Host Identity Protocol (HIP): Towards the Secure Mobile Internet

One of the challenges facing the current Internet architecture is the incorporation of mobile and multi-homed terminals (hosts), and an overall lack of protection against Denial-of-Service attacks and identity spoofing. The Host Identity Protocol (HIP) is being developed by the Internet Engineering Task Force (IETF) as an integrated solution to these problems. The book presents a well-structured, readable and compact overview of the core protocol with relevant extensions to the Internet architecture and infrastructure. The covered topics include the Bound End-to-End Tunnel Mode for IPsec, Overlay Routable Cryptographic Hash Identifiers, extensions to the Domain Name System, IPv4 and IPv6 interoperability, integration with SIP, and support for legacy applications.

Unique features of the book:

• All-in-one source for HIP specifications
• Complete coverage of HIP architecture and protocols
• Base exchange, mobility and multihoming extensions
• Practical snapshots of protocol operation
• IP security on lightweight devices
• Traversal of middleboxes, such as NATs and firewalls
• Name resolution infrastructure
• Micromobility, multicast, privacy extensions
• Chapter on applications, including HIP pilot deployment in a Boeing factory
• HOWTO for HIP on Linux (HIPL) implementation  

An important compliment to the official IETF specifications, this book will be a valuable reference for practicing engineers in equipment manufacturing companies and telecom operators, as well as network managers, network engineers, network operators and telecom engineers. Advanced students and academics, IT managers, professionals and operating system specialists will also find this book of interest.

「在眾多為網際網路設計的識別符號與定位器分離方案中，HIP已經比其他任何方案都更進一步。現在是時候看看HIP在現實世界的大規模應用了。為了實現這一目標，世界需要一本HIP書籍，現在我們有了。」- Jari Arkko，IETF網際網路領域主任

目前網際網路架構面臨的一個挑戰是整合移動和多宿主（主機）終端，以及對阻斷服務攻擊和身份欺騙的整體缺乏保護。主機身份協議（HIP）正在由網際網路工程任務組（IETF）開發，作為這些問題的綜合解決方案。本書提供了一個結構良好、易讀且簡潔的核心協議概述，並涵蓋了與網際網路架構和基礎設施相關的擴展。涵蓋的主題包括用於IPsec的邊對邊隧道模式、覆蓋式可路由的加密哈希識別符、對域名系統的擴展、IPv4和IPv6的互操作性、與SIP的整合以及對遺留應用的支援。

本書的獨特特點包括：
- HIP規範的一站式來源
- 完整介紹HIP架構和協議
- 基礎交換、移動和多宿主擴展
- 協議操作的實用快照
- 輕量級設備上的IP安全性
- 穿越NAT和防火牆等中間盒的遍歷
- 名稱解析基礎設施
- 微移動、多播、隱私擴展
- 應用程式章節，包括在波音工廠中進行的HIP試點部署
- Linux上HIP（HIPL）實現的HOWTO

作為IETF官方規範的重要補充，本書將成為設備製造公司和電信運營商的實踐工程師以及網絡管理人員、網絡工程師、網絡運營商和電信工程師的寶貴參考資料。高級學生和學者、IT經理、專業人士和操作系統專家也會對本書感興趣。