Saturday, February 28, 2009

IPG4 Geography based IP / Next Generation IP - Alternative to Ipv6

Sent to... exec-director@ietf.org,iad@ietf.org

Respected All,

Define the New standard IPG4 ( Geography based IP ) which is a modified IPv4 ( current IP standard).

Advantages First.
-----------------
It is possible to take action and cure even the botnet with IPG4 ( new invention ).
We need to Add one validation to the Gateways or Routers at the Beginning ( or end )of the network
to include one validation.
The sender IP of IPG4 will be validated with the routers current send port ( Valid Geo addresses )
based on their current level ( of GEO ). Once this validation is added at the First Gateway,
No packets will be sent from any network in the World which does not have correct Senders Geo IP Address.
Once this is blocked from entering the network all Traffic will be legitimate traffic.
We can completely stop SPAM and botnet operating in the World networks.

In addition, we need to completely eliminate broadcasting and telephony network running on the IP backbone.
Telephone network must have a separate network ( physically isolated ) which is geography based which is used
for world telephony.
Similarly broadcasting network should be separate ( since it is one way traffic and not point to point)

With IPG4 with ( Sender IP Validation from the sender port ) we can completely eliminate cyber crime
( for now and for future )

Original IPG4 Solution.
-----------------------

I have sent several solutions ( the final form is listed below ) which replaces 1 IP ( one IP ) with at least 16 Million Ips.
In the IP frame, we have the options Field. Let the first 32 bit have the Source geo mask and the next 32 bit will
have the Destination geo mask.
Basically let us start from subnet mask.
To denote how many bits that needs to be set to 1 could be determined from the last byte of the subnet mask
( it is currently under utilized )
Let us assume that we are re-using this subnet mask as the geography mask.
So, the new IP will have a notation A.B.C.D with the geography mask G.H.I.J
The number in J determines the number of bits set to 1 ( for the subnet mask ).

Every Router will have have an IP address with the Geography mask enabled say
IP= A1.B1.C1.D1
Geo=G1.H1.I1.J1
G1- country code, H1-State / Geo code , I1 - sub geography code.
The Router will be using the following algorithm to route the packets.
For every packet received, The router will use the following algorithm.
If G1 <> G then route the packet ( at level G )
IF G1 = G and H1 <> H route the packet ( at level H ).
IF G1 = G and H1 = H and I1 <> I Route the packet ( at level I ).
Else follow current routing. ( This is a total internal address within this geography and locally routed.) ( could be either internal - same class address ) - or ( external - different class address )
{ In addition, if any router is only at level G, or H or I will not even need the routing table for the standard IP Routing or even H or I - It just needs info for G and hence it could reduce to a switch. The size of the routing table will get reduced to just 765 entries as opposed to a few 10 thousands now. So a single complicated router could be replaced with two switches which is very fast.}
The above scheme solves the internal routing of packets within an organization / network
Implementation should have good / stringent plan as that of Y2K.

Migration path.
Step 1:
All software hosts and clients must start updating the options field with the geo mask from a given date ( decided by IETF ). This can be easily tested and implemented with less regression issues. ( Since the new fields are not being used ).

Step 2:
This step can be implemented parallely, where each router will be updated with the geo mask. ( This too has very less impact ).

Step 3: Internet to Intranet connectivity.
Once the above scheme is implemented, The forward route of a packet is very clear.
The packets will be routed to the destination country and then sent out of the ( local ) network to the internet.
The return route of the messages coming to the machines are the question. ( they might follow a different route ).
To solve this problem, on the packets which are leaving out of one network - to the internet,the router at the edge of the corporation, should dynamically generate a local ( unused ) IP in that geo. It should then do a Network address translation so that the the return address comes to the same machine.

The above scheme makes sure that the return path is the same as the Sent path. ( Note: however, the return path of the packet need not be exactly equivalent to the sent packet ).

This scheme has several advantages

1. Very less effort to test the functionality of the new Addressing schemes
2. No ( very little ) user training
3. No Serious migration path
4. Once the new scheme stabilises, the routing tables will fall abruptly and we can use switches - not routers. we can make the backbone much faster
5. We can start reclaiming the IP address ( esp class A and class B users ) for the unallocated IP's
6. We can have a secure network

This is a very viable solution and should be experimented.
I trust in God.
Regards,
N.Rajeaswar.

Reference: Current IPv4 Frame

This message was sent to:

1. President of USA
2. President of India
3. Prime Minister of Canada
4. IETF ( directors...listed above)
5. To my Guru's for their blessings
6. Now to you
7. Spread this message and create awareness to as many as you can

No comments: