Chair: Tim Chown, network development manager, Jisc.
IPv6 is now becoming mainstream for UK Internet users. By the time Networkshop45 takes place, it is expected that over 30% of UK residential users will have access to IPv6. It is therefore becoming important that higher and further education sites keep pace with commercial deployment.
With that in mind, in this session we look at IPv6 deployment at Imperial College London, which is the largest example in the UK and includes up to 40Gbit/s of CERN Large Hadron Collider data, we review various perspectives of measuring IPv6 deployment activity on the Janet network, and we explore the options for IPv6 address planning for campus sites.
Running order of talks:
11:30-11:45 - Imperial College IPv6 deployment
Speaker: Phil Mayers, Imperial College London.
11:45-12:15 - IPv6 deployment around the world
Speaker: Mat Ford, Internet Society (ISOC).
12:15-12:45 - IPv6 address planning
Speakers:
Emma Cardinal-Richards, UCL
George Margaritis, University of Reading
2. Please switch your mobile phones to silent
19:30
No fire alarms scheduled. In the event of an
alarm, please follow directions of NCC staff
Dinner (now full)
Entrance via Goldsmith Street
16:30 -
17:30
Birds of a feather sessions
15:20 -
16:00 Lightning talks
39. Founded in 1992 by pioneers of the early Internet,
the Internet Society drives technologies that keep it
open and safe. We promote policies that empower
people to
enable universal access for all.
We stand for a better Internet.
2
40. The Internet Society at Work
40
Provides
leadership in
policy issues
Advocates
open Internet
standards
Promotes
Internet
technologies
that matter
Develops
Internet
infrastructure
Undertakes
outreach that
changes lives
Recognizes
industry leaders
41. Our Priorities
Trust
Without trust, the Internet cannot deliver its
potential benefit to the entire world. Users
must view the Internet as a safe and reliable
means
to communicate, and be willing to use online
services for commerce, government, and
social interaction.
Access
We believe Internet access is a key enabler for
economic, social, and human development.
But only half the world is connected and the
rate of Internet access growth is decreasing.
Issues such as trust in the Internet have joined
cost and availability as barriers to access.
41
Restoring trust and connecting the unconnected are key to
realizing an Internet of opportunity for everyone.
42. Global Presence
42
Our global community of members and Chapters span over 230 countries,
territories, and areas of geographic interest world-wide.
NORTH AMERICA
LATIN AMERICA/CARIBBEAN
EUROPE
AFRICA
MIDDLE EAST
ASIA
43. IETF
43
The Internet Engineering Task
Force (IETF) is the premiere
Internet standards organization.
The mission of the IETF is to make
the Internet work better by producing
high quality, relevant technical
documents that influence the way
people design, use, and manage the
Internet.
The Internet Society is the
organizational home of the IETF.
45. Our Partners
45
The Internet Society cannot achieve
its goals alone.
Because the Internet impacts all of us, we
work with partners of all shapes and sizes to
address the wide range of social, economic,
and policy issues. Our partners include:
• International bodies and assemblies
• Local non-governmental organizations
• Technical experts and engineers
• University and academic institutions
• Local and global businesses
• Rural or urban students and teachers
47. IPv6 Deployment Around the World
• Web content
• Network operators from the outside
• Network operators from the inside
• Per country and global perspectives
• DNS
• Comparative performance
• Predicting the future
• Focus on Janet
IPv6 Deployment Around the World – Networkshop45 47
48. Measuring IPv6
Measuring Web content
IPv6 Deployment Around the World – Networkshop45 48
Measuring IPv6 adoption. By: Jakub Czyz, Mark Allman, Jing
Zhang, Scott Iekel-Johnson, Eric Osterweil, Michael Bailey.
Appears in: CCR August 2014.
