IPv6 on Campus. The stuff you need to know

Transcription

1 IPv6 on Campus The stuff you need to know

2 Campfire! 742/

3 What is IPv6 and Why do I care? Next generation Internet addressing protocol ISPs around the world are handing out IPv6 addresses In some locations they no longer hand out IPv4 addresses Tunnels between IPv6 and IPv4 work, but best experience is tunnel-free High Performance computing advantages Stay ahead of the curve Internet 2 membership Attracting Faculty, Students, Grants Institutional Status

4 Where is IPv6 in use? Global IPv6 Deployment

5 About IPv4 and IPv6 Table courtesy of ARIN community use slide deck

6 Breakdown of a Global IPv6 address This provides every business, university, and home with 65,536 subnetworks of 18 quintillion hosts 48 bits" 16 bits" each" 64 bits"

7 What is the campus IPv6 address space? 2620:0:0e00::/48 is the campus prefix 1,208,925,819,614,629,174,706,176 65,536 /64 subnets End-user subnets will each be a / 64 18,446,744,073,709,551, quintillion

8 What will my subnet look like? Some current subnets are: 2620:0:e00:4001::/ :0:e00:4002::/64 A static host address on the first subnet 2620:0:e00:4001::3 An EUI-64 host address on the first subnet 2620:0:e00:4001:226:bbff:fe5f:ead2 Most hosts will have at least 2 IPv6 addresses (more info in the advanced talk)

9 When will IPv6 be on a Campus Backbone runs IPv6 network near you? Exit is IPv6 capable A few subnets on campus have native IPv6 Many nets have some kind of IPv6 tunneling happening (it's a default for Windows) Off-campus facing services - high priority Lots of campus (and the world!) still IPv4 only Dual stack IPv4 and IPv6 will be around a while

10 You should consider adding IPv6 to your network soon if... You have a current need You are ready to start testing IPv6 implementations of services You have an off-campus facing service that you want other people to access natively via IPv6 Research High Tech presence

11 What does IPv6 look like in DNS? "Quad A" record instead of "A" record Everything else works the same Test DNS servers ready for testing native IPv6 recursive DNS queries Production native IPv6 recursive DNS in progress

12 How do I manage my IPv6 space?

13 How do I manage my IPv6 space? Adding IPv6 info to the campus DNS is done by hostmanager right now Support for ITpros to add and edit IPv6 records is in progress DNS Tools page now shows ip6.arpa zones

14 How does my computer get an IPv6 address? DHCPv6? It exists, but isn t useful yet across campus No DHCPv6 relay in the routers Not all clients support it Stateless auto-configuration (Router Advertisement) - "EUI-64" The router tells you the network part The computer fills in a well known section plus it's unique MAC address This is always the same, and can be put in DNS Only changes if the MAC address changes Static configuration Some security issues (see advanced talk) Typically only needed for servers

15 How does IPv6 work on the campus network? Really, about the same as IPv4 for native routing Routers decide which path is the best way to the network the packet is trying to get to, and send it down that connection Today, IPv6 goes around our exit firewalls, but soon will go through them Firewall inspection IPS inspection

16 How does IPv6 work on my computer? Computers try IPv6 first Fall back to IPv4 if IPv6 doesn't work If they think IPv6 is working when it isn't, this can look like the network isn't working Some computers automatically build a tunnel to get their IPv6 traffic out (see advanced talk for more info)

17 How does it work on the Internet? The entire ICCN has native IPv6 Many of our Research and Education peers connect via IPv6 and IPv4 Our commercial ISPs do not peer IPv6 with us (our next RFP is asking about it) Neither UIC nor UIS has asked us about IPv6 peering to ICCN

18 So where can I go with IPv6? Natively (all parts of the path are IPv6) Within our campus if both subnets have IPv6 From campus to some R&E areas ipv6.google.com Campus to home/home to campus? not for most people

19 So where can I go with IPv6? Tunnels Campus to home/home to campus Campus to many other places Wireless on campus Initial testing with our Meru system planned for 2011 Campus VPNs Not in the near future

20 What is a tunnel? IPv6 host IPv6 traffic IPv4-only network IPv6 server

21 What is a tunnel? A way to send IPv6 from your computer over an IPv4 network to another host with IPv6 You may have heard of some like... 6to4 Teredo More details about tunnels in the advanced talk

22 Are there tunnels on your network? Probably! Windows will make one if you have IPv6 enabled and don't have a native connection XP SP3, and newer Server 2003 and newer The advanced talk has more about how they are made and what the security issues are

23 Things to watch out for with IPv6 Request for v46.example.com DNS Server Timeout and retry with the v4 address may take many seconds, annoying the user Worst case, connection may fail v46.example.com IN AAAA 2620:12:34::3 v46.example.com IN A Unwitting IPv6 client Connection request to 2620:12:34::3 X Connection request to IPv4-only Internet Dualstack Server

24 Other things to watch out for with IPv6 Host firewalls will need to support IPv6 System configuration files might need to be updated hosts.allow resolv.conf We ve run into systems that don t behave as expected (using AAAA records when they don t have an IPv6 address at all)

25 IPv6 and future proofing It's really here to stay New purchases? keep IPv6 in mind Getting more IPv4 addresses is becoming difficult Global address pool is getting smaller We have enough IPv4 addresses But we don t have a lot of large blocks left It s even more important to consider all of our IPv4 prefixes as campus

26 Additional Resources Join the IPv6 Listserv When we are ready for beta users we will announce to that list Web sites and groups working group) Questions?