What are the disadvantages of the specific function of the router UPnP function?

The full name of UPnP is Universal Plug and Play. The UPnP specification is based on the TCP/IP protocol bai and a new Internet protocol for communication between devices. In fact, the formulation of UPnP is to hope that all devices connected to the Internet in the future can communicate with each other without being hindered by gateways.

Enter the router's web control interface, turn on the router's UPnP function, enter the router's address in the browser, enter the router's management page, find the UPnP function, and set it to Enable.

1. The role of opening UPnP

1. After UPnP is turned on, it is convenient for the smart Bai monitoring equipment to transmit directly to the Internet, without the need for cumbersome mapping port settings.

2. After UPnP is turned on, it can facilitate data transmission between smart network storage devices and the Internet, saving manual setting time.

3. After UPnP is turned on, it is convenient to use ERP, CRM, and third-party remote desktop software on the Internet.

4. After UPnP is turned on, the P2P success rate of AnyChat system can be improved and the bandwidth of the server can be saved.

2. Disadvantages of UPnP

1. There are no checks and restrictions on the use of the buffer. External attackers can obtain control privileges of the entire system here. Because the UPnp function must use the computer's ports to work, an attacker who gains control may also use these ports to achieve the attacker's purpose.

2. It may lead to "Denial of Service" attacks. Enable "device discovery" when working with UPnP. Discovery of devices can be divided into two situations: if a computer with UPnP function boots successfully and connects to the network, it will immediately send a "broadcast" to the network to notify the UPnP devices on the network that it is ready.

At the programming level, the broadcast content is an M-SEARCH (message) indication. The broadcast will be "heard" by all devices within the "sound reach" range, and will feed back relevant information to the computer for subsequent control.

3. The UPnP function continuously consumes its own network resources during the use phase. When the device network resources are exhausted, a suspended animation will appear.

3. Advantages and characteristics of UPnP function

1. Use the network as the application environment, without considering the computers in the "island".

2. Based on TCP/IP and the entire Internet. This is "neutral", does not depend on any operating system or application, does not use specific API functions, is not limited by the programming language, and can seamlessly access traditional networks.

3. The device can dynamically enter the network, and then obtain an IP address, learn or search for information about the operation and service it should perform, and perceive whether other devices exist, their role and current status.

4. Each device can read its own, specific status and parameters. After the control operation is completed, a response signal that the operation is completed can be sent out. If it fails, it should send out a control failure signal.

Fourth, the practical application of UPnP technology

1. Network address translation 

The addressing system on the Internet has been developed long before the emergence of millions of home networks and the number is still growing.

NAT expects all network applications to communicate in a standard way (that is, using the IP address in the packet header), but some network programs anticipate the existence of NAT. They use the embedded IP address that NAT cannot translate. At this time, they need the UPnP function to assist in message forwarding.

2. NAT traversal technology 

NAT traversal technology allows network applications to detect whether they are behind a UPnP-capable NAT device. These programs will then obtain a shared globally routable IP address.

All of this is done automatically, and users do not need to manually map ports or perform other tasks. NAT traversal technology allows network devices or peer-to-peer applications to dynamically open and close communication ports with external services to communicate with the outside world through the NAT gateway.

Guess you like

Origin blog.csdn.net/jayjaydream/article/details/114208049