IOT, It's the Internet...only bigger
Download as PPTX, PDF0 likes1,677 views
The document discusses the importance of IPv6 for the Internet of Things (IoT), highlighting the exhaustion of IPv4 addresses and the urgent need for the transition to IPv6 to support an increasing number of devices. It outlines challenges related to security and stability in the IoT landscape, emphasizing the potential for liabilities and operational issues due to inadequate testing of IoT devices. APNIC's role as a regional internet address registry in managing these resources and promoting internet development is also addressed.
IOT, It's the Internet...only bigger
- 1. IoT Paul Wilson 8 December IPv6 Summit - Taiwan …it’s the Internet …only bigger
- 2. The Internet, only bigger… • Why the Internet works • IoT on the Internet • What does that mean – IPv6 – Security • How to succeed 2
- 3. About APNIC
- 4. What is APNIC? • The Regional Internet address Registry (RIR) for the Asia Pacific region • Delegates and manages Internet number resources – Including IPv4 and IPv6 addresses • Supports training, education and internet development • A neutral, independent, not-for-profit, open membership- based organisation, since 1993 4
- 6. APNIC’s Vision A global, open, stable, and secure Internet that serves the entire Asia Pacific community 6
- 7. It’s all about the Internet and the Internet’s success
- 8. Global broadband subscriptions 0 1000 2000 3000 4000 5000 6000 7000 8000 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 Population Fixed subs Mobile subs Total subs 8 Sources: http://www.geohive.com http://www.statista.com
- 9. Why the success? • Global network – uniform – “End-to-End” • “Dumb” network – lightweight and efficient – intelligence at the edges, in applications and devices • Neutral network – by default • Open network – distributed governance – no/low barrier to entry – free standards
- 10. The Open Systems Interconnection (OSI) model Layered communication standards IP TCP/ HTTP
- 11. Layers – in practice Phone/Fax/SMS TV/VOD/conf “The Internet” Applications Fixed, Dialup/ISDN Mobile/2G Cable/ADSL Infrastructure Voice Video Data Network
- 12. Layers – in the Internet 12 Voice, email, IM Video, TV, conf WWW, DNS Applications 802.11x/WiMax Mobile/4G/LTE Cable/xDSLx/FTTxInfrastructure IPv6 Internet (TCP/IP) IoT apps LoRa,6loWPAN
- 13. “Internet of Things” 13 Source: Cisco, 2015 Things Subscribers
- 14. The Internet of Everything
- 15. It’s always been the Internet History of IoT
- 16. 16 Internet goes mobile (1976) The Packet Radio Van Contained an ARPANet terminal
- 18. CMU Coke Machine (1980s – 1990s) 18
- 19. The Internet Toaster 1990 19
- 20. The Internet Toaster v2 1991 20
- 21. IoT firsts… • 1982: Coke machine • 1990: toaster • 1993: webcam • 1994: Internet radio/player • 1994: smartphone • 1995 VOIP software • 1999: “Internet of Things” • 2001: 3G • 2010: 4G/LTE 21
- 22. Two Mobile Revolutions… • 1990s: mobile voice explosion – Few wires available (copper) – New wireless technology (analogue mobile) – New consumer technology (cellphones) – Pent up demand (telephony) • 2010s: mobile broadband explosion – Few wires available (copper/fibre) – New wireless technology (3G/4G) – New consumer technology (smart phones) – Pent up demand (Internet) • But note: IoT is not ALL “mobile” – 802.11, wired (eg power line), LoRa, etc 22
- 23. Global broadband subscriptions 0 1000 2000 3000 4000 5000 6000 7000 8000 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 Population Fixed subs Mobile subs Total subs 23 Sources: http://www.geohive.com http://www.statista.com
- 24. IoT nexts… • Electronics of all kinds: personal, home, office, industry • Devices: Appliances, lighting, sensors, security • Vehicles, domestic and industrial, and components • Civil infrastructures: water, power, fuel, transportation • Manufacturing and industrial • Environmental monitoring • Health and related services • Robotics • Smart Homes, Smart Cities 24
- 25. “Internet of Things” 25 Source: Cisco, 2015 Things Subscribers
- 26. So what does it mean? IPv4 exhaustion and IPv6 transition
