries either from other hosts 120 on the subnet 150 or from the router 110.

[0021] In one embodiment, the router 110 includes a destination determination module 210 and a forwarding module 220. When an incoming packet having the IPv6 format arrives at the router 110 for forwarding into the subnet 150, the destination module 210 looks up the ND table 170 for the destination address specified in the packet. If the destination determination module 210 cannot find an entry in the ND table 170 that has the destination address, it simply drops the packet. No pending entry is created for this packet in the ND table 170.

[0022] In one embodiment, when the router 110 drops a packet, it can either send back a notification to the source or, alternatively, since these packets are usually attack messages, the router 110 can either send no responses or send the responses at a limited rate.

[0023] Embodiments of the invention ensure that the ND table 170 record correct information of all active hosts 120 on the subnet 120. This means that the table 170 should not be filled with old, probably false, information. In one embodiment, the router 110 includes a timer module 240 and a verification module 260, which are responsible for maintaining correct information of all active hosts 120 in the ND table 170. The timer module 240 detects entries in the ND table 170 that are approaching its lifetime threshold. An entry expires when its elapsed lifetime reaches the lifetime threshold. In one embodiment, the elapsed lifetime of an entry is measured from the time the entry is added to the ND table 170 (if the entry is not yet in the ND table 170). In one embodiment, after an entry is added to the ND table 170, its elapsed lifetime can be reset upon receipt of any data traffic from the host 120 identified in the entry. In another embodiment, after an entry is added to the ND table 170, its elapsed lifetime can be reset upon receipt of any control traffic from the host 120 identified in the entry.

[0024] In one embodiment, the timer module 240 and the verification module 260 maintain correct information of all active hosts 120 in the ND table 170 with the following operations. In order to prevent inappropriate removal of an entry when the entry expires, the timer module 240 signals the verification module 260 when the entry is approaching its lifetime threshold (that is, going to expire). In one embodiment, the timer module 240 time-stamps each entry when the entry is added to the ND table 170, and (e.g., periodically) checks the elapsed lifetime of the entry to determine whether the elapsed lifetime is greater than another pre-determined threshold ("verification threshold"). The verification threshold is chosen to indicate an entry identifying a host is going to expire but there is still enough time to verify the status of the host before the entry actually expires. In one embodiment, the verification threshold of an entry can be set to be two-thirds of the lifetime threshold of that entry. In one embodiment, the ND table 170 contains a timeout field 253, which stores the time-stamp of an entry, an indication of whether or not the entry has reached the verification threshold, and/or other time-related information for the entry.

[0025] In some embodiments, upon receipt of the signal from the timer module 240 that indicates an entry has reached its verification threshold (that is, the entry is approaching expiration but has not yet expired), the verification module 260 may send a Neighbor Solicitation message destined for the entry's IP address. If the host 120 with that IP address is still valid and functioning, the host 120 will respond to the solicitation. The response from that host 120 extends the lifetime of the entry (e.g., resets the elapsed lifetime of the entry). Thus, the entry can stay in the ND table 170. If the host 120 with that IP address does not respond, the entry will be removed from the ND table 170 when it expires (i.e., when the entry reaches its lifetime threshold).

[0026] In the following description, the operations of the flow diagrams of Figures 3 and 4 will be described with reference to the exemplary embodiments of Figures 1 and 2. However, it should be understood that the operations of the flow diagrams can be performed by embodiments of the invention other than those discussed with reference to Figures 1 and 2, and the embodiments discussed with reference to Figures 1 and 2 can perform operations different than those discussed with reference to the flow diagrams of Figures 3 and 4.

[0027] Figure 3 is a flow diagram of one embodiment of a method 300 performed by the router 110 for preventing neighbor-discovery based attacks. In one embodiment, the router 110 receives a packet for forwarding to a destination address in an address space of the subnet 150 according to the IPv6 protocol (block 310). The router 110 looks up the destination address in the ND table 170 (block 320). The ND table 170 is populated by operations on the subnet 150 that were completed prior to receipt of the packet. Each entry of the ND table 170 stores address information of one of the hosts 120 that have been verified by the router 110 to be active. The router 110 forwards the packet to the destination address if the destination address is stored in the ND table 170 (block 330). The router 110 discards the packet if the destination address is not stored in the ND table 170 (block 340).

[0028] Figure 4 is a flowchart of one embodiment of a method 400 performed by the router 110 for maintaining the ND table 170. In one embodiment, the router 110 detects that an entry in the ND table representing a given host has an elapsed lifetime that reaches a threshold (i.e., the verification threshold) (block 410). Upon the detection, the router 110 sends a Neighbor Solicitation message to the given host (block 420). If the router 110 receives a reply from the given host (block 430), the lifetime of the entry for that given host is extended (e.g., by extending its lifetime threshold or resetting its elapsed lifetime) (block 440). As the router 110 waits for a reply (block 450), the router 110 performs periodic checks on the elapsed lifetime of the entry to determine whether the entry has expired (i.e., reaches the lifetime threshold) (block 460). If the entry has expired, the router 110 deletes the entry from the ND table 170 (block 470). If the entry has not expired, the router 110 waits for a period of time (block 465) to re-transmit another Neighbor Solicitation message (block 420) in case the lack of response is due to errors caused by network problems. The router 110 repeats the operations of blocks 420, 430, 450, 460 and 465 until either a reply is received or the entry expires.

