The Status of IPv6 and Open Source/Free Operating systems

CONFIGURATION OF IPV6 Examples from various operating systems oej@edvina.net Twitter: oej Twitter: ipv6friday foss-sthml.se meeting January 25th 2012onsdag 25 januari 12

This is the year we launch the new Internet. Do not stay behind!onsdag 25 januari 12

IPv6 basics 128 bit 128 bit address address • Larger IP packet headers - IP address 128 bits instead of 32 • All TCP/UDP protocols behave like before • Protocols that embedd IP address will have to support the new formats • Subnetting like before with CIDR preﬁxesonsdag 25 januari 12

A common enterprise model 48 bit 16 bit 64 bit preﬁx subnet device 65536 networks! ISP get /32 Enterprise /48 or /54onsdag 25 januari 12

Dual stack IPv4 IPv6 The IPv4 The IPv6 Internet Internetonsdag 25 januari 12

TWO highways to the same destination IPv4 IPv4 IPv6 IPv6onsdag 25 januari 12

Happy eyeballs IPv4 IPv4 IPv6 IPv6onsdag 25 januari 12

Migration 1 2 3 IPv4 IPv4 IPv6 IPv6onsdag 25 januari 12

Testing IPv6 3 IPv6onsdag 25 januari 12

Multiple addresses per interface Link local address based on MAC (FE80::) Site local address - ULA FDxx Global address based on network prefix and MAC Global address based on network prefix and random data Link local multicast addresses Service specific multicast address Loopback address (only for loopback interface)onsdag 25 januari 12

Different views in OS/X Network conﬁguration shows only IPv4 Advanced shows ONE IPv6 address ifconﬁgonsdag 25 januari 12

Distributing IPv6 addresses Local Link (FE80::) - automatically Global based on RA preﬁx - automatic (SLAAC) Based on MAC address Based on random data for privacy (temporary address) Global based on DHCP - automatic (SLAAC) Static - manual conﬁgurationonsdag 25 januari 12

DHCPv6 INFORMATION DNS, SIP gateway, NTP server etc OBJECTS DYNAMIC Random address from a range IP ADDRESS PRIVACY ENHANCED Managed temporary privacy-enhanced IP ADDRESS Address STATIC Static address based on device identiﬁer IP ADDRESSonsdag 25 januari 12

DHCPv6 for ISP’s NETWORK Network preﬁx, subnet mask PROVISIONING routeronsdag 25 januari 12

DUID = Device Identifier SYSTEM DUID - Device Unique Identifier IF IF IAID - Interface Adapter Identifier IF In IPv4 DHCP the MAC is the system!onsdag 25 januari 12

Where are they? DUID IAID Only shown in Microsoft ETH0 Windows 7. I can’t ﬁnd it easily in any other system. IAID Required to set up static WLAN0 DHCPv6 address management.onsdag 25 januari 12

Various options RA + SLAAC RA SLAAC + DHCPv6 + DHCPv6 • Announce a preﬁx and a • RA tells device to use • RA tells device to get IP and router with SLAAC and fetch more more options in DHCPv6 RADVD or RTSOL support options in DHCPv6 • Device sends DUID+IAID • MAC or temporary • DNS address, NTP server • Better management - log in • Simple, but not much control • Better management, but still DHCP server not much control • Where is the DUID?onsdag 25 januari 12

Privacy enhanced • ”Welcome back. You’re using a MacBook Pro 10th generation from Sollentuna, Sweden.” • Why should I let everyone see my MAC address? And that I use multiple devices? • All systems support this. Windows enable it by default. No other system has it in the UI.onsdag 25 januari 12

STATUS REPORT Playing with different operating systemsonsdag 25 januari 12

Disclaimer • I’ve tested these systems as a beginner, just spending an hour or so on each • I want it to be that easy. • After 15 years of IPv6 it should just work • I might have missed some basic stuff - but someone like me should not be able to do that. • Feedback is always positive!onsdag 25 januari 12