- 27. IoT needs IP addresses • IPv4 (since 1983) – Example: 202.12.29.142 – 32-bit* number: 232 = ~4 billion addresses – Existing supply is very nearly exhausted • IPv6 (since 1999) – Example: FE38:DCE3:124C:C1A2:BA03:6735:EF1C:683D – 128-bit* number: 2128 = 340 billion billion billion billion – Existing supply should/must last for many decades • The Transition to IPv6 – Underway since 2000, but slowly – Not a priority while IPv4 addresses available – Accelerating rapidly today * bit = binary digit
- 28. http://www.potaroo.net/tools/ipv4 50 million IPv4 addresses left…
- 29. IPv4 exhaustion… • IANA pool fully distributed in 2011 • RIR regional supplies followed – APNIC: 2011 – RIPE NCC: 2012 – LACNIC: 2014 – ARIN: 2015 – AFRINIC: 2017 • “Stop-gap Measures” – These can continue but are damaging – Address sharing, Network Address Translation (NAT)
- 30. NAT aka Address Sharing ISP202.12.29.0/24 The Internet 202.12.29.1 … .2 … .3 … .4 10.0.0.1 ..2 ..3 ..4 *AKA home router, hotspot, etc … .32 NAT*
- 31. Carrier Grade NAT (CGN) IPv4 CGN 10.255.255.25510.0.0.1
- 32. CGN Challenges 32 1GB per subscriber per month! Cable Television Laboratories, Inc. 2012
- 33. !!! “Things”“Things” Double NAT everywhere? IPv4 CGN NAT
- 34. The need for IPv6… • One reason: more addresses – Other benefits are minor • The Internet is growing fast – Broadband: mobile and wifi – Internet of Things • Without IPv6… – Ever increasing complexity and cost, indefinitely – All elements affected: client, server, devices, software • IPv6 is the only viable option – Enable sustainable growth of the Internet, indefinitely – To ensure the success of IoT
- 35. Good news…
- 37. So what does it mean? Security and Stability
- 38. An Internet of Stupid Things? • IoT means big numbers – Huge increase in number and variety of devices – Huge increase in platforms and applications – Companies may be ill-equipped to anticipate problems • IoT means bigger impacts – Many devices will be released without sufficient testing – Lab testing may not reveal problems in deployment – May affect many millions of devices • Other implications – Problems may appear many years after release – May be hard or impossible to rectify – Huge liability for companies and reputations 38
- 39. 2003: University of Wisconsin • Problem: Rapidly escalating DoS attack – Hundreds of Mbps from many sources – SNTP protocol querying time server at UoW • Cause: new CPE modem – Incorrect use of SNTP protocol – Queries sent to Stratum 1 server instead of others • Solution: difficult! – Relies on replacing or upgrading CPE – Most users do not do firmware upgrade – Most unaware of any problem – Impossible to reach 39
- 40. 2010: APNIC 40 • Testing of received IPv4 address block 1.0.0.0/8 – Traffic received from 1.1.1.1 and 1.2.3.4 – Addresses hardcoded into Point of Sales systems (as if private) 860 Mbps 120 Mbps >1 TB received per day !
- 41. 2015: APNIC 41 • Problem: Excessive queries to whois server – 5000 queries per second sustained load • Cause: Firewall product – Hardcoded IP address – Instead of domain name which allows redirection, load balancing • Solution: see UoW
- 42. How to succeed The IoT vision
- 43. Ecosystems Electronics manufacturing • R&D • Specification and design • Prototyping and manufacture • Assembly and test • Training • Policy and regulation • Users Internet • Standardisation • Content and Applications • ISPs, hosting and data centres • Telecommunications infrastructure • Security • Training • Policy and regulation • Users 43
- 44. Ecosystem cross-connect • Ecosystems are very different, but: – Manufacturers must become Internet companies – Internet companies must service the needs of IoT • Many interconnections – Training and human capacity building – Standardisation and application of standards – BCPs: Best Current Practices (always evolving) – Governmental policy and regulation, and education • Critical collaboration – Manufacturers can and should join unique Internet ecosystem – Open and bottom-up multistakeholder processes, etc – All are welcome, always! 44
- 45. You’re invited…
- 46. APNIC 44 in Taichung, Sep 2017 !
- 48. Thank you