[0029] The above description is related to scenarios in which one router 110 provides connectivity to the subnet 150, or when all the routers 110 providing the connectivity come up at once. In the latter scenario, since all of the routers 110 come up at substantially the same time, they all see the advertisements from the hosts 120 and have correct information in their respective ND tables 170.

[0030] In another scenario when there are multiple routers (e.g., multiple routers 110 of Figure 1), and one router comes up significantly later than the other routers (e.g., due to the router being restarted individually), then that later router will not see advertisements from the hosts 120 on the subnet 150, and will not have the information to populate its ND table. In the following description in connection with Figures 5-7, the router that comes up earlier is referred to as a first router 1 10A and the router that comes up significantly later is referred to as a second router 110B. Each of the routers 110A and 110B maintains an ND table (e.g., the ND table 170 of Figures 1 and 2) internally. Additionally, although one host 120 is shown, it is understood that any of the hosts 120 on the subnet 150 can perform the operations to be described below in connection with Figures 5-7.

[0031] Figure 5 is a diagram of a first embodiment of a message flow between the first router 110A, the second router 110B, and the host 120, which enables the second router 110B to obtain information for populating its ND table. In one embodiment, the first router 110A becomes active (block 510) followed by the second router 110B becoming active (block 520). The second router 110B sends out a router advertisement indicating that it has become active (block 530). The router advertisement is used to notify the first router 110A that it has a new neighbor. When the first router 110A receives the router advertisement (block 540), it sends each host 120 on the subnet 150 a Neighbor Solicitation message with an unspecified source address (block 550). When each host 120 receives the Neighbor Solicitation message (block 560), it multicasts a reply (block 570). The second router 110B receives the replies from the host 120 and populates its ND table ("second ND table") based on the replies (block 580).

[0032] Figure 6 is a diagram of a second embodiment of a message flow between the first router 110A, the second router 110B, and the host 120, which enables the second router 110B to obtain information for populating its ND table. In one embodiment, the first router 110A becomes active (block 610) followed by the second router 110B becoming active (block 620). The second router 110B sends a request to the first router 110A for data exchange (block 630). When the first router 110A receives the request (block 640), it sends data in its ND table using a data exchange protocol (e.g., the Server Cache Synchronization Protocol (SCSP) or other similar protocols) (block 650). The second router 110B receives the data and uses the data to populate its ND table (block 660).

[0033] Figure 7 is a diagram of a third embodiment of a message flow between the first router 110A, the second router 110B, and the host 120, which enables the second router 110B to obtain information for populating its ND table. In one embodiment, the first router 110A becomes active (block 710) followed by the second router 110B becoming active (block 720). The second router 110B sends one or more router advertisement messages to the hosts 120 on the subnet 150, each message including a flag (block 730). Each host 120 receives the router advertisement messages (block 740). The host 120 then resends, or replies with, a message advertising the host's addresses information (e.g., IPv6 and MAC addresses) (block 750). The second router 110B receives the messages from the hosts 120 and populates its ND table based on the messages (block 760). Since one or more of the hosts 120 may miss the request, or the response may get lost, the second router 110B can send the router advertisement with the flag multiple times to improve reliability

[0034] In yet another scenario where there are more than two routers providing connectivity to the subnet 150, further refinements can be made with respect to the first two embodiments so as not to cause excess duplicate transmissions on the subnet 150.

[0035] Thus, a method, system and apparatus for preventing denial of service attacks have been described. It is to be understood that the techniques shown in the figures can be implemented using code and data stored and executed on one or more electronic devices (e.g., an end station, a network element, etc.). Such electronic devices store and communicate (internally and/or with other electronic devices over a network) code and data using non-transitory machine-readable or computer-readable media, such as non-transitory machine-readable or computer-readable storage media (e.g., magnetic disks; optical disks; random access memory; read only memory; flash memory devices; and phase-change memory). In addition, such electronic devices typically include a set of one or more processors coupled to one or more other components, such as one or more storage devices, user input/output devices (e.g., a keyboard, a touch screen, and/or a display), and network connections. The coupling of the set of processors and other components is typically through one or more busses and bridges (also termed as bus controllers). The storage devices represent one or more non-transitory machine-readable or computer-readable storage media and non-transitory machine-readable or computer-readable communication media. Thus, the storage device of a given electronic device typically stores code and/or data for execution on the set of one or more processors of that electronic device. Of course, one or more parts of an embodiment of the invention may be implemented using different combinations of software, firmware, and/or hardware.

[0036] As used herein, a network element (e.g., a router, switch, bridge, etc.) is a piece of networking equipment, including hardware and software, that communicatively interconnects other equipment on the network (e.g., other network elements, end stations, etc.). Some network elements are "multiple services network elements" that provide support for multiple networking functions (e.g., routing, bridging, switching, Layer 2 aggregation, session border control, multicasting, and/or subscriber management), and/or provide support for multiple application services (e.g., data, voice, and video). Subscriber end stations (e.g., servers, workstations, laptops, palm tops, mobile phones, smart phones, multimedia phones, Voice Over Internet Protocol (VOIP) phones, portable media players, GPS units, gaming systems, set-top boxes (STBs), etc.) access content/services provided over the Internet and/or content/services provided on virtual private networks (VPNs) overlaid on the Internet. The content and/or services are typically provided by one or more end stations (e.g., server end stations) belonging to a service or content provider or end stations participating in a peer to peer service, and may include public web pages (free content, store fronts, search services, etc.), private web pages (e.g., username/password accessed web pages providing email services, etc.), corporate networks over VPNs, IPTV, etc. Typically, subscriber end stations are coupled (e.g., through customer premise equipment coupled to an access network (wired or wirelessly) to edge network elements, which are coupled (e.g., through one or more core network elements to other edge network elements) to other end stations (e.g., server end stations).

[0037] It is to be understood that the above description is intended to be illustrative and not restrictive. Many other embodiments will be apparent to those of skill in the art upon reading and understanding the above description. The scope of the invention should, therefore, be determined with reference to the appended claims, along with the full scope of equivalents to which such claims are entitled.


Claims

1. A method of preventing denial-of-service attacks on hosts attached to a subnet, the attacks initiated by a remote node over an external network, the method performed by a router which forwards packets between the external network and the subnet, the method comprising the steps of:

receiving (310), by the router, a packet for forwarding to a destination address in an address space of the subnet according to the IPv6 protocol;

looking up (320) the destination address in a neighbor discovery, ND, table maintained by the router, wherein the ND table is populated by operations on the subnet that were completed prior to receipt of the packet, the ND table containing entries with each entry storing address information of one of the hosts that have been verified by the router to be active;

forwarding (330) the packet to the destination address in response to a determination that the destination address is stored in the ND table;

discarding (340) the packet in response to a determination that the destination address is not stored in the ND table;

detecting (410) that a given one of the entries representing a given one of the hosts has an elapsed lifetime that reaches a verification threshold;

verifying that the given host is active;

extending (440) a lifetime of the given entry in the ND table in response to a determination that the given host is active; and

deleting (470) the given entry from the ND table when the given entry expires in response to a determination that the given host is not active.


 
2. The method (300) of claim 1, wherein the step of verifying further comprises the steps of:

sending (420) a neighbor solicitation message to the given host; and

extending (440) the lifetime of the given entry in response to a reply to the ND solicitation message.


 
3. The method (300) of claim 1, wherein the step of detecting (410) further comprises the steps of:
setting the verification threshold to be two-thirds of a lifetime threshold at which the given entry expires.
 
4. The method (300) of claim 1, wherein the subnet includes a second router having a second ND table that has not been populated, the method further comprising the steps of:

receiving (540), by the router, an advertisement from the second router indicating that the second router has become active; and

sending (550), by the router, each of the hosts on the subnet a neighbor solicitation message with an unspecified source address in the message, which causes each of the hosts receiving the message to multicast a reply, thereby allowing the second router to populate the second ND table based on the reply.


 
5. The method (300) of claim 1, wherein the subnet includes a second router having a second ND table that has not been populated, the method (300) further comprising the steps of:

receiving (640), by the router, a request from the second router for data exchange upon activation of the second router; and

providing (650) the ND table to the second router using a data exchange protocol.


 
6. The method (300) of claim 1, wherein the subnet includes a second router having a second ND table that has not been populated, the method (300) further comprising the steps of:

sending (730), by the second router, one or more router advertisement messages to the hosts on the subnet, each of the router advertisement messages including a flag, which is defined to prompt each of the hosts to resend a message advertising its addresses information; and

populating (760), by the second router, the second ND table based on the message from each of the hosts.


 
7. A network element (110) for preventing denial-of-service attacks on hosts (120) attached to a subnet (150), the attacks initiated by a remote node (130) over an external network (160), the network element (110) configured to forward packets between the external network (160) and the subnet (150), the network element (110) comprising:

a memory (250) to store a neighbor discovery, ND, table (170), the ND table (170) to contain entries and each entry to store address information (251, 252) of one of the hosts (120) that have been verified by the network element (110) to be active;

a network processor (280) communicatively coupled to the memory (250), the network processor (280) configured to execute a destination determination module (210), a forwarding module (220), a timer module (240) and a verification module (260),

the destination determination module (210) configured to look up a destination address of a packet received by the network element (110) in the ND table (170) populated by operations on the subnet (150) that were completed prior to receipt of the packet, wherein the destination address is in an address space of the subnet (150) according to the IPv6 protocol,

the forwarding module (220) configured to forward the packet to the destination address if the destination address is stored in the ND table (170), and discard the packet if the destination address is not stored in the ND table (170),

the timer module (240) configured to detect that a given one of the entries representing a given one of the hosts has an elapsed lifetime that reaches a verification threshold,

the verification module (260) configured to verify that the given host is active when a lifetime of the given entry reaches the verification threshold, and

the timer module (240) further configured to extend the lifetime of the given entry in the ND table (170) if the given host (120) is active, and delete the given entry from the ND table (170) upon expiration of the given entry if the given host (120) is not active.


 
8. The network element (110) of claim 7, wherein the verification module (260) is further configured to send a neighbor solicitation message to the given host (120) to thereby verify whether the given host (120) is active, and to extend the lifetime of the given entry in response to a reply to the ND solicitation message.
 
