34
Securing Future Growth: Getting Ready for IPv6 NOW! ccTLD Workshop, 8 th April 2011 Noumea, New Caledonia Miwa Fujii, Senior IPv6 Program Specialist, APNIC

Securing Future Growth: Getting Ready for IPv6 NOW!

  • Upload
    hanne

  • View
    26

  • Download
    0

Embed Size (px)

DESCRIPTION

Securing Future Growth: Getting Ready for IPv6 NOW!. ccTLD Workshop, 8 th April 2011 Noumea, New Caledonia Miwa Fujii, Senior IPv6 Program Specialist, APNIC. Overview. APNIC and APNIC IPv6 Program IPv4 addresses exhaustion and need to adopt IPv6 Multi-Stakeholder approach - PowerPoint PPT Presentation

Citation preview

Page 1: Securing Future Growth: Getting Ready for IPv6 NOW!

Securing Future Growth:Getting Ready for IPv6 NOW!

ccTLD Workshop, 8th April 2011

Noumea, New Caledonia

Miwa Fujii,

Senior IPv6 Program Specialist, APNIC

Page 2: Securing Future Growth: Getting Ready for IPv6 NOW!

Overview

• APNIC and APNIC IPv6 Program

• IPv4 addresses exhaustion and need to adopt IPv6

• Multi-Stakeholder approach• TLDs, Registrars, Domain name users

(Content providers)

• Working together with the domain name registries and registrars• How can we work together?

Page 3: Securing Future Growth: Getting Ready for IPv6 NOW!

APNIC and IPv6 Program

• Regional Internet Registries (RIR)• Asia Pacific Network Information Centre

(APNIC)• Open membership-based industry bodies• Non-profit, neutral, and independent• Internet resource allocation, registration and

other services such as training, supporting infrastructure, community cooperation

• APNIC IPv6 Program• To support the Industry to transit to IPv6• To outreach Internet multi-stakeholders

Page 4: Securing Future Growth: Getting Ready for IPv6 NOW!

Growth of the Internet

http://news.netcraft.com/archives/2009/04/06/april_2009_web_server_survey.html

205 million websites as of July 2010 (Netcraft)

Page 5: Securing Future Growth: Getting Ready for IPv6 NOW!

IPv4 addresses exhaustion and need to adopt IPv6

• 3 Feb 2011• Number Resource Organization (NRO)

announced the free pool of available IPv4 addresses is now fully depleted

• The free pool of available IPv4 addresses at APNIC will exhaust around May 2011

• Need to deploy IPv6

IANA

APNIC ARIN RIPELACNICAfriNIC

Page 6: Securing Future Growth: Getting Ready for IPv6 NOW!

Global announcements and press conference by ICANN and

NRO

6

http://www.apnic.net/publications/news/2011/final-five

http://www.apnic.net/publications/news/2011/webcast

Page 7: Securing Future Growth: Getting Ready for IPv6 NOW!

IPv4 Consumption: Projection

7

IANA IPv4 free pool exhausted: 01/02/2011Projected RIR exhaustion: 21/04/2011

http://www.potaroo.net/tools/ipv4/index.html Mar /2011

Page 8: Securing Future Growth: Getting Ready for IPv6 NOW!

APNIC IPv4 Availability (/8)

8 http://www.apnic.net/community/ipv4-exhaustion/graphical-information

Page 9: Securing Future Growth: Getting Ready for IPv6 NOW!

APNIC IPv4 Availability (/8)

9 http://www.apnic.net/community/ipv4-exhaustion/graphical-information

• It shows the daily total of available IPv4 addresses, expressed in terms of /8s.

• The total will decrease and increase according to APNIC allocations to networks and resource returns.

• When APNIC only has a total of one /8 left, the final /8 policy will be triggered.

Page 10: Securing Future Growth: Getting Ready for IPv6 NOW!

IPv4 exhaustion planning

Appropriate policies/procedures applied at different stage

10

We are here now

Page 11: Securing Future Growth: Getting Ready for IPv6 NOW!

APNIC IPv4 address management policy changes

• IPv4 policy during Stages 1 and 2• Address policy remains the same until

APNIC reaches the final /8

• IPv4 policy during Stage 3• To extend the life of APNIC’s last /8, each

organization can only receive a limited size from it

• Current policy: limited to a single /22• Policy refinement being discussed

11

Page 12: Securing Future Growth: Getting Ready for IPv6 NOW!

When will APNIC’s final /8 be exhausted?

• APNIC IPv4 address management policy• 9.10 Distribution of the final /8 worth of space in

the unallocated APNIC IPv4 address pool• http://www.apnic.net/policy/add-manage-policy#9.10• A total of around 16,000 small slices that can be

given out from this final /8. • Currently, APNIC has around 3000 account holders.• A membership growth rate of 300 new accounts

during the past year. • Given these variables, it will take a number of years

to allocate all addresses from this final /8.

• And of course, IPv6 is available!12 http://www.apnic.net/community/ipv4-exhaustion/ipv4-exhaustion-details

Page 13: Securing Future Growth: Getting Ready for IPv6 NOW!

Impact of IPv4 address exhaustions

• Immediate impact• ISPs will no longer be able to obtain IPv4 addresses

from APNIC• Survive for a short time of period with their own pool• Business continuity of ISPs and other Internet multi-

stakeholders is in question• Need to find alternative source for IPv4 addresses

• No sustainable alternative options

• Prolonged impact• Difficulties to maintain sustainable Internet growth• No more new entries to the Internet market place• Impediment of further technological development

• IPv6 is the only option we have now

Page 14: Securing Future Growth: Getting Ready for IPv6 NOW!

