Radware ADC. IPV6 RFCs and Compliance

Transcription

1 Radware ADC IPV6 s and Compliance Knowledgebase Team February 2016

2 Scope: This document lists most of the s that relevant to IPv6. Legend: Yes supported N/A not applicable No Currently not supported Relevance: This list is relevant for: Alteon 28.x and later Alteon 29.x and later Alteon 30.x and later 2.30 and later LinkProof 6.0 and later Page 2

3 1 List Category Previous Formats and Addresses Alteon LinkProof content Comment 2460 IPv6 Specification Yes Yes Yes Specifies the IP header structure IPv6 Addressing Architecture Global Unicast address format IAB/IESG recommendations on IPv6 address allocations to sites 2526 Reserved Subnet IPv6 Anycast addresses 3986 URI Generic Syntax Yes Yes Yes Defines the addressing architecture. Yes Yes Yes Defines the IPv6 address allocation structure. N/A N/A N/A Recommends allocation of 48 and 64-bit prefixes per specific cases Reserves Mobile IP home agent Anycast addresses N/A N/A N/A Covers literal IPv6 addresses in URLs. s the imposed hierarchy on the global Unicast addresses Informational Page 3

4 Category Previous 3879 Deprecating sitelocal addresses 4193 Unique local IPv6 Unicast addresses 3849 IPv6 address prefix reserved for documentation 2375 Multicast address assignment Alteon LinkProof content Comment Yes Yes Yes Describes the issues surrounding the use of IPv6 site-local unicast addresses in their original form, and formally deprecates them. Yes Yes Yes Replaces site local addresses. N/A N/A N/A Prefixes to be used for examples in documents Yes* Yes* Yes* Specifies Multicast address group prefixes for common cases. Supported only the Multicast addresses that are required for Neighbor discovery (ND), Router Discovery Page 4

5 Category Previous IP Networking 5156 Special-use IPv6 addresses Neighbor discovery Stateless address autoconfiguration Alteon LinkProof content Comment Yes Yes Yes Summarizes the special address prefixes from other s. Yes Yes Yes specifies the Neighbor Discovery protocol for IP Version 6. Yes Yes Yes Specifies the steps a host takes in deciding how to autoconfigure its interfaces in IP version ICMPv6 Yes Yes Yes Neighbor discovery (ND), Router Discovery (RD), (RD) and Stateless address autoconfiguration (SLACC). Informational Page 5

6 Category Previous Dynamic Host Configuration Protocol Version Four (DHCPv4) 3633 IPv6 prefix options for DHCPv Stateless Dynamic Host Configuration Protocol (DHCP) Alteon LinkProof content Comment Echo, Errors (incl. MTU), link multicast group. N/A N/A N/A Specifies the format that is to be used for encoding Dynamic Host Configuration Protocol Version Four (DHCPv4) client identifiers, so that those identifiers will be interchangeable with identifiers used in the DHCPv6 protocol N/A N/A N/A Prefix delegation mechanism. N/A N/A N/A DHCP service without maintaining state per client Page 6

7 Category Previous Service for IPv6 Alteon LinkProof content Comment (node) Path MTU discovery 3178 IPv6 Multihoming support at site with exit routers IPv6 Jumbograms Yes Yes Yes Describes Path MTU Discovery for IP version 6. It is largely derived from 1191, which describes Path MTU Discovery for IP version 4. Mechanism for basic IPv6 multihoming support, and its operational requirements. The method relies on routing protocol (BGP or RIPng) for optimal route selection. Packets with payloads larger Informational TFC Page 7

8 Category Previous 2711 IPv6 router alert option 4007 IPv6 scoped address architecture 5095 Deprecation of type 0 routing headers in IPv Default address selection 4192 Default router preferences Alteon LinkProof content Comment than 64 KB Alert to suggest the router look at the payload. Yes Yes Yes Specifies the way local and global addresses are used. Yes Yes Yes Deprecates type 0 Yes Yes Yes Selects source and destination address pair in case there are multiple addresses on each side. Extends router advertisement protocol with preferences in order for the host to select the best router The only type of routing header specified in Page 8

9 Category Previous 4311 Host to router load sharing Privacy extensions for Stateless address autoconfiguration in IPv DNS configuration options for DHCPv Inverse neighbor discovery 2474 Definition of the DS-field in IPv4 and IPv6 headers 1809 Using the flow label field in IPv6 Alteon LinkProof content Comment for a given destination. Guidance on how to share load among equivalent routers Adapt to anonymous addresses that have short lifespan Retrieves a neighbor s IP given its MAC address. Per hop behavior as defined by the DS field. Flow label is used for IntServ QoS: guaranteeing Informational Page 9

10 Category Previous IPv6 over Link Layer Upper layers over IPv Router renumbering for IPv Local network protection for IPv VRRPv3 for IPv4 and IPv6 Alteon LinkProof content Comment QoS per specific connection (flow) Support dynamic changes in the prefixes allocated by routers. Might be relevant for LinkProof. N/A N/A N/A Techniques to achieve NAT benefits without NAT in IPv6. No Yes Yes Replaces VRRPv2 which was solely for IPv IPv6 over Yes Yes Yes Ethernet 2590 IPv6 over FR 2472 IPv6 over PPP Informational. Page 10