9. The network element (110) of claim 7, wherein the verification threshold is two-thirds of a lifetime threshold at which the given entry expires.
 
10. The network element (110) of claim 7, wherein the subnet (150) includes a second network element having a second ND table that has not been populated, the network element (110) further configured to
receive an advertisement message from the second network element wherein the advertisement message indicates that the second network element has become active, and
send each of the hosts (120) on the subnet (150) a neighbor solicitation message with an unspecified source address in the message, which is to cause each of the hosts (120) that receive the message to multicast a reply, thereby allowing the second network element to populate the second ND table based on the reply.
 
11. The network element (110) of claim 7, wherein the subnet (150) includes a second network element having a second ND table that has not been populated, the network element (110) further configured to receive a request from the second network element for data exchange upon activation of the second network element, and provide the ND table (170) to the second network element using a data exchange protocol.
 
12. The network element (110) of claim 7, wherein the subnet (150) includes a second network element having a first ND table, and the network element (110) is to become active after the second network element has become active, the network element (110) further configured to execute a table populating module (230),
the table populating module (230) configured to send an advertisement message to the second network element wherein the advertisement message indicates that the network element (110) has become active and causes the second network element to send each of the hosts (120) on the subnet (150) a neighbor solicitation message with an unspecified source address in the message,
the table populating module (230) further configured to receive a reply multicast by each of the hosts (120) that receives the message, and populate the ND table based on the reply.
 
13. The network element (110) of claim 7, wherein the subnet (150) includes a second network element having a second ND table, and the network element (110) is arranged to become active after the second network element has become active, the network element (110) further configured to execute a table populating module (230),
the table populating module (230) configured to send a request to the second network element for data exchange upon activation of the network element (110) in accordance with a data exchange protocol, and
the table populating module (230) further configured to receive the second ND table from the second network element and populate the ND table based on the second ND table.
 
14. The network element 110 of claim 7, wherein the subnet (150) includes a second network element having a second ND table, and the network element (110) is arranged to become active after the second network element has become active, the network element (110) further configured to execute a table populating module (230),
the table populating module (230) configured to send one or more router advertisement messages to the hosts (120) on the subnet (150), each of the router advertisement messages including a flag, which is defined to prompt each of the hosts (120) to resend a message advertising its addresses information, and
the table populating module (230) further configured to populate the ND table based on the message from each of the hosts (120).
 


Ansprüche

1. Verfahren zur Verhinderung von Dienstverweigerungsangriffen auf Hosts, die an ein Subnetzwerk angeschlossen sind, wobei die Angriffe von einem entfernten Knoten über ein externes Netzwerk initiiert werden, wobei das Verfahren von einem Router durchgeführt wird, der Pakete zwischen dem externen Netzwerk und dem Subnetzwerk weiterleitet, wobei das Verfahren die folgenden Schritte umfasst:

Empfangen (310) eines Pakets durch den Router zum Weiterleiten an eine Zieladresse in einem Adressraum des Subnetzwerks gemäß dem IPv6-Protokoll;

Nachschlagen (320) der Zieladresse in einer Nachbarsuch, ND,-Tabelle die vom Router unterhalten wird, wobei die ND-Tabelle durch Operationen im Subnetzwerk gefüllt ist, die vor dem Empfang des Pakets durchgeführt wurden, wobei die ND-Tabelle Einträge enthält, wobei jeder Eintrag Adressinformationen eines der Hosts speichert, die vom Router als aktiv verifiziert wurden;

Weiterleiten (330) des Pakets an die Zieladresse in Reaktion auf eine Bestimmung, dass die Zieladresse in der ND-Tabelle gespeichert ist;

Verwerfen (340) des Pakets in Reaktion auf eine Bestimmung, dass die Zieladresse nicht in der ND-Tabelle gespeichert ist;

Erkennen (410), dass ein gegebener der Einträge, der einen gegebenen der Hosts darstellt, eine abgelaufene Lebensdauer aufweist, die eine Verifizierungsschwelle erreicht;

Verifizieren, dass der gegebene Host aktiv ist;

Verlängern (440) des Lebensdauer des gegebenen Eintrags in der ND-Tabelle in Reaktion auf eine Bestimmung, dass der gegebene Host aktiv ist; und

Löschen (470) des gegebenen Eintrags aus der ND-Tabelle, wenn der gegebene Eintrags abläuft, in Reaktion auf eine Bestimmung, dass der gegebene Host nicht aktiv ist.


 
2. Verfahren (300) nach Anspruch 1, wobei der Schritt des Verifizierens ferner die folgenden Schritte umfasst:

Senden (420) einer Nachbaranfragenachricht an den gegebenen Host; und

Verlängern (440) der Lebensdauer des gegebenen Eintrags in Reaktion auf eine Antwort auf die ND-Anfragenachricht.


 
3. Verfahren (300) nach Anspruch 1, wobei der Schritt des Erkennens (410) ferner die folgenden Schritte umfasst:
derartiges Festlegen der Verifizierungsschwelle, dass sie zwei Drittel einer Lebensdauerschwelle beträgt, bei welcher der gegebene Eintrag abläuft.
 
