scholarly journals Addressless: A new internet server model to prevent network scanning

PLoS ONE ◽  
2021 ◽  
Vol 16 (2) ◽  
pp. e0246293
Author(s):  
Shanshan Hao ◽  
Renjie Liu ◽  
Zhe Weng ◽  
Deliang Chang ◽  
Congxiao Bao ◽  
...  

Eliminating unnecessary exposure is a principle of server security. The huge IPv6 address space enhances security by making scanning infeasible, however, with recent advances of IPv6 scanning technologies, network scanning is again threatening server security. In this paper, we propose a new model named addressless server, which separates the server into an entrance module and a main service module, and assigns an IPv6 prefix instead of an IPv6 address to the main service module. The entrance module generates a legitimate IPv6 address under this prefix by encrypting the client address, so that the client can access the main server on a destination address that is different in each connection. In this way, the model provides isolation to the main server, prevents network scanning, and minimizes exposure. Moreover it provides a novel framework that supports flexible load balancing, high-availability, and other desirable features. The model is simple and does not require any modification to the client or the network. We implement a prototype and experiments show that our model can prevent the main server from being scanned at a slight performance cost.


Author(s):  
Md. Anwar Hossain ◽  
Mst. Sharmin Akter

Routing is a design way to pass the data packet. User is assigns the path in a routing configuration. A significant role played by the router for providing the dynamic routing in the network. Structure and Configuration are different for each routing protocols. Next generation internet protocol IPv6 which provides large address space, simple header format. It is mainly effective and efficient routing. It is also ensure good quality of service and also provide security. Routing protocol (OSPFv3) in IPv6 network has been studied and implemented using ‘cisco packet tracer’. ‘Ping’ the ping command is used to check the results. The small virtual network created in Cisco platform .It is also used to test the OSPFv3 protocol in the IPv6 network. This paper also contains step by step configuration and explanation in assigning of IPv6 address in routers and end devices. The receiving and sending the packet of data in a network is the responsibility of the internet protocol layer. It also contains the data analysis of packet forwarding through IPv6 on OSPFv3 in simulation mode of cisco packet virtual environment to make the decision eventually secure and faster protocol in IPv6 environment.



2021 ◽  
Vol 336 ◽  
pp. 08002
Author(s):  
Hao Wang ◽  
Yong Wang ◽  
Guanying Liang ◽  
Yunfan Gao ◽  
Weijian Gao ◽  
...  

With the emergence and development of new software architectures such as microservices, how to effectively handle the service load and ensure the service capability of the system has become an urgent problem to be solved. Load balancing technology needs to achieve high availability of microservices without affecting the delayed response of requests. According to different principles of adoption, mainstream load balancing technologies have emerged, such as polling methods, hash algorithms, and artificial intelligence technologies. This article categorizes and summarizes load balancing technologies for microservice architecture, and elaborates the methods and characteristics of current mainstream load balancing technologies. Based on the comparative analysis of existing technologies, this paper summarizes and points out the future development direction of load balancing technology.



Author(s):  
Sven Schindler ◽  
Bettina Schnor ◽  
Thomas Scheffler
Keyword(s):  




2013 ◽  
Vol 760-762 ◽  
pp. 1936-1941
Author(s):  
Guo Fang Kuang ◽  
Chun Lin Kuang

IPv6 has huge address space, while 128 bit IPv6 address is divided into two parts, namely the address prefix and the interface address. IPv6 provides a wide range of security policies for Internet of Things safety system. The security of the Internet of Things applications interface IPv6 address can be used to identify the node. This paper proposes construction security architecture of the Internet of Things based on IPv6 technology. In the allocation of the state address safety issues and mobile IPv6 binding buffer security update issues, are able to meet the security needs of the Internet of Things.



2021 ◽  
Vol 8 (2) ◽  
pp. 329
Author(s):  
Roisul Setiawan ◽  
Dany Primanita Kartikasari ◽  
Bayu Rahayudi

<p class="Abstrak">Untuk mewujudkan ketahanan pangan, diperlukan mekanisme pengumpulan data secara real-time dari produsen  bahan pangan, pendisitribusi bahan pangan sampai pengolah bahan pangan. Namun tidak semua organisasi yang berkecimpung dalam distribusi pangan memiliki infrastruktur sistem informasi yang cukup baik. Untuk mengatasi kendala infrastruktur, penelitian ini mengusulkan untuk membangun arsitektur <em>web server cluster</em> yang dapat menunjang kebutuhan <em>high availability</em> system menggunakan single board computer.  Komponen arsitektur terdiri dari dua tier yaitu: frontend dan backend. Untuk menjamin kehandalan sistem, arsitektur  yang diusulkan didukung dengan komponen <em>load balancing</em>, mekanisme failover dan replikasi database. Sistem telah diuji berasarkan kebutuhan fungsional dan kebutuhan non-fungsional yang sudah didefinisikan sesuai kebutuhan organisasi. Dari hasil pengujian, tingkat availabilitas yang dihasilkan sebesar 95.83%.</p><p class="Abstrak"> </p><p class="Abstrak"><strong><em>Abstract</em></strong></p><p class="PreformattedText"><em>To achieve food security, a real-time data collection mechanism is needed from food producers, food distribution to food processing. However, not all organizations involved in food distribution have adequate information system infrastructure. To overcome infrastructure constraints, this study proposes to build a web server cluster architecture that can support the needs of a high availability system using a single board computer. The architectural component consists of two tiers, namely: frontend and backend. To ensure system reliability, the proposed architecture is supported by load balancing components, failover mechanisms, and database replication. The system has been tested based on functional requirements and non-functional requirements that have been defined according to organizational requirements. From the test results, the resulting availability level is 95.83%</em>.</p><p class="Abstrak"><em><br /></em></p>



Jurnal Digit ◽  
2021 ◽  
Vol 11 (2) ◽  
pp. 178
Author(s):  
Kresna Adi Pratama ◽  
Ridho Taufiq Subagio ◽  
Muhammad Hatta ◽  
Victor Asih

ABSTRAKPT.Trimitra Data Teknologi adalah perusahaan yang yang bergerak dalam bidang teknologi dan informasi, website menjadi salah satu cara jembatan komunikasi antara client dan perusahaan. Banyaknya client yang mengakses membuat beban sebuah web server dalam perusahaan menjadi berat dan menimbulkan masalah yaitu down nya server yang membuat client sulit untuk mengakses website perusahaan. Untuk membantu mengatasi masalah yang terjadi diterapkannya metode load balancing dengan algoritma request counting algorithm dimana bertujuan untuk membagi beban secara merata dalam web server dan memperkecil waktu respon antara client dan server, beban terbagi dengan anggota server yang terdaftar dalam server load balancing. Dengan penerapan metode load balancing maka kerja server akan menjadi lebih maksimal karena adanya sistem high availability dimana saat salah satu server mati maka kerja server akan diambil alih oleh server yang lain. Selain metode load balance penerapan sistem dengan server mirror yang dilakukan dapat membantu memaksimalkan metode load balance karena adanya replikasi otomatis antara web server yang menjadi anggota load balance baik konten website ataupun database. Hasil yang terjadi adalah web server perusahaan akan menjadi sistem yang mampu bekerja secara baik saat melayani client dalam hal layanan web server karena beban terbagi dengan baik dan kecilnya waktu respon sehingga tidak adanya kesulitan client untuk mengakses website perusahaan.Kata kunci : Load Balance, Web Server, Mirror Server.



Sign in / Sign up

Export Citation Format

Share Document