ipv6 deployment cases - apnictitle: before and after ipv4 address exhaustion isp author: maz created...
TRANSCRIPT
IPv6 deployment cases
Matsuzaki ‘maz’ Yoshinobu
2010/10/21 1Copyright (c) 2010 Internet Initiative Japan Inc.
IPv4 Address Exhaustion
• more users and devices, but not enough IPv4
• Remaining IPv4 Address Space Drops Below 5%
– as of 18/Oct/2010
– http://www.nro.net/media/remaining-ipv4-address-below-5.html
2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 2
One Internet
• it’s one of the greatest value of the internet
– people connected
• keep connected
– even “Before and After IPv4 Address Exhaustion”
• And we believe our customers need IPv6 to connect each other
2010/10/21 3Copyright (c) 2010 Internet Initiative Japan Inc.
myself and IIJ network
• myself
– senior engineer at IIJ
• IPv4 and IPv6 network, DNS, security and so on
– APOPS co-chair, APNIC IPv6 Tech sig chair
• IIJ
– pure IP network
– IIJ/AS2497 maintains its IP backbone in Japan and United States.
2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 4
IIJ’s IPv6 services
• 1st stage (1999-)
– connectivity
• including cache dns
• 2nd stage
– applications
• web, mail, dns, ntp
• 3rd stage (now)
– expanding services
2010/10/21 5Copyright (c) 2010 Internet Initiative Japan Inc.
business model for connectivity
• IIJ sells bandwidth
– Customers can select protocol(s) which should be forwarded on the link
• IPv4 only
• IPv4/IPv6 dual stack
• IPv6 only
– Or, customer can ask IPv6 over IPv4 tunnel for free.
Copyright (c) 2010 Internet Initiative Japan Inc. 62010/10/21
brief backbone topology
• dual stack as possible
2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 7
Tokyo#1
Tokyo#2Osaka#2
Osaka#1
Nagoya
New York
Ashburn
San Jose
Los Angeles
Palo Alto
IX IX
IX
IX
IX
IX
IXIX
routing protocols
IPv4
• OSPFv2– mostly area 0
– md5 authentication
• BGP4– peer through ipv4
– route-reflector
– md5 authentication
IPv6
• OSPFv3– area 0 only
– ipsec authentication
• BGP4+– peer through ipv6 global
– route-reflector (same as IPv4)
– md5 authentication
Copyright (c) 2010 Internet Initiative Japan Inc. 82010/10/21
OSPFv3 link cost
• We set the same link cost value as IPv4’s.
– The network topology is almost same.
– working fine
• When we were using RIPng as IGP (we had no choice at that time ), these were so much trouble.
Copyright (c) 2010 Internet Initiative Japan Inc. 92010/10/21
addressing
• /128 for loopback interfaces
• /64 for links
– /127 is used on several inter-router links
• static /48 for customer sites
– still considering the size
– possible sizes are: /48, /52, /56, /60, /64
• dynamic /64 for dynamic tunnel users
– via PPTP tunnel
Copyright (c) 2010 Internet Initiative Japan Inc. 102010/10/21
IPv6 experiences
• can clear away fear for IPv6
– it works!
• can improve awareness of IPv6
– production level services
• can convince your customers
– how we did, problems we met, solutions we did
2010/10/21 11Copyright (c) 2010 Internet Initiative Japan Inc.
iij.ad.jp DNS
2010/10/21 12Copyright (c) 2010 Internet Initiative Japan Inc.
iij.ad.jp. IN NS dns0.iij.ad.jp.iij.ad.jp. IN NS dns1.iij.ad.jp.
dns0.iij.ad.jp. IN A 210.138.174.16dns0.iij.ad.jp. IN AAAA 2001:240:bb41:8002::1:16dns1.iij.ad.jp. IN A 210.138.175.5dns1.iij.ad.jp. IN AAAA 2001:240:bb4c:8000::1:5
iij.ad.jp SMTP
2010/10/21 13Copyright (c) 2010 Internet Initiative Japan Inc.
iij.ad.jp. IN MX 10 omgi.iij.ad.jp.
omgi.iij.ad.jp. IN A 202.232.30.70omgi.iij.ad.jp. IN A 202.232.30.144omgi.iij.ad.jp. IN AAAA 2001:240:11e:6300::1:70omgi.iij.ad.jp. IN AAAA 2001:240:11e:6000::1:144
iij.ad.jp WEB
2010/10/21 14Copyright (c) 2010 Internet Initiative Japan Inc.
www.iij.ad.jp. IN A 210.130.137.80www.iij.ad.jp. IN AAAA 2001:240:bb42:b000::1:80
www-v4.iij.ad.jp. IN A 210.130.137.80www-v6.iij.ad.jp. IN AAAA 2001:240:bb42:b000::1:80
iij.ad.jp WEB
2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 15
CMS WEB CGIApache
Deploy
Apache
HTTP
HTTP/SSL
Apache
(Reverse proxy)
予備
Apache
- www.iij.ad.jp
-www.iij.com
gateway
Router Router
www www
IPv4/IPv6global
IPv4private
IPv4private
IIJ office
2010/10/21 16Copyright (c) 2010 Internet Initiative Japan Inc.
The Internet
c7401 cat4500
IPv6 FWIPv4 FW
datacenter
Global Routers
Internal Routers
Juniper SSG Juniper SSGFW-1 FW-1
Server Server
c7600 c7600Server Server
Core Switch
Core Switch
internal servers
Dual stack
IPv6
IPv4
demands for IPv6 services
• power users
• huge enterprises
• governments
• ISPs
• contents providers
2010/10/21 17Copyright (c) 2010 Internet Initiative Japan Inc.
demands for IPv6 information
• System Integrators
• ISPs
• vendors
– home gateways
– network equipments
• academies
2010/10/21 18Copyright (c) 2010 Internet Initiative Japan Inc.
publication
• IIJ publishes IPv6 deployment status of its services on www site.
– http://www.iij.ad.jp/service/IPv6schedule/
• This helps our customers to plan their IPv6 deployment.
Copyright (c) 2010 Internet Initiative Japan Inc. 192010/10/21
consumer service in japan
2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 20
The Internet
ISP
Access Network
CATVCATVISPISP ISP
ADSL, FTTH3G
The Access Network
• NTT’s NGN is the biggest in Japan.
– FLET’s service
• It will support IPv6 Internet services about Apr/2011
– ISP can start IPv6 services for consumers
2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 21
A CATV group established Docsis lab
2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 22
Asia Pacific region
• Asia Pacific IPv6 Task Force
– http://www.ap-ipv6tf.org/
2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 23
end-user environments analysis
• We gathered data from our cache DNS
– AAAA query rate
Copyright (c) 2010 Internet Initiative Japan Inc. 24
monitor
cache DNS
dns query
dns reply
root-servers
authoritative DNSend-users
2010/10/21
stacked query/sec graph
2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 25
observed querying end-hosts
2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 26
ratio of AAAA capable source
2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 27
Again, One Internet
• it’s one of the greatest value of the internet
– people connected
• And we believe our customers need IPv6 to connect each other
2010/10/21 28Copyright (c) 2010 Internet Initiative Japan Inc.