4. Verfahren (300) nach Anspruch 1, wobei das Subnetzwerk einen zweiten Router umfasst, der eine zweite ND-Tabelle aufweist, die nicht gefüllt wurde, wobei das Verfahren ferner die folgenden Schritte umfasst:

Empfangen (540) einer Ankündigung vom zweiten Router durch den Router mit der Angabe, dass der zweite Router aktiv wurde; und

Senden (550) durch den Router an jeden der Hosts im Subnetzwerk einer Nachbaranfragenachricht mit einer unspezifizierten Ursprungsadresse in der Nachricht, die jeden der Hosts, der die Nachricht empfängt, zum Senden einer Antwort per Multicast veranlasst, um dadurch dem zweiten Router zu ermöglichen, die zweite ND-Tabelle basierend auf der Antwort zu füllen.


 
5. Verfahren (300) nach Anspruch 1, wobei das Subnetzwerk einen zweiten Router umfasst, der eine zweite ND-Tabelle aufweist, die nicht gefüllt wurde, wobei das Verfahren (300) ferner die folgenden Schritte umfasst:

Empfangen (640) durch den Router einer Anforderung zum Datenaustausch vom zweiten Router bei Aktivierung des zweiten Routers; und

Bereitstellen (650) der ND-Tabelle für den zweiten Router unter Verwendung eines Datenaustauschprotokolls.


 
6. Verfahren (300) nach Anspruch 1, wobei das Subnetzwerk einen zweiten Router umfasst, der eine zweite ND-Tabelle aufweist, die nicht gefüllt wurde, wobei das Verfahren (300) ferner die folgenden Schritte umfasst:

Senden (730) einer oder mehrerer Router-Ankündigungsnachrichten durch den zweiten Router an die Hosts im Subnetzwerk, wobei jede der Router-Ankündigungsnachrichten ein Flag umfasst, das definiert ist, um jeden der Hosts zum erneuten Senden einer Nachricht aufzufordern, die seine Adressinformationen ankündigt; und

Füllen (760) der zweiten ND-Tabelle durch den zweiten Router basierend auf der Nachricht von jedem der Hosts.


 
7. Netzwerkelement (110) zum Verhindern von Dienstverweigerungsangriffen auf Hosts (120), die an ein Subnetzwerk (150) angeschlossen sind, wobei die Angriffe von einem entfernten Knoten (130) über ein externes Netzwerks (160) initiiert werden, wobei das Netzwerkelement (110) zum Weiterleiten von Paketen zwischen dem externen Netzwerk (160) und dem Subnetzwerk (150) konfiguriert ist, und das Netzwerkelement (110) umfasst:

einen Speicher (250) zum Speichern einer Nachbarsuch, ND,-Tabelle (170), wobei die ND-Tabelle (170) Einträge enthält, und jeder Eintrag Adressinformationen (251, 252) eines der Hosts (120) speichert, die vom Netzwerkelement (110) als aktiv verifiziert wurden;

einen Netzwerkprozessor (280), der mit dem Speicher (250) kommunikativ gekoppelt ist, wobei der Netzwerkprozessor (280) zum Ausführen eines Zielbestimmungsmoduls (210), eines Weiterleitungsmoduls (220), eines Zeitgebermoduls (240) und eines Verifizierungsmoduls (260) konfiguriert ist,

wobei das Zielbestimmungsmodul (210) so konfiguriert ist, dass es eine Zieladresse eines Pakets, das durch das Netzwerkelement (110) empfangen wird, in der ND-Tabelle (170) nachschlägt, die durch Operationen im Subnetzwerk (150) gefüllt ist, die vor dem Empfang des Pakets durchgeführt wurden, wobei die Zieladresse in einem Adressraum des Subnetzwerks (150) gemäß dem IPv6-Protokoll ist,

das Weiterleitungsmodul (220) so konfiguriert ist, dass es das Paket an die Zieladresse weiterleitet, wenn die Zieladresse in der ND-Tabelle (170) gespeichert ist, und das Paket verwirft, wenn die Zieladresse nicht in der ND-Tabelle (170) gespeichert ist,

das Zeitgebermodul (240) so konfiguriert ist, dass es erkennt, dass ein gegebener der Einträge, der einen gegebenen der Hosts darstellt, eine abgelaufene Lebensdauer aufweist, die eine Verifizierungsschwelle erreicht;

das Verifizierungsmodul (260) so konfiguriert ist, dass es verifiziert, dass der gegebene Host aktiv ist, wenn eine Lebensdauer des gegebenen Eintrags die Verifizierungsschwelle erreicht, und

das Zeitgebermodul (240) ferner so konfiguriert ist, dass es die Lebensdauer des gegebenen Eintrags in der ND-Tabelle (170) verlängert, wenn der gegebene Host (120) aktiv ist, und den gegebenen Eintrag aus der ND-Tabelle (170) bei Ablauf des gegebenen Eintrags löscht, wenn der gegebene Host (120) nicht aktiv ist.


 
8. Netzwerkelement (110) nach Anspruch 7, wobei das Verifizierungsmodul (260) ferner so konfiguriert ist, dass es eine Nachbaranfragenachricht an den gegebenen Host (120) sendet, um dadurch zu verifizieren, ob der gegebene Host (120) aktiv ist, und die Lebensdauer des gegebenen Eintrags in Reaktion auf eine Antwort auf die ND-Anfragenachricht zu verlängern.
 
