Moonv6. U.K IPv6 Task Force Meeting Manchester, U.K. September 22-24, 2004

Size: px

Start display at page:

Download "Moonv6. U.K IPv6 Task Force Meeting Manchester, U.K. September 22-24, 2004"

Katrina Golden
5 years ago
Views:

1 Moonv6 Jim Bound ( Jim.Bound@nav6tf.org) IPv6 Forum CTO Chair North American IPv6 Task Force HP Fellow U.K IPv6 Task Force Meeting Manchester, U.K. September 22-24, 2004 Special Acknowledgements NAv6TF Steering Committee Advisors: Ben Schultz UNH-IOL (schultz@io.iol.unh.edu) Rick Summerhill Internet2 (rrsum@internet2.edu)

2 North American IPv6 Task Force (NAv6TF) Promote the deployment of IPv6 across North America. Technology and Deployment Partnership with Internet2 and University of New Hampshire IPv6 Interoperability Lab. Provide business, promotional, educational, and technical center of expertise for IPv6 in North America to any entity building, deploying, or developing IPv6 for deployment. Provide technology and transition input to support North American deployment efforts as we have done for Department of Defense, Department of Commerce, Department of Homeland Security, Independent Software Vendors, and Commercial Service Providers. Continue to lead the Moonv6 IPv6 Network Pilot and expand that backbone peering network as a worldwide IPv6 backbone Network Pilot and develop MOUs for Moonv6 collaboration. Develop technology partner relationships with other consortia s and standards bodies working on IPv6. Participate in North American industry trade show events, seminars, and technology briefings as IPv6 center of expertise. Develop IPv6 deployment technology usage guides as required. 2

3 Moonv6 Network Pilot The Moonv6 project is a collaborative effort between the North American IPv6 Task Force (NAv6TF), the University of New Hampshire - Interoperability Laboratory (UNH-IOL), Internet2, vendors, service providers, and regional IPv6 Forum Task Force network pilots worldwide. Taking place across multiple locations, the Moonv6 project represents the most aggressive collaborative IPv6 interoperability and application demonstration event to date. The U.S. Government's Department of Defense Joint Interoperability Testing Command (JITC) also plays a significant role in many of the Nav6TF IPv6 demonstrations ensuring DoD interoperability and migration objectives are identified and demonstrated. The actual motivation of Moonv6 was defined at an NAv6TF, U.S. Cyberspace Security Office, and other participants (November 2002), during discussions to determine how serious should the U.S. take IPv6 as a mission. The question posed to the participants was should we treat IPv6 as we did going to the Moon in 1969? Later when it was decided to investigate how to deploy a U.S. wide IPv6 Network Pilot at a meeting at the University of New Hampshire in March of 2003, including NAv6TF, University of New Hampshire, and Department of Defense principals, the term Moonv6 was selected to name this Network Pilot. Moonv6 is now an inclusive project with many participants, and world wide. 3

4 What is the Moonv6 Network? What is the Moonv6 Peering Network? The Moonv6 network is a set of native IPv6 connections between sites on the global Internet that will forward packets to other Moonv6 peering sites. Participants can have a native IPv6 connection to the Internet, and Moonv6 will permit IPv6-in-IPv4 tunnel hops for a 90 day period to test on the Moonv6 network, provided the requestor, not Moonv6 administration, defines and administers those tunnels. What is a Moonv6 Peering Site? A Moonv6 site is one that forwards packets within the Moonv6 Peering Network and also participates as a Moonv6 site for collaborative testing of IPv6 implementations for interoperability and verification of functions within the IPv6 protocol and architecture. To become a Moonv6 peering network, a network must IPv6 peer with anexisting Moonv6 peering network. To become a Moonv6 site, one must connect to an existing Moonv6 peering network. In addition to the peering network itself, the Moonv6 project also encompasses deployment-style device testing at several network sites. Participants execute rigorous, protocol-specific test plans created under the guidance of telecommunication carriers, service providers and other real network operators. In addition to greatly extending the participants' own R&D efforts, this testing helps to create confidence in the technology and shorten its adoption cycle. 4

