IPv6 deployment cases - APNICTitle: Before and After IPv4 Address Exhaustion ISP Author: maz Created...

IPv6 deployment cases

Matsuzaki ‘maz’ Yoshinobu

<maz@iij.ad.jp>

2010/10/21 1Copyright (c) 2010 Internet Initiative Japan Inc.

IPv4 Address Exhaustion

• more users and devices, but not enough IPv4

• Remaining IPv4 Address Space Drops Below 5%

– as of 18/Oct/2010

– http://www.nro.net/media/remaining-ipv4-address-below-5.html

2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 2

One Internet

• it’s one of the greatest value of the internet

– people connected

• keep connected

– even “Before and After IPv4 Address Exhaustion”

• And we believe our customers need IPv6 to connect each other

2010/10/21 3Copyright (c) 2010 Internet Initiative Japan Inc.

myself and IIJ network

• myself

– senior engineer at IIJ

• IPv4 and IPv6 network, DNS, security and so on

– APOPS co-chair, APNIC IPv6 Tech sig chair

• IIJ

– pure IP network

– IIJ/AS2497 maintains its IP backbone in Japan and United States.

2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 4

IIJ’s IPv6 services

• 1st stage (1999-)

– connectivity

• including cache dns

• 2nd stage

– applications

• web, mail, dns, ntp

• 3rd stage (now)

– expanding services

2010/10/21 5Copyright (c) 2010 Internet Initiative Japan Inc.

business model for connectivity

• IIJ sells bandwidth

– Customers can select protocol(s) which should be forwarded on the link

• IPv4 only

• IPv4/IPv6 dual stack

• IPv6 only

– Or, customer can ask IPv6 over IPv4 tunnel for free.

Copyright (c) 2010 Internet Initiative Japan Inc. 62010/10/21

brief backbone topology

• dual stack as possible

2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 7

Tokyo#1

Tokyo#2Osaka#2

Osaka#1

Nagoya

New York

Ashburn

San Jose

Los Angeles

Palo Alto

IX IX

IX

IX

IX

IX

IXIX

routing protocols

IPv4

• OSPFv2– mostly area 0

– md5 authentication

• BGP4– peer through ipv4

– route-reflector

– md5 authentication

IPv6

• OSPFv3– area 0 only

– ipsec authentication

• BGP4+– peer through ipv6 global

– route-reflector (same as IPv4)

– md5 authentication

Copyright (c) 2010 Internet Initiative Japan Inc. 82010/10/21

OSPFv3 link cost

• We set the same link cost value as IPv4’s.

– The network topology is almost same.

– working fine

• When we were using RIPng as IGP (we had no choice at that time ), these were so much trouble.

Copyright (c) 2010 Internet Initiative Japan Inc. 92010/10/21

addressing

• /128 for loopback interfaces

• /64 for links

– /127 is used on several inter-router links

• static /48 for customer sites

– still considering the size

– possible sizes are: /48, /52, /56, /60, /64

• dynamic /64 for dynamic tunnel users

– via PPTP tunnel

Copyright (c) 2010 Internet Initiative Japan Inc. 102010/10/21

IPv6 experiences

• can clear away fear for IPv6

– it works!

• can improve awareness of IPv6

– production level services

• can convince your customers

– how we did, problems we met, solutions we did

2010/10/21 11Copyright (c) 2010 Internet Initiative Japan Inc.

iij.ad.jp DNS

2010/10/21 12Copyright (c) 2010 Internet Initiative Japan Inc.

iij.ad.jp. IN NS dns0.iij.ad.jp.iij.ad.jp. IN NS dns1.iij.ad.jp.

dns0.iij.ad.jp. IN A 210.138.174.16dns0.iij.ad.jp. IN AAAA 2001:240:bb41:8002::1:16dns1.iij.ad.jp. IN A 210.138.175.5dns1.iij.ad.jp. IN AAAA 2001:240:bb4c:8000::1:5

iij.ad.jp SMTP

2010/10/21 13Copyright (c) 2010 Internet Initiative Japan Inc.

iij.ad.jp. IN MX 10 omgi.iij.ad.jp.

omgi.iij.ad.jp. IN A 202.232.30.70omgi.iij.ad.jp. IN A 202.232.30.144omgi.iij.ad.jp. IN AAAA 2001:240:11e:6300::1:70omgi.iij.ad.jp. IN AAAA 2001:240:11e:6000::1:144

iij.ad.jp WEB

2010/10/21 14Copyright (c) 2010 Internet Initiative Japan Inc.

www.iij.ad.jp. IN A 210.130.137.80www.iij.ad.jp. IN AAAA 2001:240:bb42:b000::1:80

www-v4.iij.ad.jp. IN A 210.130.137.80www-v6.iij.ad.jp. IN AAAA 2001:240:bb42:b000::1:80

iij.ad.jp WEB

2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 15

CMS WEB CGIApache

Deploy

Apache

HTTP

HTTP/SSL

Apache

(Reverse proxy)

予備

Apache

- www.iij.ad.jp

-www.iij.com

gateway

Router Router

www www

IPv4/IPv6global

IPv4private

IPv4private

IIJ office

2010/10/21 16Copyright (c) 2010 Internet Initiative Japan Inc.

The Internet

c7401 cat4500

IPv6 FWIPv4 FW

datacenter

Global Routers

Internal Routers

Juniper SSG Juniper SSGFW-1 FW-1

Server Server

c7600 c7600Server Server

Core Switch

Core Switch

internal servers

Dual stack

IPv6

IPv4

demands for IPv6 services

• power users

• huge enterprises

• governments

• ISPs

• contents providers

2010/10/21 17Copyright (c) 2010 Internet Initiative Japan Inc.

demands for IPv6 information

• System Integrators

• ISPs

• vendors

– home gateways

– network equipments

• academies

2010/10/21 18Copyright (c) 2010 Internet Initiative Japan Inc.

publication

• IIJ publishes IPv6 deployment status of its services on www site.

– http://www.iij.ad.jp/service/IPv6schedule/

• This helps our customers to plan their IPv6 deployment.

Copyright (c) 2010 Internet Initiative Japan Inc. 192010/10/21

consumer service in japan

2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 20

The Internet

ISP

Access Network

CATVCATVISPISP ISP

ADSL, FTTH3G

The Access Network

• NTT’s NGN is the biggest in Japan.

– FLET’s service

• It will support IPv6 Internet services about Apr/2011

– ISP can start IPv6 services for consumers

2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 21

A CATV group established Docsis lab

2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 22

Asia Pacific region

• Asia Pacific IPv6 Task Force

– http://www.ap-ipv6tf.org/

2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 23

end-user environments analysis

• We gathered data from our cache DNS

– AAAA query rate

Copyright (c) 2010 Internet Initiative Japan Inc. 24

monitor

cache DNS

dns query

dns reply

root-servers

authoritative DNSend-users

2010/10/21

stacked query/sec graph

2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 25

observed querying end-hosts

2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 26

ratio of AAAA capable source

2010/10/21 Copyright (c) 2010 Internet Initiative Japan Inc. 27

Again, One Internet

• it’s one of the greatest value of the internet

– people connected

• And we believe our customers need IPv6 to connect each other

2010/10/21 28Copyright (c) 2010 Internet Initiative Japan Inc.