Colorado ISOC 2012

1. August 28, 2012
IPv6: Now is the Time
Scott Hogg
Global Technology Resources, Inc.
Director of Technology Solutions
CCIE #5133, CISSP #4610
©2012 Global Technology Resources, Inc., All Rights Reserved.

2. IPv6: Now is the Time
© 2012 GTRI
IPv4 Internet Growth
IPv4 address depletion is occurring around the world.
“The Internet is running out of phone numbers”.
IANA free pool of IPv4 address space depleted February
2011
APNIC has already extinguished its supply of IPv4
addresses, RIPE will be down to their final /8 in a month,
ARIN has 3 /8s left.
The Internet population will continue to become more
densely populated.
IPv4 address blocks will become increasingly fragmented
due to address transfers between organizations.
Lack of available Internet addresses is restricting innovation
of Internet technologies.
Does your organization have enough IPv4 address to
sustain operations indefinitely?
2

3. IPv6: Now is the Time
© 2012 GTRI
Current IPv4 BGP Table
3 Source: Geoff Huston, http://bgp.potaroo.net/as1221/bgp-active.html

4. IPv6: Now is the Time
© 2012 GTRI
CGN/LSN – IPv4 Life Extension
ISPs are also running out of IPv4 addresses.
Many ISPs have no alternative, but to give their customers
private IPs (100.64.0.0/10 (RFC 6598)) as they use
centralized Carrier Grade NAT (CGN)/Large Scale NAT (LSN).
ISPs will deploy and maintain for many years costly HA
CGN/LSN systems around their network.
ISPs must figure out how to perform Lawful Intercept of
customer connections.
Subscribers experience increased latency, and application
problems, resulting in more helpdesk calls for the ISPs.
Internet reachability issues – “My Internet is down!”
Cost of doing business with IPv4 will increase.
4

5. IPv6: Now is the Time
© 2012 GTRI
CGN/LSN Negatively Impacts
Web browsing – many web applications open many connections
(Google maps, iTunes, Java, etc.)
Subscribers can not host any services at their location
Breaks IPsec (no AH, just ESP and NAT-T) – you can’t build an
extranet to remote sites using CGN broadband Internet service
Lack of peer-to-peer model (Skype, peer-2-peer, IM, Facebook
and Twitter chat, etc.)
Online gaming applications requiring a public IP
Breaks any application with an embedded IPv4 address
Growth of NAT has slowed down growth of transparent
applications (breaks UPnP-IGD, NAT-PMP)
Prevents geolocation (news, weather, language,…)
Makes fraud forensics difficult and nullifies reputation filtering,
black-lists (Spam, web malware, etc.), increases anonymity for
attackers
IPv6 Tunneling (Teredo, 6to4, 6in4, etc.)
5

6. IPv6: Now is the Time
© 2012 GTRI
What is IPv6?
IPv6 is the next generation computer network
protocol for use on the Internet and within private
networks.
IPv6 was first standardized by the Internet
Engineering Task Force (IETF) in the mid-to-late-90s.
IPv6 is designed to replace IPv4 but IPv6 is a different
protocol than IPv4 yet they can both coexist.
IPv6 has had more than a decade to mature and it is
now ready for mass deployment and Internet use.
You can use both versions simultaneously making
systems “bilingual”. Dual-Stack/Dual-Protocol
We are in an awkward period where IPv4 address
exhaustion is occurring yet we have not migrated to
IPv6.
6

7. IPv6: Now is the Time
© 2012 GTRI
IPv6 Advantages
Virtually endless supply of IPv6 public addresses
fostering Internet innovation
Public addresses allows for native IPsec (AH and
ESP) connections
Applications that flourish without NAT include:
peer-to-peer, mobile IPv6, geolocation
Internet in every car, traffic flow monitoring
Internet of things – sensor networks
Home automation
Emergency services, coordination between
police/fire/ambulance departments
Internet in every school
Among many others …
7

8. IPv6: Now is the Time
© 2012 GTRI
IPv6 Address Allocations
8 Source: http://en.wikipedia.org/wiki/File:Rir-ipv6-allocation-rate.svg

9. IPv6: Now is the Time
© 2012 GTRI
Number of IPv6 Prefixes and ASNs
9 Source: http://upload.wikimedia.org/wikipedia/commons/2/22/IPv6-as.svg

10. IPv6: Now is the Time
© 2012 GTRI
Hurricane Electric Global IPv6
Deployment Progress Report
Top Level Domains with IPv6 support
Percentage of TLDs with IPv6 nameservers: 269/315 (85.4%)
Percentage of TLDs that have nameservers with IPv6 glue in the
root zone: 261/315 (82.9%)
Networks Running IPv6
IPv6 ASes: 6052/42237 (14.3%)
IPv6 Performance
Percentage of IPv6 rDNS Nameservers where IPv6 is as fast or
faster than IPv4 (within 1ms): 74.6%
Top Websites Running IPv6
Alexa 1M raw with a direct IPv6 address: 30821/1000000 (3%)
www. Alexa 1M with a direct IPv6 address: 41526/1000000 (4%)
10 Source: http://bgp.he.net/ipv6-progress-report.cgi

11. IPv6: Now is the Time
© 2012 GTRI
NIST ANTD IPv6 Statistics
11 Source: http://usgv6-deploymon.antd.nist.gov/cgi-bin/generate-gov

12. IPv6: Now is the Time
© 2012 GTRI
IPv6 Deployment Aggregated Status
12 Source: http://www.vyncke.org/ipv6status/

13. IPv6: Now is the Time
© 2012 GTRI
Conclusions
IPv6 is not a passing fad. IPv6 is an eventuality and is
inevitable.
The global IPv6 transition is already underway.
An IPv6-enabled Internet already exists and IPv6
Internet content exists.
Your network and host OS infrastructure is already
IPv6 capable. It is just a matter of enabling it.
Service providers have initial IPv6 services and are
continuing to expand their deployments.
Organizations are migrating to IPv6 to communicate
with the broadest range of Internet users.
You should be planning to transition to IPv6 sooner
rather than later to preserve Internet business
continuity.
13

14. IPv6: Now is the Time
© 2012 GTRI
Scott Hogg, shogg@gtri.com, 303-949-4865
14