The document discusses Fedict's approach to implementing IPv6. It outlines regulations requiring Belgian government services to implement IPv6 within two years. Fedict is creating awareness through workshops and newsletters. It is also asking suppliers if products support IPv6 and gradually replacing IPv4-only products. Fedict has been testing IPv6 connectivity and dual stack configurations. Careful attention needs to be paid to external factors like mobile devices, firewalls, peering disputes and external services during the transition.

1. Fedict and IPv6
BELTUG – Grimbergen – 11/dec/12
© Fedict 2012. All rights reserved

2. About Fedict
Source: http://fedict.newlink.be/uploaded_files/pic_08v2.jpg
© Fedict 2012. All rights reserved | p. 2

3. Fedict
 Federal Public Service ICT
 e-gov building blocks, expertise center
 Hosts several (but not all) federal services
 Belgium.be
 Federal Authentication Service (FAS)
 Federal Service Bus (FSB)
 FedMAN
 High-speed, secure network between FPS
 Developed by Belnet
© Fedict 2012. All rights reserved | p. 3

4. Getting there
Source: http://commons.wikimedia.org/wiki/File:Street_Sign_with_ideas.jpg
© Fedict 2012. All rights reserved | p. 4

5. Regulations
 Digital Agenda for Europe
 Decision Council of Ministers (June 22, 2012)
 Implementation of IPv6 within 2 years
 Focus on G2C / G2B services
 Official note to federal administrations
 Published in “Staatsblad” (October 26, 2012)
 Each FPS, ... should appoint an IPv6 lead
 Each FPS, … is responsible for their own IPv6 roll-out
© Fedict 2012. All rights reserved | p. 5

6. The approach
 People
 Create awareness
 Human communication
 Product and services
 Ask all our suppliers if their products support IPv6 ...
 … and if not: when will this be implemented ?
 Gradually replace IPv4-only products and services
 Patience
 Report (and sometimes fix) issues
© Fedict 2012. All rights reserved | p. 6

7. People
Source: http://commons.wikimedia.org/wiki/File:Docteurs-SorbonneUniversit%C3%A9s-15.jpg
© Fedict 2012. All rights reserved | p. 7

8. Creating awareness
 2nd round of Belnet workshops
 (federal) network engineers
 End of January 2013
 Theory + practice
 IPv6 newsletter
 ICT managers and FedMAN contacts
 Regions / Communities / CBSS
 Workgroup
 FPS Economy, Fedict, FCCU, ...
© Fedict 2012. All rights reserved | p. 8

9. Products and services
Source: http://www.greenwavereality.com/solutions/led-lighting/
© Fedict 2012. All rights reserved | p. 9

10. The big picture
Applications
Security and External
availability Services
Platforms
Network
© Fedict 2012. All rights reserved | p. 10

11. FedMAN and IPv6 connectivity
 FedMAN
 Operated by Belnet
 IPv6-ready since end 2009
 /48 for each FedMAN customer
 IPv6 traffic on explicit request (test or production)
 In use: Fedict, SPF Int.Affairs, Court of Audit, FCCU
 Soon: SPF Economy
© Fedict 2012. All rights reserved | p. 11

12. Example IPv6 clause public tenders
 IPv6 must be available immediately
 Products and services
 IPv6 must be on par with IPv4
 Performance
 Functionality
 Availability
 Security
 Support
© Fedict 2012. All rights reserved | p. 12

13. Questionnaire
 Sent to suppliers
 Products and services
 Are your products / services IPv6 ready ?
 Today ?
 Upgrade required ? When ?
 If not, provide a plan towards IPv6
 Some surprises
 Positive and negative
© Fedict 2012. All rights reserved | p. 13

14. Patience
Source: http://commons.wikimedia.org/wiki/File:Bios_robotlab_writing_robot.jpg
© Fedict 2012. All rights reserved | p. 14

15. Currently testing
 Golden rule: do not touch production IPv4
 Just add “something” in front of IPv4 infrastructure
 New environment: consider Dual Stack
 Reverse proxy
 Easy for HTTP
 NAT64
© Fedict 2012. All rights reserved | p. 15

16. Pay attention to ...
 Tablets and smartphones
 DHCPv6 support ?
 Firewalls / load balancers
 IPv6 support in hardware (performance) ?
 Peering disputes
 If any, your ISP may block some IPv6 traffic
 External services
 E-payment, anti-spam, webstats, … ?
© Fedict 2012. All rights reserved | p. 16

17. If you want an IPv6-only data center
 Databases
 Connectors / clusters may not be certified in IPv6
 Management tools
 Monitoring / TAPs
 Storage / backup systems
 Cloud offerings
 Do they support IPv6 ?
© Fedict 2012. All rights reserved | p. 17

18. Questions ?
Source:http://commons.wikimedia.org/wiki/File:20_questions_1954.JPG
© Fedict 2012. All rights reserved | p. 18

19. Thanks !
Bart Hanssens / Fedict
Maria-Theresiastraat 1
1000 Brussels, Belgium
@BartHanssens
bart.hanssens [at] fedict.be
© Fedict 2012. All rights reserved