Practical IPv6 for Government · Department of Internal Affairs GCIO role •Lead the overall ICT advice and assurance system •Provide a single point of coordination for agencies

Practical IPv6 for Government

Department of Internal Affairs

www.ipv6.govt.nz

Stuart Wakefield, Director Office of the GCIO

Robert White, Solutions Architect

Rowan Smith, Senior Advisor

Feb 2012

Department of Internal Affairs www.ipv6.govt.nz

GCIO role

• Lead the overall ICT advice and assurance

system

• Provide a single point of coordination for

agencies

• Provide support and advice to agency ICT

strategies

Directions and Priorities for Government ICT

Current State

• Tight fiscal environment – no more money for the foreseeable future.

• User expectations of government services are increasing.

• Government needs ICT to be more efficient, flexible, and focus on building services that are very easy to use.

• 80%1 of technology spending is used to maintain current state, leaving 20% or less for improving services, innovation and opening up data.

• Fragmented approach is a hand-brake on shared solutions, standardisation and freeing up money for improvement.

• We are slow to exploit ICT and spread innovation. Good ideas and resources are not shared.

• Funding models result in a silo approach to ICT investment.

• Duplicated infrastructure and services in ICT is costly.

• Poor ICT literacy, knowledge and skills in the current State Services workforce.

1- Government Use of ICT survey 2008

Current State

• Tight fiscal environment – no more money for the foreseeable future.

• User expectations of government services are increasing.

• Government needs ICT to be more efficient, flexible, and focus on building services that are very easy to use.

• 80%1 of technology spending is used to maintain current state, leaving 20% or less for improving services, innovation and opening up data.

• Fragmented approach is a hand-brake on shared solutions, standardisation and freeing up money for improvement.

• We are slow to exploit ICT and spread innovation. Good ideas and resources are not shared.

• Funding models result in a silo approach to ICT investment.

• Duplicated infrastructure and services in ICT is costly.

• Poor ICT literacy, knowledge and skills in the current State Services workforce.

1- Government Use of ICT survey 2008

Future State

• Government delivers services as a seamless customer experience.

• ICT investment is focused and prioritised.

• Government information and data is used by the market to deliver innovative services.

• ICT systems are designed and run in a way that meets privacy and security requirements

• Leadership puts priority on business improvement and common capability.

• Customers and innovators outside government are helping to improve our services.

• Common approaches are adopted for common needs, shifting the focus of agency ICT functions towards the effective delivery of core business objectives and priorities.

• New and innovative ideas and resources are pooled and built on.

• ICT operational management is more cost effective.

• Greater ICT literacy in the State Services workforce

Future State

• Government delivers services as a seamless customer experience.

• ICT investment is focused and prioritised.

• Government information and data is used by the market to deliver innovative services.

• ICT systems are designed and run in a way that meets privacy and security requirements

• Leadership puts priority on business improvement and common capability.

• Customers and innovators outside government are helping to improve our services.

• Common approaches are adopted for common needs, shifting the focus of agency ICT functions towards the effective delivery of core business objectives and priorities.

• New and innovative ideas and resources are pooled and built on.

• ICT operational management is more cost effective.

• Greater ICT literacy in the State Services workforce

ICT is central to the delivery of lower cost, higher quality public services


Governance system

Government

Enterprise

Architecture Group

ICT Supply

Management Group

Ministerial Committee on Government ICT

ICT Strategy Group

Government ICT Council

Planning

Group 1

Planning

Group 2

Planning

Group n...

Programme Programme Programme...

Chair

CIO 1 CIO 8...

Chair

Data and Information

Re-use Chief

Executives Steering

Group

Working Group

Programme

Office of the GCIO

Advise,

Co-ordinate,

Integrate,

Secretariat,

Support

Programme


Governance - ICT Council

ICT Council considered IPv6 in November 2011


GCIO Circular #1

Agencies, through the course

of technology and

application refresh cycles or

where funding is available,

are expected to:

• ensure all public/external Internet facing services (e.g. websites,

email, DNS) are accessible and operationally use IPv6

• ensure that internal networks, applications and devices

operationally use IPv6

• provide status updates on their progress to the Office of the GCIO.


Common capabilities – IPv6 status

• one.govt

• igovt (release 10)

• Infrastructure as a

Service

• Common Web

Services (part of

specification)


NZ IPv6 readiness


Other early adopters

• Ministry of Cultural & Heritage has IPv6 enabled many of

their web sites

• Ministry of Science + Innovation has enabled their web

site for IPv6

• Tauranga City Council has enabled IPv6 to many web

sites

• Department of Statistics has an IPv6 Programme


The DIA experience to date… [Robert White]


Some IPv6 myths found in DIA

• That there is backward compatibility between

IPv4 and IPv6

• That it will cost you a lot of money

• That DIA may enough IPv4 addressing so we

don’t need to do anything

• That it would be hard!


What has DIA done so far ?

• Oct 2010 Ensured .govt.nz DNS platform is fully IPv6 ready

• Jan 2011 Stood up a IPv6 Government pilot website that is accessible by both IPv4 and IPv6 clients [dual stack]. (www.ipv6.govt.nz)

• Ensuring common capability services i.e. one.govt, IaaS, iGovt and Common Web Services will be or are IPv6 ready

• Using 30+ IPv6 ready WAN links [one.govt] and IPv6 ready Internet links [one.govt]

http://www.ipv6.govt.nz/


What has DIA done so far continued…

• Jan 2012: Launched an eLearning web based

application ilearn.dia.govt.nz [dual stack]

• Feb 2012: Enabled IPv6 access [dual stack] to

the following existing web sites:

webstandards.govt.nz

data.govt.nz

dns.govt.nz


What DIA is looking to do next

• Tactical: Looking to IPv6 enable some more web sites

• Tactical: Recognising any other quick win opportunities

• Strategic: Ensuring IPv6 will be a requirement for the existing web optimisation project

• Strategic: DIA is looking at a redevelopment of its entire network. IPv6 will be a requirement


Government Common Capability

• one.govt

• Infrastructure as a Service [IaaS]

• iGovt

• Common Web Services


one.govt

Existing services that are IPv6 ready

• Internet [access bandwidth]

• WAN [links]

• Secure WAN* [encrypted]

• Web Protection Service [Outbound Web Filtering]

• Email Protection Service [Email Filtering]

• Voice Gateway [SIP gateway]

* To be tested


one.govt continued…

Forthcoming Services that will be IPv6 ready

• Video gateway [to be released]

• Managed Firewall [TBA]


Infrastructure as a Service [IaaS]

All services required to be IPv6 ready

• Servers

• Supporting Network Infrastructure i.e. switches, firewalls,

internet access etc


iGovt

Release 10 intended to be IPv6 ready

• Targeted for end of FY 2012



Common Web Services

• ICT Council has approved for RFP to go market to

provide web hosting, CMS, Internet access etc

• Shared platform for informational web sites, re-usable

tools, components and widgets etc

• Dual stack IPv4 / IPv6 will be a requirement of the RFP

• Time frames RFP March 2012

Contract ~ June / July

Operational 4Q2012


What you should consider…

• Understand the business risk

• Understand IPv6 readiness of your vendors,

esp. ISPs & hosting providers

• Ensure IPv6 is a requirement for any new or

refreshed public facing Internet services

• Make your existing external facing web sites IPv6

accessible


Questions

For more information:

www.ipv6.govt.nz

www.ict.govt.nz

[email protected]

Documents

Practical IPv6 for Government · Department of Internal Affairs GCIO role •Lead the overall ICT advice and assurance system •Provide a single point of coordination for agencies