ipv6 deployment for broadband internet by azura mat salim

IPv6 Deployment for Broadband Internet in TM MyNOG-328th November 2013

Azura Mat Salim Network Architecture & Technology PlanningTelekom Malaysia

TM has deployed IPv6 beginning 2004

• Tunnel over existing IPv4 ISP backbone

• Very few customers and peering connections back then

• 6PE was introduced with the new IP Core network in 2007

• PE routers are dual-stack and terminate customer circuits while the core routers remain in IPv4 MPLS

• Compliance audit on network readiness in 2008

• And things remained quiet until April 2011!

Background

We received our first IPv6 prefix way back in 2004. During that time, IPv6 was deployed via tunnels created over our existing IPv4 ISP backbone to a dedicated IPv6 gateway router. There were very few customers and peering connections back then. A few years after that a new core network was built and 6PE was introduced. With it, all PE routers/Edge are dual-stacked and terminated customer circuits while the core routers remain IPv4 MPLS. The ‘new’ network ‘then’ went through the IPv6 1st Phase compliance Audit by MCMC in 2008. Anddd things remained low key until April 2011. - APNIC announced it had reached its last /8 block of IPv4. The IPv6 adoption only started to pick up when the reality of IPv4 address exhaustion finally sinks in.

Get everyone involved..

Background

NetworkInfrastructure IT Systems

Product Portfolio

Training & Awareness

SteeringCommittee

Operations & Maintenance IPv6

The message at that time was clear - we had to accelerate and propagate the use of IPv6. This is only possible in the organization if IPv6 is seen and valued as more than just a ‘network’ thing. And so, a steering committee was formed , consisting of all stakeholders (basically the bosses) to get their buy-ins and commitment. Once we had everyone on board, things progressed easier.. and faster. Of course the network infrastructure is key and we began putting necessary IPv6 technical specs as mandatory followed by extensive service design & testing. We also got our IT dept to jump in to ensure that the IT support systems; NMS and the Local Area Network made plans to enable IPv6 as well. From product perspective of course, to start offering IPv6 commercially. In 2011, we started offering 2 services with IPv6 ie the Internet Access for Business Corporations and Govt Agencies in both domestic & global market. And the focus of today’s session would be on our IPv6 broadband. Training & awareness is an ongoing process. IPv6 certifications are being provided at our training college, in fact, my standig here is also part and parcel of providing awareness. Training is especially required and in fact- still on-going to equip our ground ppl doing O&M to be able to respond to any queries regarding IPv6 in our service deployment.

TM has established IPv6 peering sessions with major ISPs and content providers globally

Cable & Wireless

Singapore

San Jose Ashburn

Amsterdam

Frankfurt London

Verizon AMS-IX

DE-CIX

LINX

Google

Google

Hong Kong

TATA Sprint

Savvis

TINET

NTT

Telia Sonera

Verizon

KINX

JPIX

This on-going effort will benefit our Internet service customers. To date, TM has over 100 IPv6 partners globally

Background

Domestic IPv6 peering over MyIX

Background

MyIX

Aktifnet

Requirements for IPv6 in TM broadband Internet

• Scope : Internet on high-speed DSL & fiber (FTTx) for both residential and business packages

• Provide end-to-end IPv6 connectivity; WAN IP & LAN IP (globally routable)

• Will work with existing PPPoE model and network elements

• Continue to support existing IPv4 addresses

High-Level Implementation

Network requirements to support dual-stack in the broadband ecosystem


Host Modem/CPE BNG Support Systems

• IPv6-compliant OS• Supported software• Gets public IPv6 LAN

•IPv6 support over PPP•Able to carry IPv4 and IPv6 on a single PPP•IPv6CP to negotiate link local using Interface-ID•Establish WAN IP with NDRA •SLAAC •DHCPv6•DHCPv6-PD to delegate prefix to subscribers (LAN)

•AAA : New AAA IPv6 attributes for dynamic and fixed IP assignment

•DNS : Dual-stack DNS servers and all name servers

•IPAM : Introduce IPv6 subnetting algorithm in existing IPAM (maintain same GUI) - in-house development with TM R&D

•Order Capture & Billing : Existing customers able to request for dual-stack

•Duplicate-Address-Detection •Anti IPv6 Spoofing filters

How does it work?

Host Modem/CPE BNGRadius

SubscribersOrder Capture & Provisioning

User requests for IPv6

+ Appends IPv6 attributes to subscriber profile

IPAM

Fetch IPv6 Prefixes based on package

+ Framed-IPv6-Prefix+ Delegated-IPv6-Prefix + Framed-IPv6-Pool

} where applicable


1.CPE establishes normal IPv4 PPP IPCPv42. CPE establishes IPv6CP and negotiates link-local by generating an Interface-ID3. Once link-local is established, ICMPv6 RS & RA is exchanged (NDRA) & BNG returns the Framed-IPv6-Prefix (WAN)

4. DHCPv6 Request - Reply will return the Delegated Prefix (LAN) and DNS

5. CPE provides the DNS and Delegated Prefix (LAN) to host

Subscribers on IPv6

• As of 20th Nov 2013, an average of ~15000 dual-stack subs daily are seen

• Statistics based on active IPv6 LAN delegated prefix to include only subs that are accessing using IPv6, instead of WAN IP assignment

• Majority of users do not realize nor care that they are already on IPv6

• Foresee natural growth in 2014 due to increased user awareness and IPv6-compatible devices in the market

IPv6 Statistics

Overall IPv6 traffic increased after IPv6 for broadband was activated

IPv6 Statistics

• Traffic increase observed although IPv6 traffic is still only <1% of TM’s total Internet traffic •65% of IPv6 traffic is from Google CDN•13.5% of IPv6 traffic is from Akamai CDN

Don’t Panic! No forced migration

Deployment Strategy

Network & system readiness

Rollout of IPv6-compliant modem to new subs

1 2

Push configuration to new and existing subs

3

Subs with compliant IPv6-CPE & hosts are

dual-stack

Subs acquire IPv6-compliant CPE & Hosts at their own capacity

Increase in dual-stack

subs

Education & Awareness

(2012) (2013) (2014-2015)

Challenges in deploying IPv6 to broadband Internet

• Graceful migration for ~2 Million subscribers

• Dual-stack incur double resources in the network as well as IP address

• Modem hardware/firmware upgrade

• Vendor support for technical specification

• Don’t hope for any killer application - simply preparing this generation for the Internet of Things

Challenges & Observation

Observation

• Misconception: IPv6 brings more bandwidth or speed than IPv4

• Much time spent on troubleshooting connectivity issue at CPE/modem

• Behavior of application in dual-stack

• Some Common Questions :

➡ When will TM offer IPv6?

➡How many IP addresses will I get?

➡Will TM replace my modem?


Online help is available


Thank You

[email protected]