SlideShare a Scribd company logo
IPv6 Transition Strategies
Philip Smith
<philip@apnic.net>
APNIC 44
Taichung, Taiwan
7th โ€“ 14th September 2017
1Last updated 12th September 2017
Presentation Slides
p Will be available on
n http://bgp4all.com/dokuwiki/conferences/
n And on the APNIC44 website
p Feel free to ask questions any time
Acknowledgements
p This material originated from the Cisco ISP/IXP
Workshop Programme developed by Philip Smith
& Barry Greene
n These slides were originally developed by Ciscoโ€™s CTO
Consulting Engineering Group
p Use of these materials is encouraged as long as
the source is fully acknowledged and this notice
remains in place
p Bug fixes and improvements are welcomed
n Please email workshop (at) bgp4all.com
3
Philip Smith
Introduction
Why should we care?
4
โ€œThe times, They are aโ€™ changinโ€™โ€
5
Source: ipv4.potaroo.net (September 2017)
IPv4 All Gone!
Is IPv4 really running out?
p Yes!
n IANA IPv4 free pool ran out on 3rd February
2011
n RIR IPv4 free pool is starting to run out now
p www.potaroo.net/tools/ipv4/
p (depends on RIR soft-landing policies)
p The runout gadgets and widgets are
now watching when the RIR pools will
run out:
n inetcore.com/project/ipv4ec/index_en.html
p (shows 1 RIR with no IPv4 left, and 3 out of 4
RIRs in run out austerity phase)
n ipv6.he.net/statistics/
6
Strategies available for Service
Providers
p Do nothing
n Wait and see what competitors do
n Business not growing, so donโ€™t care what happens
p Extend life of IPv4
n Force customers to NAT
n Buy IPv4 address space on the marketplace
p Deploy IPv6
n Dual-stack infrastructure
n IPv6 and NATed IPv4 for customers
n 6rd (Rapid Deploy) with native or NATed IPv4 for
customers
n DS-Lite or 464XLAT with native IPv6 and NATed IPv4 for
customers
n Or other combinations of IPv6, IPv4 and NAT 7
Definition of Terms
8
Dual-Stack Networks
p Both IPv4 and IPv6 have been fully deployed across all the
infrastructure
n Routing protocols handle IPv4 and IPv6
n Content, application, and services available on IPv4 and IPv6
p End-users use dual-stack network transparently:
n If DNS returns IPv6 address for domain name query, IPv6
transport is used
n If no IPv6 address returned, DNS is queried for IPv4 address,
and IPv4 transport is used instead
n Recent improvements introduce โ€œhappy eye-ballsโ€ (RFC6555)
p It is envisaged that the Internet will operate dual-stack for
many years to come
9
IP in IP Tunnels
p A mechanism whereby an IP packet from one
address family is encapsulated in an IP packet
from another address family
n Enables the original packet to be transported over
network of another address family
p Allows ISP to provide dual-stack service prior to
completing infrastructure deployment
p Tunnelling techniques include:
n IPinIP, GRE, 6to4, Teredo, ISATAP, 6rd, MPLS
10
Address Family Translation (AFT)
p Refers to translation of an IP address from
one address family into another address
family
n e.g. IPv6 to IPv4 translation
p Usually called NAT64
n Or IPv4 to IPv6 translation
p Usually called NAT46, usually using SIIT
11
Network Address Translation (NAT)
p NAT is translation of one IP address into another
IP address
p NAPT (Network Address & Port Translation)
translates multiple IP addresses into one other IP
address
n TCP/UDP port distinguishes different packet flows
p NAT-PT (NAT โ€“ Protocol Translation) is a
particular technology which does protocol
translation in addition to address translation
n NAT-PT is has now been made obsolete by the IETF
12
Carrier Grade NAT (CGN)
p ISP version of subscriber NAT
n Subscriber NAT can handle only hundreds of translations
n ISP NAT can handle millions of translations
n Expensive high performance hardware
p Not limited to just translation within one address
family, but does address family translation as
well
p Sometimes referred to as Large Scale NAT (LSN)
13
โ€œHappy Eyeballsโ€ โ€“ RFC6555
p The device or application chooses the protocol
which will give the user the best experience
p Designed to work around shortcomings in either
IPv4 or IPv6 infrastructure, or misconfigured IPv4
or IPv6 destination devices
p Short summary for dual stack device:
n Application asks for IPv4 and IPv6 address
n If both are returned, application opens connection using
IPv6 and IPv4 simultaneously (or IPv6 first, then IPv4
after a short (few ms) delay)
n Application uses the transport which responds with a
connection first
14
Aside: NAT Issues (1)
p How to scale NAT performance for large
networks?