55. Measuring IPv6
Measuring network operators from the outside – World IPv6 Launch
IPv6 Deployment Around the World – Networkshop45 55
56. Measuring IPv6
Measuring network operators from the outside – World IPv6 Launch
IPv6 Deployment Around the World – Networkshop45 56
57. Measuring IPv6
• Martin Gysi of Swisscom wrote for us in 2014
• At that time, 35% of subscribers were IPv6-capable
• 8.5% of peak traffic was IPv6
• Presentation on IPv6 deployment at Swisscom in mid-2015
• 67% of subs dual-stacked
• >20% of traffic was IPv6
• 31% of IPv6 user’s traffic was IPv6 (mostly Google)
• Sky: (Oct 2016) 25%-35% of dual-stack subscriber traffic is IPv6
• EE: 50%+ of dual-stack mobile subscriber traffic is IPv6
Measuring network operators from the inside
IPv6 Deployment Around the World – Networkshop45 57
62. Measuring IPv6
Measuring countries – APNIC
IPv6 Deployment Around the World – Networkshop45 62
Global IPv6 deployment, as measured by the relative capability to use IPv6
63. Measuring IPv6
Measuring countries – APNIC
IPv6 Deployment Around the World – Networkshop45 63
Use of IPv6 worldwide
http://stats.labs.apnic.net/ipv6/XA
65. Measuring IPv6
• Around one third of the Internet’s user population invoke DNS resolvers that are capable of
using IPv6 to resolve a DNS name
• Half of those users are invoking Google, AT&T and Comcast
• “The DNS is well on the path of transition and perhaps further along this path than all the
other elements of the Internet’s infrastructure.”
(https://labs.ripe.net/Members/gih/ipv6-and-the-dns)
• As of October 2016, all DNS root servers are IPv6-enabled
Measuring the DNS
IPv6 Deployment Around the World – Networkshop45 65
Geoff Huston, APNIC
67. Measuring IPv6
• Facebook have described controlled A/B tests that show IPv6 to be 15% faster
on average for devices on mobile networks in the US, with some devices
showing even better results.
• Measurements using Akamai’s RUM system have also shown measurable
performance improvements for IPv6 connections from US mobile networks.
• At the last UK IPv6 Council meeting, Sky presented measurements that show
on average a slight performance benefit for IPv6 over IPv4.
Measuring performance
IPv6 Deployment Around the World – Networkshop45 67
https://blogs.akamai.com/2016/10/ipv6-at-edge-2016.html
68. Measuring IPv6
Projecting the future – when will IPv6 overtake IPv4?
IPv6 Deployment Around the World – Networkshop45 68
Scott Hogg, Infoblox
Martin Gysi, Swisscom
76. Measuring IPv6
• IPv6 is real, deployments not everywhere, but in a lot of networks and countries now
• IPv6 DNS is very real
• Centralisation of hosting/DNS is helping speed up deployment in some cases
• Web content is growing slowly -> needs to be much more pervasive
• When deployments happen, they can happen fast
• IPv6 is dominant protocol in some cases
• IPv6 is faster in some cases
• Interconnection and/or deployment quality is problematic in some cases
• Different vantage points and methodologies yield different results
• IPv6 will be dominant protocol for many (more) operators in 2 – 3 years
• Lots of work still to do for many UK higher ed institutions
Conclusions
IPv6 Deployment Around the World – Networkshop45 76
77. Sources
World IPv6 Launch: http://www.worldipv6launch.org/measurements/
Akamai: https://www.akamai.com/uk/en/our-thinking/state-of-the-internet-report/state-of-the-internet-ipv6-adoption-visualization.jsp
APNIC: http://stats.labs.apnic.net/ipv6/ + http://stats.labs.apnic.net/v6perf
Google: https://www.google.com/intl/en/ipv6/statistics.html
Eric Vyncke: http://www.vyncke.org/ipv6status/
IPv6 Deployment Around the World – Networkshop45 77
78. Visit us at
www.internetsociety.org
Follow us
@internetsociety
Galerie Jean-Malbuisson 15,
CH-1204 Geneva,
Switzerland.
+41 22 807 1444
1775 Wiehle Avenue,
Suite 201, Reston, VA
20190-5108 USA.
+1 703 439 2120
Thank you.
Matthew Ford
Technology Program Manager
ford@isoc.org
IPv6 Deployment Around the World – Networkshop45 78
81. About UCL
»Approximately 38,000 students
and 11,000 staff
»Main campus in Bloomsbury
»Satellite sites across London and
beyond
»Sponsored Connections e.g.