TEST focus • Can I install a desktop O/S over IPv6? • Can I add and install packages over IPv6? • Can I conﬁgure it with combinations of Router Solicitation/ Adverts and DHCPv6? • How ready are we to run IPv6 single stack?onsdag 25 januari 12

Test network IPv6 LAN Sheeva Plug IPv4 Internet Home IPv4 Gateway LAN Tunnel Broker IPv6 Internetonsdag 25 januari 12

Top of the line: Windows 7 • Microsoft has implemented IPv6 throughout the O/S • The O/S doesn’t work properly without IPv6 • Server-side support is improving, but doesn’t cover all of the product lineonsdag 25 januari 12

Installation over IPv6 • OpenBSD with router solicitations, do not use DHCPv6 • FreeBSD - found an IPv6 address, but did not succeed • Maybe use a FTP/HTTP client that is single stack? • Debian, Ubuntu - don’t know. I could not select addresses at installation, it just started automatically somehow. Could not test on IPv6 only network. • I had to enable dual stack for installation on all systemsonsdag 25 januari 12

OpenBSD 5 • Stateless Autoconﬁguration • DHCPv6 - there are ports, but not integrated • Very hard to ﬁnd any documentation or information • ftp.openbsd.org has no IPv6, mirrors haveonsdag 25 januari 12

FreeBSD 9.0 • Support for SLAAC • Complicated to get support for DHCPv6 • No easy conﬁguration • IPv6 in sysinstall • IPv6 in installer, but can’t install over IPv6 (port system distributed) • ftp.freebsd.org has two IPv6 addresses • System conﬁg supports ra + dhcpv6onsdag 25 januari 12

FreeBSD 9 • NO dhcpv6 options in network configuration • Only router advertisments • No privacy address in network configuration • Most of the ports servers do not support IPv6 - maybe through proxy • The install gets IPv6 address through SLAAC, saves it as static in config. Bad.onsdag 25 januari 12

Fedora 15onsdag 25 januari 12

Fedora 15 • No support for privacy address in user interface • Good attempt at conﬁguration, but broken • Nothing is saved in ifcfg-eth0 • You can set if IPv4 or IPv6 or both are required for the system to indicate ”Connected to network”onsdag 25 januari 12

debianonsdag 25 januari 12

Debian • DHCP for IPv4 and autoconf for Ipv6 overwrite /etc/resolv.conf • Only Ipv6 name server, but dhcp ipv4 address • ftp.se.debian.org supports IPv6 so for me, package installation worked over IPv6 onlyonsdag 25 januari 12

Ubuntu 11.10 • Default installation use IPv4 and installs only IPv4 even if IPv6 is available • Same network app as Fedora • Supports IPv6 in a good way • No UI support for IPv6 temporary addresses • If dual stack, only IPv4 is shown in UIonsdag 25 januari 12

Link local address in UI.onsdag 25 januari 12

Oops. IPv6 only...onsdag 25 januari 12

OS/X What does this mean? Where’s the DUID? (This is assigned by DHCPv6)onsdag 25 januari 12

Summary • Seems like most systems started with SLAAC and thought ”We’re done!” • Confusion on RA+DNS, RA+DHCPv6, DHCPv6 without RA • Bad support for privacy addresses • Most of the stuff exist in all kernels, but sysctl is not for normal usersonsdag 25 januari 12

The end ...or is it the beginning? It’s embarrassing to see that the free operating systems are doing so badly in this area.onsdag 25 januari 12

http://www.ipv6novatos.com	293
http://edvina.net	123
http://www.internetsociety.org	95
http://translate.googleusercontent.com	1
http://marshal.edvina.net	1

The Status of IPv6 and Open Source/Free Operating systems

by Olle E Johansson on Jan 25, 2012

Accessibility

Categories

Tags

Upload Details

Usage Rights

5 Embeds 513

Statistics

The Status of IPv6 and Open Source/Free Operating systems — Presentation Transcript