n Limiting tcp/udp ports per user harms user experience
p CGN deployment usually requires redesign of SP
network
n Deploy in core, or access edge, or border,โ€ฆ?
p Breaks the end-to-end model of IP
p Breaks end-to-end network security
p Breaks non-NAT friendly applications
n Or NAT has to be upgraded (if possible)
15
Aside: NAT Issues (2)
p Makes fast rerouting and multihoming more
difficult
n Moving IPv4 address pools between CGNs for external
traffic engineering
p Address sharing has reputation, reliability and
security issues for end-users
p Layered NAT devices (double or even triple NAT)
p Mandates that the network keeps the state of the
connections
p Makes the NAT device a target for miscreants due
to possible impact on large numbers of users
p Makes content hosting impossible 16
Aside: NAT Issues (3)
p Limited ports for NAPT:
n Typical user device 400 sessions
n TCP/UDP ports per IPv4 address 130k
n Implies 130000/400 users 320 users
n One IPv4 /22 has: 1024 addresses
n One IPv4 /22 could support: 320k users
p Sizing a NAT device has to be considered quite
seriously
17
Aside: NAT Issues (4)
p Consumer NAT device:
n 3000 sessions means only 7 connected devices!
n โ€œNAT table FULLโ€ error messages
n โ€œBroken Googlemapsโ€
n โ€œStuck Internetโ€
p Carrier Grade NAT device:
n 20 million sessions (Cisco ASR9001 ISM)
n Which realistically is 50k users (400 sessions per user)
n APNIC final /22 only allows 320k users L
p How to support LTE networks?!
n Number of users? Public IPv4 addresses for CGN?
n Maintaining LTE performance? Throughput of CGN?
18
Strategy One
Do Nothing
19
IPv4 only Network
p The situation for many SPs today:
n No IPv6 for consumer
n IPv4 scaling lasts as long as IPv4 addresses are available 20
IPv4
Internet
IPv4 host
IPv4+IPv6 host
Subscriber Network IPv4-only SP Network Internet
IPv4
Customer
Router
IPv6 host
IPv6
Internet
IPv6
IPv4 only: Issues
p Advantages
n Easiest and most cost effective short term
strategy
p Disadvantages
n Limited to IPv4 address availability (RIRs or
marketplace)
n No access to IPv6
n Negative public perception of SP as a laggard
n Strategy will have to be reconsidered once
IPv4 address space is no longer available
21
IPv4 only: Applicability
p For Network Operators who:
n Have sufficient IPv4 address space for
foreseeable future business needs
n Donโ€™t undertake long term planning
n Are not heeding customer requests regarding
IPv6 access
n Have sufficient funds to purchase IPv4 address
space via the marketplace
22
Strategy Two
Extend life of IPv4 network
23
Extending life of IPv4 Network
p Two ways of extending IPv4 network
n Next step along from โ€œStrategy One: Do
nothingโ€
1. Force customers to use NAT
n Customers moved to RFC1918 address space
n SP infrastructure moved to RFC6598 address
space (as public IPv4 needed for CGN pools)
2. Acquire IPv4 address space from another
organisation
n IPv4 subnet trading
24
SP NAT in IPv4-only network
p Next step on from โ€œdoing nothingโ€:
n SP introduces NAT in core when IPv4 addresses run out
n No access to IPv6 Internet for IPv6 enabled hosts 25
IPv4
Internet
IPv4 host
IPv4+IPv6 host
Subscriber Network SP IPv4-only Network using
RFC6598 addresses
Internet
IPv4
Customer
Router
IPv6 host
IPv6
Internet
IPv6
SP NAT
Sharing IPv4 address(es)
SP NAT in IPv4-only network:
Issues
p Advantages