British Museum, National
Gallery, AlanTuring Institute
12/04/2017 IPv6 address planning
82. Our IPv6 Address Allocation Strategy
»JANET offer /48 from
2001:630::/32
»Alignment with IPv4
»Routing options limited
»Renumbering
»Size of allocation
»Full control
12/04/2017 IPv6 address planning
IPv6
83. RIPE allocation
»Application for LIR status
»Allocation /32
»Reserved /29
»Now we have it…. What do we
do with it?
12/04/2017 IPv6 address planning
85. Principles
»Stay within a single /32
»Allocation - day one
»Reservation – expansion
»Automated
»Compressed notation
12/04/2017 IPv6 Address Planning
87. IPv6 Strategies
»Last year somewhere on a
mountain….
› Packet Pushers
› SURFnet – Preparing an IPv6
Addressing Plan
› RIPE IPv6 Info Centre
12/04/2017 IPv6 Address Planning
89. In conclusion…
»Don’t ignore it just because
you think you’re IPv4 rich!
»Testing environment
»Procurement
»UCL IPv6 Working Group
12/04/2017 IPv6 Address Planning
92. UoR IPv6 state
12/04/2017 IPv6 Addressing Plans
IPv4
IPv6
Network Infrastructure (Routing, Firewalls)
Core Services
DNS andWebsite (IPv6 day)
IPv6 Only Data Centre
DHCPv6
More Services (corp. apps etc)
SLAAC with RDNSS (Wireless)
93. UoR IPv6 state
»University of Reading addressing:
–UK: 2001:630:53::/48
–Malaysia: 2001:df0:2bf::/48
–Unique Local Addresses (ULA) forVPN links
–e.g. fd0c:8da8:1839::/126
–Addressing based onVLAN IDs
12/04/2017 IPv6 Addressing Plans
94. Considerations
»Recommended smallest prefix is /64
»Being ‘mathematically’ correct
–Avoid: 134.225.204.0/24 2001:630:53:204::/64
(204 hex = 516 decimal !)
»Have a logical link to the routing topology
(OSPF areas, BGP private AS etc)
»Have a logical link to the IPv4 subnetting scheme
12/04/2017 IPv6 Addressing Plans
95. Considerations
Use Case:
»Network with 1-16 different sites/campuses/areas
»UniqueVLAN-IDs within each area
»One-to-One matchingVLAN-ID to Subnet
»Not convenient if the sameVLAN-ID is used for many
different subnets in the same area.
12/04/2017 IPv6 Addressing Plans
96. Subnet allocation
»2001:630:53: y x x x ::/64
0000 0000 0000 0000
Site VLAN
» y: Site / Campus /Area number/Zone: 0 – 15
–IPv6 route summarisation per site with /52
–IfVLAN-IDs are reused in different parts of the network.
» x:The same asVLAN-IDs: 0-4095
12/04/2017 IPv6 Addressing Plans
97. Subnet allocation
12/04/2017 IPv6 Addressing Plans
»The site identifier y can also be
used in various ways
› For 1 to 16 different
sites/campuses/areas
– Main Site (0-3),
• 0: Campus
• 1: Guest
• 2: DMZ
• 3: Other
– Site 1 (4-7),
– Site 2 (8-9)
– Site 3 (a-b)
– Data Centre (c-f)
101. IPv6Tools
»Must have:
› IPAM
› Documentation
› An easy-to-use tool to support engineers:
• UoR IPv6 calculator built by Dr. A. J. Gatward (Jan 2011)
12/04/2017 IPv6 Addressing Plans
102. IPv6 Risks
»Dual Stack
› Servers not configured for IPv6
(while advertised on DNS as having IPv6)
› Services not configured for IPv6
› Missing IPv6 firewall policies
»Solutions with no IPv6 support
› Hardware/firmware limitations (older equipment; BMS)
› Some newer applications too!
12/04/2017 IPv6 Addressing Plans
The Internet Society was founded by some of the Internet's earliest pioneers to help drive the Internet's development around the world. It is also the organizational home of the Internet Engineering Task Force (IETF). Working through a global community of chapters and members bound by a common purpose, the Internet Society coordinates across a broad range of different groups to promote the technologies that keep the Internet safe and secure, advocate for policies that enable universal access and champion an open Internet at all. The Internet Society believes that an Internet of opportunity should be available to everyone, everywhere and it is the Internet Society's mission to make that vision a reality.