5 Moonv6 Sites WA MT ND Scott AFB Illinois DREN Internet 2 AIN Leased T1 AT&T Network Public Internet Tunnel ME OR ID SD MN WI MI Internet 2 NY VT NH MA UNH-IOL New Hampshire PAIX Palo Alto, CA Ixia Labs Spirent Labs Calabasas, CA France Telecom R&D Lab CA NV NASA Ames DREN and Internet 2 peering point AZ UT WY NM CO NE Satellite KS OK IA MO AR IL IN TN KY PA Lucent Tech., PA OH WV VA NC SC MD NJ DE CT RI CERDEC Ft. Monmouth, NJ AT&T Labs, NJ MSNOSC Quantico, VA High Performance Computing Modernization Program (HPCMO) Mclean, VA SPAWAR - WEST DREN San Diego, CA Ft. Huachuca, AZ TIC and Electronic Proving Ground Ft. Huachuca, AZ JITC TX LA MS AL GA FL Auburn University Auburn, AL USAFE IEF Ramstein, Germany 5

UNH InterOperability Laboratory (UNH-IOL) Global reputation - test suites and reports that are accepted by key players in the networking and telecom industry Unique, non-profit model - fully funded

6 UNH InterOperability Laboratory (UNH-IOL) Global reputation - test suites and reports that are accepted by key players in the networking and telecom industry Unique, non-profit model - fully funded by cooperation of commercial communications industry and market driven Only lab testing such a wide array: 20 different technologies Coordinates multiple interoperability efforts for industry Develops original, unique hardware and software test solutions Interoperability, protocol conformance, debugging, on-site and offsite testing, customized testing and reports 6

7 20 Technology Areas Bridge Functions (IEEE 802.1) IP Technologies IPv6 IPv4 Routing MPLS Services GMPLS/Optical Networking ADSL and SHDSL Wireless LANs Voice Over X Ethernet Technology 10Base-T Fast Ethernet (100Base-TX) Gigabit Ethernet 10Gigabit Ethernet Power over Ethernet Ethernet in the First Mile Storage Area Network Technology Fibre Channel iscsi iwarp Serial ATA Serial Attached SCSI 7

8 Ongoing IPv6 Testing at UNH-IOL IPv6 Core Protocols Test Suites Operations Test Suite Multi-System Interoperability Test Suite These 2 test suites combine to form the IPv6 Ready Phase II logo test suite, released in September, 2004 RIPng Operations Test Suite RIPng Interoperability Test Suite OSPFv3 Interoperability Test Suite BGP-4+ Interoperability Test Suite 8

9 IPv6 Ready Logo Program A Unified test suite for the IPv6 Base Specifications UNH and TAHI are the primary authors of the base criteria document Documents will soon be finalized Phase II Testing Starts in October

10 Internet2 Abilene Backbone 10

11 Last updated: June 2004 Abilene Federal/Research Peering

12 Last updated: June 2004 Abilene International Peering 12

13 Internet2 IPv6 Participants and Connectors Participants: 44 9 new since October 2003 Connectors: 27 3 new since October 2003 Peers: 34 1 Corporate (1 new) 8 Federal (4 new) 25 International (5 new) 13

14 IPv6 Map 14

15 Abilene Worst 10 Lists Full mesh of TCP tests across the backbone, both IPv4 and IPv6, every hour at 1 Gbps Keep the worst 10 over a days time June 9, 2004 IPv4: 96.1 % (that is,.961 Gbps) IPv6: 95.8 % (that is,.958 Gbps) Essentially no performance difference between v4 and v6 15

16 Moonv6 Logical Configuration Example Internet 2 DNS server Phase II Network Server U. S. Army Technology Integration Center, Ft. Huachuca AZ Cisco 3750 Server Auburn University To DREN via Deutsch Telecom and Internet 2 DREN Tunnel Broker, Sunnyvale, CA VTC H.323 Ramstein, Germany To DREN via Deutsch Telecom and DREN tunnel broker DREN IPv6 Network Wireless Access Point (TIC) Layer-2 Switch 20 Multimedia PCs for Application Testing 32 PCs with IPv6 Remote Terminal Emulation Capability for Stress- Testing Marine Corps Network Operations Security Command, Quantico, VA JITC, Indian Head, MD Scott AFB, Bellville, IL JITC, Ft. Huachuca, AZ U.S. Army Electronic Proving Ground Ft. Huachuca, AZ Elmic Systems Sun Legend: AFB Air Force Base DNS Domain Name System DREN Defense Research and Engineering Network IPv6 Internet Protocol version 6 JITC Joint Interoperability Test Command PC Personal Computer PDA Personal Digital Assistant VTC Video Teleconference Client DNS Server Server WEB Switch Mobility Home Agent Wireless Access Point PDA PDA VTC H.323 U.S. Army Communications- Electronics Research, Development, and Engineering Center, Ft. Monmouth, NJ

