Hacker may exploit the Neighbor Solicitation (NS), Neighbor Advertisement (NA), Router Solicitation (RS), and Router Advertisement (RA) messages of IPv6 to launch DoS or DDoS attacks.

For example, a hacker may exploit the Type 0 Routing header vulnerability of two servers to bounce carefully crafted data packets back and forth between the two servers so that link bandwidth is exhausted, or make valid IP addresses bounce packets by bypassing source IP address restrictions.

Hackers may exploit the Next Header feature of the IPv6 protocol to launch DoS attacks.

The new features of the IPv6 protocol may be exploited by hackers to launch DDoS or denial of service (DoS) attacks. It must be re-adapted to the new network environment of IPv6 in terms of traffic monitoring, scheduling, scrubbing, and black holes. Instead, it must be completely redeveloped to support IPv6. New Network Security Challenges Under IPv6Īlthough the defense system under IPv4 is mature, it cannot be directly used for IPv6 protection. Alibaba Cloud Security built the first IPv6 DDoS defense system in China, which supports second-level monitoring and massive IP address defense, providing IPv4+IPv6 dual-stack automatic DDoS protection for the cloud services of Taobao and Youku.ĭuring the Double 11 Shopping Festival, the dual-stack defense system intercepted more than 5,000 DDoS attacks, with maximum attack traffic of 397 Gbit/s. In November 2018, Taobao and Youku ran IPv6 during the Double 11 Shopping Festival for the first time.

Subsequently, IPv6 DDoS attack tools, such as thc-ipv6 and hping, also emerged on the Internet. It was the first publicly reported IPv6 DDoS attack.

With the advent of IPv6, attacks under IPv6 networks began to emerge.Īt the beginning of 2018, Neustar announced that it was attacked by IPv6 distributed denial of service (DDoS). Therefore, the Internet services that do not support IPv6 may lose a large number of users.Īt the end of 2017, the General Office of the CPC Central Committee and the General Office of the State Council issued the 'Action Plan for Promoting the Scale Deployment of IPv6', requiring the number of active IPv6 users to reach 200 million by the end of 2018, and requiring the top 50 commercial websites and apps with the largest number of users in China to support IPv6. Currently, a significantly large number of Internet resources and users utilize the IPv6 protocol.

Since June 1, 2016, Apple stipulated that all apps submitted to the App Store must be compatible with the IPv6-only standard.

Ipv6 ddos attack tool