The Internet Society:
Encourages open development of standards, protocols, administration.
Enables economic growth in developing countries through education and training
Fosters participation and develops new leaders in areas important to the evolution of the Internet.
Provides reliable information about the Internet.
Leads and facilitates discussion of issues that affect Internet evolution and developments.
If you’re not already a member – you can join today – it’s free!
Isoc.org -> Get Involved -> Become a Member -> Join our Community
(https://portal.isoc.org/partner/signup)
This is Your Internet…Join It.
Your membership to the Internet Society gives you a powerful voice.
As a grassroots organization, the Internet Society works hand-in-hand with its members to build a world that supports everyone’s right to share knowledge, innovate, and be heard.
[NOTES FOR INDIVIDUAL MEMBERS]
By becoming a member you will:
Have your voice heard in critical policy debates that are shaping the future of an open Internet
Have access to technical training and expertise
Apply for grants and fellowships that could help you make your community, city, or country a better place
Take part in or support projects and education in emerging economies
Get the latest information that will help empower you to protect your online privacy and identity
Become part of a powerful community that is working to make the world better
[NOTES FOR ORGANIZATIONL MEMBERS]
NEED TO UPDATE AND ADD
[NOTES FOR CHAPTER MEMBERS]
NEED TO UPDATE AND ADD
By working together we believe change is not only possible, it can happen now.
Take Action – Join the Internet Society today!
The Internet Society works globally, across the broad range of policy, technology, and development, which allows it to bring unique perspectives and insight about how to address some of the significant issues facing the Internet today.
Impact of World IPv6 Day, and World IPv6 Launch clearly visible in this research paper from 2014.
Alexa Top 1k now over 24% IPv6 reachable. 20% of Alexa top 25k, ~14% of Alexa top 1M
Centralisation of web content on relatively small numbers of very large hosting providers (e.g. Cloudflare) is helping to get IPv6 deployed.
Popular sites using IPv6 now include: Google, Facebook, YouTube, Netflix, Wikipedia, Instagram, LinkedIn
Notes on network operator measurements
We present measurements of network operator participants in World IPv6 Launch, based on data received from major website participants, as described in more detail below. We present a simple average of the data received, and list all networks with measurements from at least two sources, with a simple average above 0.1%. The network operator participants list includes some networks that measured above the threshold leading up to June 6th 2012, but for which we have insufficient measurement data to list here.
Akamai: We are reporting adoption rates based on the percentage of IPv6 requests we receive to a selection of dual-stacked properties on Akamai's content, site, and application delivery platform. The hundreds of billions of IPv4 and IPv6 requests analyzed across a 24-hour window represent traffic to a diverse set of customer sites across various industries, geographies, and user populations.
Facebook: On June 6th, we examined page loads from randomly selected users. For each user we are able to test if they are using IPv6 to communicate with Facebook. We also know which ISP (World IPv6 Launch participant) they are using at their location. After collecting all data for June 6th, we calculated the percent of unique IPv6 users out of total unique users we saw from each ISP. Many millions of page loads were in our 24-hour data capture for these statistics.
Google: We measure IPv6 adoption among Google users by adding measurement JavaScript to a random sample of visits to various Google properties. The methodology is similar to that described in our paper, Evaluating IPv6 adoption in the Internet. The JavaScript uses HTTP to fetch a URL from an IPv4-only hostname and a URL from a dual-stack hostname, in random order, and then reports the results. The measurement is attributed to the ASN that originates the user's IPv4 address. Measurement endpoints use the same infrastructure that serve regular Google traffic.
LinkedIn: Our adoption numbers are based on the percentage of page view requests made by LinkedIn members over IPv6 connections for select Autonomous System numbers. We measure this by adding JavaScript to select LinkedIn pages and the data represents our global member base.
Yahoo!: We are reporting adoption rates based on the percentage of IPv6 requests we receive on our Content Distribution Network (CDN). Yahoo!'s CDN is responsible for serving images, JavaScript, and other static images on behalf of most Yahoo! products world wide. This provides a view across diverse markets and interest groups.