9. Netzwerkelement (110) nach Anspruch 7, wobei die Verifizierungsschwelle zwei Drittel einer Lebensdauerschwelle beträgt, bei welcher der gegebene Eintrag abläuft.
 
10. Netzwerkelement (110) nach Anspruch 7, wobei das Subnetzwerk (150) ein zweites Netzwerkelement umfasst, das eine zweite ND-Tabelle aufweist, die nicht gefüllt wurde, wobei das Netzwerkelement (110) ferner konfiguriert ist zum:

Empfangen einer Ankündigungsnachricht vom zweiten Netzwerkelement, wobei die Ankündigungsnachricht angibt, dass das zweite Netzwerkelement aktiv wurde, und

Senden an jeden der Hosts (120) im Subnetzwerk (150) einer Nachbaranfragenachricht mit einer unspezifizierten Ursprungsadresse in der Nachricht, die jeden der Hosts (120), der die Nachricht empfängt, zum Senden einer Antwort per Multicast veranlassen soll, um dadurch dem zweiten Netzwerkelement zu ermöglichen, die zweite ND-Tabelle basierend auf der Antwort zu füllen.


 
11. Netzwerkelement (110) nach Anspruch 7, wobei das Subnetzwerk (150) ein zweites Netzwerkelement umfasst, das eine zweite ND-Tabelle aufweist, die nicht gefüllt wurde, wobei das Netzwerkelement (110) ferner zum Empfangen einer Anforderung zum Datenaustausch vom zweiten Netzwerkelement bei Aktivierung des zweiten Netzwerkelements und Bereitstellen der ND-Tabelle (170) für das zweite Netzwerkelement unter Verwendung eines Datenaustauschprotokolls konfiguriert ist.
 
12. Netzwerkelement (110) nach Anspruch 7, wobei das Subnetzwerk (150) ein zweites Netzwerkelement umfasst, das eine erste ND-Tabelle aufweist, und das Netzwerkelement (110) aktiv werden soll, nachdem das zweite Netzwerkelement aktiv geworden ist, wobei das Netzwerkelement (110) ferner zum Ausführen eines Tabellenfüllmoduls (230) konfiguriert ist,
wobei das Tabellenfüllmodul (230) so konfiguriert ist, dass es eine Ankündigungsnachricht an das zweite Netzwerkelement sendet, wobei die Ankündigungsnachricht angibt, dass das Netzwerkelement (110) aktiv wurde, und das zweite Netzwerkelement veranlasst, an jeden der Hosts (120) im Subnetzwerk (150) eine Nachbaranfragenachricht mit einer unspezifizierten Ursprungsadresse in der Nachricht zu senden,
wobei das Tabellenfüllmodul (230) ferner so konfiguriert ist, dass es eine Antwort empfängt, die durch jeden der Hosts (120), der die Nachricht empfängt, per Multicast gesendet wird, und die ND-Tabelle basierend auf der Antwort füllt.
 
13. Netzwerkelement (110) nach Anspruch 7, wobei das Subnetzwerk (150) ein zweites Netzwerkelement mit einer zweiten ND-Tabelle umfasst, und das Netzwerkelement (110) so ausgelegt ist, dass es aktiv wird, nachdem das zweite Netzwerkelement aktiv geworden ist, wobei das Netzwerkelement (110) ferner zum Ausführen eines Tabellenfüllmoduls (230) konfiguriert ist,
wobei das Tabellenfüllmodul (230) so konfiguriert ist, dass es eine Anforderung zum Datenaustausch an das zweite Netzwerkelement bei Aktivierung des Netzwerkelements (110) gemäß einem Datenaustauschprotokoll sendet, und
wobei das Tabellenfüllmodul (230) ferner so konfiguriert ist, dass es die zweite ND-Tabelle vom zweiten Netzwerkelement empfängt und die ND-Tabelle basierend auf der zweiten ND-Tabelle füllt.
 
14. Netzwerkelement (110) nach Anspruch 7, wobei das Subnetzwerk (150) ein zweites Netzwerkelement mit einer zweiten ND-Tabelle umfasst, und das Netzwerkelement (110) so ausgelegt ist, dass es aktiv wird, nachdem das zweite Netzwerkelement aktiv geworden ist, wobei das Netzwerkelement (110) ferner zum Ausführen eines Tabellenfüllmoduls (230) konfiguriert ist,
wobei das Tabellenfüllmodul (230) so konfiguriert ist, dass es eine oder mehrere Router-Ankündigungsnachrichten an die Hosts (120) im Subnetzwerk (150) sendet, wobei jede der Router-Ankündigungsnachrichten ein Flag umfasst, das definiert ist, um jeden der Hosts (120) zum erneuten Senden einer Nachricht aufzufordern, die seine Adressinformationen ankündigt; und
wobei das Tabellenfüllmodul (230) ferner zum Füllen der ND-Tabelle basierend auf der Nachricht von jedem der Hosts (120) konfiguriert ist.
 