IPv6 Readiness at ccTLDs

• 150 ccTLDs name servers out of 253 (listed in IANA Roort zone database including gTLDs etc.) have IPv6 address resolution function (around 60%) • Statistics provided by National Centre for High-

Performance Computing in Taiwan, as of March 2010

• 15 gTLD out of 21 gTLD name servers have IPv6 address resolution function (70%)

• IPv6 readiness of direct customers of TLDs and registrars?

http://www.ipdn.tw/DomainNameResources/RegistccTLDDNwwwServiceRatio

Page 15: Securing Future Growth: Getting Ready for IPv6 NOW!

What ccTLDs need to do?

• Ability to accept AAAA records for their domain name servers - glue records

• Name resolution over IPv6• Adapt DNS software applications allow:

• Adapting domain name resolution with IPv6• Accepting incoming connections (both UDP and TCP

as appropriate) over IPv6

• Network infrastructure ready for IPv6 transport:• Router configuration, firewall and IPv6 transit etc.

• Ability to access administrative tools • web, WHOIS, EPP, etc. over IPv6

http://portalipv6.lacnic.net/en/ipv6/ipv6/cctld/ipv6-cctlds

Page 16: Securing Future Growth: Getting Ready for IPv6 NOW!

IPv6 Readiness of IPv6 glue records within ccTLDs

• Registered domains with AAAA records

http://bgp.he.net/ipv6-progress-report.cgi

Page 17: Securing Future Growth: Getting Ready for IPv6 NOW!

IPv6 Readiness of Direct Customers of ccTLDs

• Registered domains with AAAA records

http://bgp.he.net/ipv6-progress-report.cgi

We can assume:

Direct customers of TLDs and registrars need to accelerate IPv6 transition.

How can you/we help them to make a smooth transition to IPv6?

What kinds of messages will help them?

Page 18: Securing Future Growth: Getting Ready for IPv6 NOW!

IPv6 Readiness of Registrars

• People and organizations connecting to the Internet after mid 2011:• Will find difficulty in obtaining IPv4 global addresses:

• It could be more expensive• It may require more complicated technical adjustments to

penetrate multiple NATs• IDNs and new TLDs will push for more IPv4 addresses

• They may choose an option to use IPv6 only websites

• Are registrars ready for such challenges?• How can you/we support them in transitioning to

IPv6?

Page 19: Securing Future Growth: Getting Ready for IPv6 NOW!

Customers will choose Registrars

http://www.webhostingtalk.com/showthread.php?t=921661

Page 20: Securing Future Growth: Getting Ready for IPv6 NOW!

Customers will move to IPv6-Ready Services

http://blog.mudy.info/tag/ipv6/

Page 21: Securing Future Growth: Getting Ready for IPv6 NOW!

Customers will move to IPv6-Ready Services

http://blog.mudy.info/tag/ipv6/

Page 22: Securing Future Growth: Getting Ready for IPv6 NOW!

Major content providers also need to be ready with IPv6

• Major content providers• News media• Online banking• Online shopping site• E-Government site• Enterprise web site• School web site• Etc.

Page 23: Securing Future Growth: Getting Ready for IPv6 NOW!

If an online shopping site is ready with IPv4 and IPv6…

23

IPv4 address onlyIPv4 and IPv6 address

IPv6 address only

Page 24: Securing Future Growth: Getting Ready for IPv6 NOW!

If an online shopping site is ready with IPv4 and IPv6…

24

IPv4 address onlyIPv4 and IPv6 address

All customers can do online shopping

IPv6 address only

Page 25: Securing Future Growth: Getting Ready for IPv6 NOW!

If a site is not ready for IPv6…

25

Page 26: Securing Future Growth: Getting Ready for IPv6 NOW!

If a site is not ready for IPv6…

26 Users with IPv6 address only

Page 27: Securing Future Growth: Getting Ready for IPv6 NOW!

Mobile devices and smart phones!!

27 Users with IPv6 address only

Page 28: Securing Future Growth: Getting Ready for IPv6 NOW!

If a site is not ready for IPv6…

28

Customers will move to elsewhere…

Need to transit to IPv6!

Page 29: Securing Future Growth: Getting Ready for IPv6 NOW!

What can we do to support IPv6 transition?

• Reach out to registrars, content providers including enterprises• i.e., customers of TLDs and registrants

• APNIC’s message will be:• IPv6 is a reality and a business continuity issue

• Your web, mail and other servers need to be ready with IPv6

• Simple process• Easy access to IPv6 with APNIC• Like IPv4 Multihoming, enterprises need IPv6

Multihoming as well

Page 30: Securing Future Growth: Getting Ready for IPv6 NOW!

IPv6 Kickstart

Page 31: Securing Future Growth: Getting Ready for IPv6 NOW!

Useful information for busy people

• APNIC ICONS IPv6 web page• http://icons.apnic.net/display/IPv6/Home

Page 32: Securing Future Growth: Getting Ready for IPv6 NOW!

IPv6 address assignment for critical infrastructure

• APNIC IPv6 policy has been ready:• IPv6 address assignment for critical

infrastructure networks• http://www.apnic.net/policy/ipv6-address-poli

cy#5.9.3• global top level domain (gTLD) nameservers;• country code TLD (ccTLDs) nameservers;

Page 33: Securing Future Growth: Getting Ready for IPv6 NOW!

Working with ccTLDs

• Encourage registrars to prepare their services for IPv6• What kind of information will be helpful for

registrars?• What kind of information will be helpful for customers of registrars?• Will also help direct customers of gTLDs

• How can we reach out to them systematically?• How can we use our limited resources more

effectively?• We appreciate your input!

Page 34: Securing Future Growth: Getting Ready for IPv6 NOW!

Thank You!

<[email protected]>