AS 3651 - Sprint
AS 20057 – AT&T Wireless
AS 21928 – T-Mobile USA
AS 22394, 6167 - VZW
Sky – between 25% and 35% of dual-stack subscriber traffic is IPv6 (Oct 2016)
EE – 50%+ of mobile subscriber traffic is IPv6
Peaks are weekends – suggests there’s a lot more residential IPv6 than enterprise IPv6.
UK slipped from #10 to #12 in the six months since I last presented on this topic.
50 countries on Akamai’s list with 1.0% or more IPv6 deployment. So it’s not everywhere, but it’s in a lot of places and growing fast (see India).
This measurement is indicating that the estimate of the proportion of the Internet’s user population that can retrieve web object across IPv6 is some 12% of the total user base. In other words, if you hosted a web site and made it accessible only using IPv6, then some 12% of the total user population would be able to access the service, in the hypothetical situation where everyone on the Internet decided to access this IPv6 web object.
APNIC numbers high, Akamai low, Google somewhere in the middle
IPv6 query rate is around a ¼ of IPv4 query rate.
Less than 2% of DNS TLDs don’t have IPv6-capable name servers.
Two different views of when IPv6 will overtake IPv4 as the dominant IP on the Internet, Scott Hogg of Infoblox on the left, Martin Gysi from Swisscom on the right.
In some cases, IPv6 is already the dominant protocol: Over 58% of requests to Akamai-hosted dual stacked sites from US mobile users now show up over IPv6, with this growing at an accelerated pace since the iOS 10 launch.
This is the breakdown of AMS-IX traffic by ethertype – IPv6 peaks at 1.8% of total traffic.
Somewhere around 4% but some measurement methodology artefacts are clearly visible.
Hasn’t moved much, if at all in the last ~5 years
APNIC’s view
Peaks around 4%, troughs around 3%
Peaks are at weekends: people watch more cat videos at the weekend
JISC offer /48 from their /32
Our IPv4 space is PI
Only JANET could route our first IPv6 allocation
Could legitimately ask us to renumber – even our linknets
Wasn’t ungenerous but when we looked at allocating..
Wanted control of our IP destiny!
obtain legal and financial documentation
Plan for assignments within the next 2 years
seeded with Janet through the creation of a route object
IPv4 not logically assigned – distributed in chunks – don’t replicate the mistakes of before.
Location – optimised routing tables
Type – less optimised but routers handle this. Security policy easier.
/32 initially
More rather than less
Next block always reserved for every allocation.
Too many 000000s
Scripted (using sipcalc)
Each is a /40 assigned, /35 reserved
ISD - /48s assigned, /44 reserved (16 subnets) – first /48 for networks, first /64 for loopbacks
Depts - /48s assigned, /47s reserved (128 subnets)
Locations /56 assigned, /52 reserved (4096 subnets)
Sponsored /48s assigned, /47 reserved (128 subnets)
Not a recommended method of focussing your efforts but did give me time to think about what we could and should do…………….
Route sum – hierarchical allocation to reduce size of core routing updates, security policies
DNS – QUAD A support not there in old OS e.g. Win 2003, happy eyeballs flip to v4 in v6 not there. Reverse DNS – dynamic/wildcard
Supported- IPv6 part of all tenders for new equipment/services – DC principle – ipv6 ready. – MBGP – network monitoring tools?
IPAM – can’t use excel or worse…
DHCP- Android issue –dhcpv6 management a bit more work, SLAAC security concerns - improve network access controls
ICMPv6 – not just ping, don’t match your ACLs in v4 land… Neighbour Discovery protocol
Security – dhcpv6, allocate randomly to avoid sequences to aid address scanning. Embedding ipv4 in address would help this too. You have IPv6 already (self assigned). RA filtering, secure ND
IPSEC, tunnelling protocols, multicast blocks, DHCPv6 using link-local addresses
IoT
Client growth in wireless (hitting over 30k), IoT
Engineering environment (mini datacentre)
All new purchases
Create roadmap, identify legacy apps/inf
Develop principles and goals e.g.. Dual stack for external, datacentre
Involve interested departments – e.g EE