17 Moonv6 Test Items Applications: , HTTP, PKI, Custom Site Applications Mobility Security: IPSec and Firewall Functionality Routing Protocols OSPF, BGP, IS-IS Interoperability OSPF and BGP Convergence QoS (Diff-Serv) Testing (at UNH-IOL) Multicast (PIM-SM and MLD) Testing PPPoE Testing Transition Mechanism Testing Load Testing (at JITC) DNS Testing 17

18 Application Findings Most Simple Mail Transfer Protocol implementations are acceptable Acceptable interoperability for most vendors Post Office Protocol and Internet Message Access Protocol implementations are emerging Deficiencies in one client application software and server operating system HTTP Acceptable implementations for most vendors Acceptable interoperability for most vendors Deficiencies in how one vendor handles literal IPv6 addresses 18

19 Mobile IPv6 RFC just emerging from draft status Tested on small topologies Some ad-hoc testing MN,CN,HA implementations Home Network renumbering Dynamic HA address discovery Duplicate Address Detection (DAD) 19

20 Security: IPsec and PKI IPsec tunnels and Transport Mode Host to host, Router to router and Router to host Vendor implementations slow to emerge What is already implemented has only minor interoperability issues Requirement for IPv6 deployment Some host vendors are being very responsive in incorporating Moonv6 feedback PKI One implementation tested Deficiencies in how implementation handles literal IPv6 addresses Implementation had IPv6 interoperability issues 20

21 Security: Firewall Functionality Logging was verified for all the testing Filtering Based upon Source/Destination IPv6 address UDP and TCP port numbers ICMPv6 packet types The following attack scenarios were verified SYN Flood UDP Flood ICMPv6 Flood 21

22 Routing Protocol Functionality Tested Interoperability of OSPFv3, IS-IS, BGP-4+ and RIPng Tested convergence of OSPFv2 and OSPFv3 in dual stack environments Original Flows OSPF Router OSPF Router OSPF Router Converged Flows 22

23 Routing Protocols Tested Convergence of BGP-4+ and BGP4 in dual stack environments Original Flows AS 1 AS 2 AS 4 Converged Flows AS 3 23

24 Routing Protocols Tested Multi-Area BGP operating with OSPF and IS-IS in dual stack operation AS 1 AS 2 ibgp and IS-IS ibgp and OSPF ebgp 24

25 QoS Testing Tested Diff-Serv with IPv6 traffic Basic operation Ingress Marked/ Remarked Forwarded Router A Router B Forwarded Overloaded port Marked/ Remarked Ingress Ingress Mix of IPv4 and IPv6 at 40% Marked/ Remarked Ingress Mix of IPv4 and IPv6 at 60% Forwarded Forwarded Router A Router B Ingress Mix of IPv4 and IPv6 at 60% Marked/ Remarked Ingress Mix of IPv4 and IPv6 at 40% 25

26 PPPoE Testing In most cases the customer router received the IPv6 address from the BRAS. It is important to manually configure a default route on the BRAS. For some customer routers, it is also necessary to add a default route. To Network Router and BRAS Customer Router Host Local Loop DSLAM DSL Modem 26

27 Multicast Testing Basic Multicast topology RP Router Initial Stream Source Encapsulated Stream Destination 27

28 Transition Mechanisms Transition Mechanisms tested: Dual Stack Tunnel Broker (automatic tunnels) ISATAP TEREDO IPv4-in-IPv6 tunnels Configured (static) tunnels 28

29 Future Test Items Mobile IPv6 Further Firewall Functionality and Security Transition Scenarios DSTM 6to4 Specific Moonv6 Site Applications IPv6 Multihoming Scenarios 29

30 Conclusion Moonv6 has established a unique distributed IPv6 test environment Network remains indefinitely operational 24 X 7 Helps all participants better understand IPv6 protocol operation Helps all participants better understand the state of maturity of IPv6 products and features Some vendor implementations are fast evolving, particularly in the vital areas of security and mobility Develop transition and implementation policy based on independent test results 30

31 Take Aways Vendors have implemented strong IPv6 transition mechanisms Implementations for mobility & security are immature Feedback from testing to the IETF-RFC process is valuable Applications currently work well in IPv4 tunnels, but not in Native IPv6 environments Vendors are constantly evolving implementations Additional testing required using a high capacity heterogeneous distributed end-to-end network 31

Moonv6 Update NANOG 34

Moonv6 Update NANOG 34 Moonv6 Update Outline What is Moonv6? Previous Moonv6 testing April Application Demonstration Future Moonv6 Test Items 2 What is Moonv6? An international project led by the North American IPv6 Task Force