Revendications

1. Procédé de prévention d'attaques de refus de service sur des hôtes attachés à un sous-réseau, les attaques étant lancées par un noeud distant sur un réseau externe, le procédé étant effectué par un routeur qui transfère des paquets entre le réseau externe et le sous-réseau, le procédé comprenant les étapes de :

la réception (310), par le routeur, d'un paquet à transférer à une adresse de destination dans un espace d'adresse du sous-réseau selon le protocole IPv6 ;

la recherche (320) de l'adresse de destination dans une table de découverte de voisin, ND, maintenue par le routeur, dans lequel la table ND est renseignée par des opérations sur le sous-réseau qui ont été effectuées avant la réception du paquet, la table ND contenant des entrées, chaque entrée mémorisant des informations d'adresse de l'un des hôtes qui ont été vérifiés par le routeur comme étant actifs ;

le transfert (330) du paquet à l'adresse de destination en réponse à une détermination que l'adresse de destination est mémorisée dans la table ND ;

le rejet (340) du paquet en réponse à une détermination que l'adresse de destination n'est pas mémorisée dans la table ND ;

la détection (410) que l'une donnée des entrées représentant l'un donné des hôtes a une durée de vie écoulée qui atteint un seuil de vérification ;

la vérification que l'hôte donné est actif ;

l'extension (440) d'une durée de vie de l'entrée donnée dans la table ND en réponse à une détermination que l'hôte donné est actif ; et

la suppression (470) de l'entrée donnée de la table ND lorsque l'entrée donnée expire en réponse à une détermination que l'hôte donné n'est pas actif.


 
2. Procédé (300) selon la revendication 1, dans lequel l'étape de la vérification comprend en outre les étapes de :

l'envoi (420) d'un message de sollicitation de voisin à l'hôte donné ; et

l'extension (440) de la durée de vie de l'entrée donnée en réponse à une réponse au message de sollicitation ND.


 
3. Procédé (300) selon la revendication 1, dans lequel l'étape de la détection (410) comprend en outre les étapes de :
le réglage du seuil de vérification pour être aux deux tiers d'un seuil de durée de vie auquel l'entrée donnée expire.
 
4. Procédé (300) selon la revendication 1, dans lequel le sous-réseau inclut un deuxième routeur ayant une deuxième table ND qui n'a pas été renseignée, le procédé comprenant en outre les étapes de :

la réception (540), par le routeur, d'une annonce en provenance du deuxième routeur indiquant que le deuxième routeur est devenu actif ; et

l'envoi (550), par le routeur, à chacun des hôtes sur le sous-réseau, d'un message de sollicitation de voisin avec une adresse de source non spécifiée dans le message, ce qui amène chacun des hôtes recevant le message à diffuser en multicast une réponse, en permettant de ce fait au deuxième routeur de renseigner la deuxième table ND sur la base de la réponse.


 
5. Procédé (300) selon la revendication 1, dans lequel le sous-réseau inclut un deuxième routeur ayant une deuxième table ND qui n'a pas été renseignée, le procédé (300) comprenant en outre les étapes de :

la réception (640), par le routeur, d'une demande en provenance du deuxième routeur pour un échange de données à l'activation du deuxième routeur ; et

la fourniture (650) de la table ND au deuxième routeur en utilisant un protocole d'échange de données.


 
6. Procédé (300) selon la revendication 1, dans lequel le sous-réseau inclut un deuxième routeur ayant une deuxième table ND qui n'a pas été renseignée, le procédé (300) comprenant en outre les étapes de :

l'envoi (730), par le deuxième routeur, d'un ou plusieurs messages d'annonce de routeur aux hôtes sur le sous-réseau, chacun des messages d'annonce de routeur incluant un drapeau, qui est défini pour inviter chacun des hôtes à renvoyer un message annonçant ses informations d'adresse ; et

le renseignement (760), par le deuxième routeur, de la deuxième table ND sur la base du message provenant de chacun des hôtes.


 
7. Elément de réseau (110) destiné à la prévention d'attaques de refus de service sur des hôtes (120) attachés à un sous-réseau (150), les attaques étant lancées par un noeud distant (130) sur un réseau externe (160), l'élément de réseau (110) étant configuré pour transférer des paquets entre le réseau externe (160) et le sous-réseau (150), l'élément de réseau (110) comprenant :

une mémoire (250) pour la mémorisation d'une table de découverte de voisin, ND, (170), la table ND (170) étant destinée à contenir des entrées et chaque entrée étant destinée à mémoriser des informations d'adresse (251, 252) de l'un des hôtes (120) qui ont été vérifiés par l'élément de réseau (110) comme étant actifs ;

un processeur de réseau (280) couplé, de manière à pouvoir communiquer, à la mémoire (250), le processeur de réseau (280) étant configuré pour exécuter un module de détermination de destination (210), un module de transfert (220), un module de minuterie (240) et un module de vérification (260),

le module de détermination de destination (210) étant configuré pour la recherche d'une adresse de destination d'un paquet reçu par l'élément de réseau (110) dans la table ND (170) renseignée par des opérations sur le sous-réseau (150) qui ont été effectuées avant la réception du paquet, dans lequel l'adresse de destination est dans un espace d'adresse du sous-réseau (150) selon le protocole IPv6,

le module de transfert (220) étant configuré pour le transfert du paquet à l'adresse de destination si l'adresse de destination est mémorisée dans la table ND (170), et le rejet du paquet si l'adresse de destination n'est pas mémorisée dans la table ND (170),

le module de minuterie (240) étant configuré pour la détection que l'une donnée des entrées représentant l'un donné des hôtes a une durée de vie écoulée qui atteint un seuil de vérification ;

le module de vérification (260) étant configuré pour la vérification que l'hôte donné est actif lorsqu'une durée de vie de l'entrée donnée atteint le seuil de vérification ; et

le module de minuterie (240) étant en outre configuré pour l'extension de la durée de vie de l'entrée donnée dans la table ND (170) si l'hôte donné est actif, et la suppression de l'entrée donnée de la table ND (170) à l'expiration de l'entrée donnée si l'hôte donné (120) n'est pas actif.