11 Category Previous DNS extensions for IPv Non-terminal DNS redirection 2874 DNS extensions to support IPv6 address aggregation and renumbering 3363 Representing IPv6 addresses in DNS 3364 Tradeoffs in DNS for IPv DNS IPv6 transport operational guidelines 4074 Common misbehavior against DNS queries for IPv6 addresses Alteon LinkProof content Comment Yes Yes Yes 3111 SLP DNAME record for whole domain aliasing. A6 record for part of the IPv6 address N/A N/A N/A Informational N/A N/A N/A Informational Yes Yes Yes BCP Yes Yes Yes Return 0 answers rather than name error on A record request when only AAAA exists and vice versa. Informational Page 11

12 Category Previous modifications for IPv RIPng for IPv FTP extensions for IPv6 and NATs 4760 Multiprotocol Extensions for BGP Use of BGP-4 Multiprotocol Extensions for IPv6 Inter-domain routing 2740 OSPF for IPv6 No Yes. (Starting from Alteon 29.x) 2710, 3590, 3810, Multicast Routing Discovery Alteon LinkProof content Comment Yes No Yes Specifies extensions to FTP that will allow the protocol to work over IPv4 and IPv6. General which relates to IPv6 among others How the extensions of 4760 are used in IPv6 MLD for IPv6 Yes Yes No Multicast listener discovery No Procedure for discovery of Page 12

13 Category Previous Security Management , 4835, , 2465, IPSec architecture, headers, cryptographic algorithms and key exchange 4292 IP Forwarding Table MIB Alteon LinkProof content Comment routers that support Multicast. MIB for IP Yes No Yes Unified s for both IPv4 and IPv6 Yes No Yes Both IPv4 and IPv MIB for TCP 4113 MIB for UDP 3019 IPv6 MIB for multicast listener discovery 4001 Textual conventions for Internet network addresses Yes No Yes Defines the format for IP addresses and prefixes. The Page 13

14 Category Previous Mobile IPv6 (MIPv6) IPv4 to IPv6 Transition 3775 Mobility support for IPv Mobile node identifier option for MIPv Enhanced route optimization for MIPv6 3776, 4877 Using IPSec to protect MIPv6 signaling between Mobile Nodes and HA 4213 Basic transition mechanisms for IPv6 hosts and routers IP/ICMP Translation Alteon LinkProof content Comment format serves both IP versions. Yes* Yes* No Discusses dual stack and tunneling. No Yes* No IPv4 <-> IPv6 translation rules Radware ADCs implement the dual stack only. Not supported Page 14

15 Category Previous Alteon LinkProof content Comment Algorithm for IP and ICMP headers (L3). We took the proxy (L4) approach to achieve the same goal. ( 3142) NAT-PT Translation gateway. Role assumed by router Reasons to Move the Network Address Translator - Protocol Translator (NAT- PT) to Historic Status 6144 Framework for IPv4/IPv6 N/A N/A N/A See 2766 above. Yes* Yes* No Proposes solutions for starting from Alteon version 28.1 The is in historic status and its use is discouraged but not deprecated, since there is no alternative for it. Informational. Page 15

16 Category Previous Translation 2767 Dual stack hosts using Bump in Stack techniques (BIS) 3338 Dual stack hosts using Bump in API (BIA) 3142 IPv6 to IPv4 transport relay translator (TRT) 2473 Generic packet tunneling in IPv6 Alteon LinkProof content Comment different translation scenarios replacing NAT- PT. Translation between L7 and dual TCP/IP stack. Yes Yes* No Translation at L4 level. and Alteon implement the framework described in this based on transport relay translator (TRT ) rather than SIIT ( 6145 Supported by Alteon starting from 28.1 version. Page 16

17 Category Previous specification 4380 Teredo: tunneling IPv6 over UDP through NATs 3056 Connection of IPv6 domains via IPv4 clouds 4659 BGP-MPLS IP VPN extension for IPv6 VPN 4798 Connecting IPv6 islands over MPLS Internet Transition Plan rd Protocol Specification 6146 Stateful NAT64: Network Address and Protocol Translation from IPv6 Clients to Alteon LinkProof content Comment 6 to 4 tunnels. Dynamic tunneling technique N/A N/A N/A Proposes a plan for transition of the core Internet to IPv6. Uses 6to4 but with the ISP s IPv6 prefix, rather than the well-known 6to4 prefix. No No* No Describes stateful NAT64 translation, which allows IPv6-only Informational *Will be Supported by Alteon in Future version Page 17

18 Category Previous General IPv4 Servers 6147 DNS64: DNS Extensions for Network Address Translation from IPv6 Clients to IPv4 Servers IPv6-to-IPv6 Network Prefix Translation 4294 IPv6 node requirements Alteon LinkProof content Comment clients to contact IPv4 servers using unicast UDP, TCP, or ICMP. No No* No Specifies DNS64, and provides suggestions on how it should be deployed in conjunction withipv6/ IPv4 translators. Will be Supported by Alteon in Future version * *LP implements similar behavior without CRC preservation after translation Yes Yes Yes Informational Page 18

19 Page 19