 
8. Elément de réseau (110) selon la revendication 7, dans lequel le module de vérification (260) est en outre configuré pour l'envoi d'un message de sollicitation de voisin à l'hôte donné (120) pour vérifier de ce fait si l'hôte donné (120) est actif, et l'extension de la durée de vie de l'entrée donnée en réponse à une réponse au message de sollicitation ND.
 
9. Elément de réseau (110) selon la revendication 7, dans lequel le seuil de vérification est aux deux tiers d'un seuil de durée de vie auquel l'entrée donnée expire.
 
10. Elément de réseau (110) selon la revendication 7, dans lequel le sous-réseau (150) inclut un deuxième élément de réseau ayant une deuxième table ND qui n'a pas été renseignée, l'élément de réseau (110) étant en outre configuré pour :

la réception d'un message d'annonce en provenance du deuxième élément de réseau, dans lequel le message d'annonce indique que le deuxième routeur est devenu actif, et

l'envoi, à chacun des hôtes (120) sur le sous-réseau (150), d'un message de sollicitation de voisin avec une adresse de source non spécifiée dans le message, ce qui amène chacun des hôtes (120) recevant le message à diffuser en multicast une réponse, en permettant de ce fait au deuxième élément de réseau de renseigner la deuxième table ND sur la base de la réponse.


 
11. Elément de réseau (110) selon la revendication 7, dans lequel le sous-réseau (150) inclut un deuxième élément de réseau ayant une deuxième table ND qui n'a pas été renseignée, l'élément de réseau (110) étant en outre configuré pour la réception d'une demande en provenance du deuxième élément de réseau pour un échange de données à l'activation du deuxième élément de réseau, et la fourniture de la table ND (170) au deuxième élément de réseau en utilisant un protocole d'échange de données.
 
12. Elément de réseau (110) selon la revendication 7, dans lequel le sous-réseau (150) inclut un deuxième élément de réseau ayant une première table ND, et l'élément de réseau (110) doit devenir actif après que le deuxième élément de réseau devient actif, l'élément de réseau (110) étant en outre configuré pour l'exécution d'un module de renseignement de table (230),
le module de renseignement de table (230) étant configuré pour l'envoi d'un message d'annonce au deuxième élément de réseau, dans lequel le message d'annonce indique que l'élément de réseau (110) est devenu actif et amène le deuxième élément de réseau à envoyer, à chacun des hôtes (120) sur le sous-réseau (150), un message de sollicitation de voisin avec une adresse de source non spécifiée dans le message,
le module de renseignement de table (230) étant en outre configuré pour la réception d'une réponse diffusée en multicast par chacun des hôtes (120) recevant le message, et le renseignement de la table ND sur la base de la réponse.
 
13. Elément de réseau (110) selon la revendication 7, dans lequel le sous-réseau (150) inclut un deuxième élément de réseau ayant une deuxième table ND, et l'élément de réseau (110) est agencé pour devenir actif après que le deuxième élément de réseau est devenu actif, l'élément de réseau (110) étant en outre configuré pour l'exécution d'un module de renseignement de table (230),
le module de renseignement de table (230) étant configuré pour l'envoi d'une demande au deuxième élément de réseau pour un échange de données à l'activation de l'élément de réseau (110) en fonction d'un protocole d'échange de données, et
le module de renseignement de table (230) étant en outre configuré pour la réception de la deuxième table ND en provenance du deuxième élément de réseau et le renseignement de la table ND sur la base de la deuxième table ND.
 
14. Elément de réseau (110) selon la revendication 7, dans lequel le sous-réseau (150) inclut un deuxième élément de réseau ayant une deuxième table ND, et l'élément de réseau (110) est agencé pour devenir actif après que le deuxième élément de réseau est devenu actif, l'élément de réseau (110) étant en outre configuré pour l'exécution d'un module de renseignement de table (230),
le module de renseignement de table (230) étant configuré pour l'envoi d'un ou plusieurs messages d'annonce de routeur aux hôtes (120) sur le sous-réseau (150), chacun des messages d'annonce de routeur incluant un drapeau, qui est défini pour inviter chacun des hôtes (120) à renvoyer un message annonçant ses informations d'adresse, et
le module de renseignement de table (230) étant en outre configuré pour le renseignement de la deuxième table ND sur la base du message provenant de chacun des hôtes (120).
 




Drawing


























Cited references

REFERENCES CITED IN THE DESCRIPTION



This list of references cited by the applicant is for the reader's convenience only. It does not form part of the European patent document. Even though great care has been taken in compiling the references, errors or omissions cannot be excluded and the EPO disclaims all liability in this regard.

Non-patent literature cited in the description