n ISPs can reclaim global IPv4 addresses from their customers,
replacing with non-routable private addresses and NAT
n Allows continued IPv4 subscriber growth
p Disadvantages
n SP needs a large NAT device in the aggregation or core layers
n Has every well known technical drawback of NAT, including
prevention of service deployment by customers
n Double NAT highly likely (customer NAT as well as SP NAT)
n Sharing IPv4 addresses could have behavioural, security and
liability implications
n Tracking association of port/address and subscriber, not to
mention Lawful Intercept issues, are still under study
n May postpone IPv6 deployment for a couple of years
n Prevents subscribers from using IPv6 content, services and
applications
26
SP NAT in IPv4-only network:
Applicability
p For Network Operators who:
n Are happy to purchase and operate CGN devices within
their core network
n Are aware of the operational and performance pitfalls of
CGN devices
n Are aware that their IPv4 network will need to be
redesigned to accommodate CGN devices
n Are aware of suboptimal routing and extra bandwidth
requirements
n Are able to reclaim public addresses from their
customers for redeployment in their backbone
n Are not heeding requests from customers for IPv6
access
27
IPv4 Subnet Trading
p Today the cost of getting IPv4 address space is low:
n Service Provider:
p RIR membership fee
p Registration service fee (varies according to RIR service region)
n End-sites usually receive IPv4 address block from SP as part
of service
n Many SPs already charge end-site for privilege of public
IPv4 address
p In future when RIRs have no more IPv4 address
space to distribute:
n Cost of IPv4 addresses will be higher (today itโ€™s close to 0)
n SPs may โ€œpurchaseโ€ IPv4 address space from other
organisations
28
IPv4 Subnet Trading: Issues
p Advantages
n Valuation of IPv4 addresses may hasten IPv6 adoption
by encouraging sellers, perhaps more than offsetting
costs to move some or all of their network to v6
n Receivers of transferred IPv4 address space can prolong
their IPv4 networks
p Disadvantages
n Market may not materialise, so organisations hoping to
benefit may not
n Depending on region, if RIR doesnโ€™t register transfer,
there may be no routability
n Risk to integrity of routing system, as RIRs no longer
authoritative for address records
n Even more rapid growth of routing system
n Financial pressure on ISPs to dispose of IPv4 addresses
they still need
29
IPv4 Subnet Trading: Applicability
p For Network Operators who:
n Are have sufficient funds to purchase IPv4 address
space on the marketplace
n Are aware of the operational and performance pitfalls of
purchased address space
p Routability (legacy SP filters)
p Registration (RIR vs not)
p Reputation (previous user)
n Are not heeding requests from customers for IPv6
access
30
Strategy Three
IPv4/v6 Coexistence/Transition
techniques
31
IPv4/IPv6 coexistence & transition
p Three strategies for IPv6 transition:
n Dual Stack Network
p The original strategy
p Depends on sufficient IPv4 being available
n 6rd (Rapid Deploy)
p Special case of & improvement on 6to4 for SP
customer deployment
p Documented in RFC5969
n 464XLAT or DS-Lite or NAT64 with CGN
p SP deploys large NAT boxes to do address and/or
protocol translation
32
IPv4/IPv6 coexistence & transition
p Carrier Grade NAT (CGN)
n Dual-Stack Lite
p IPv4 to IPv4 over IPv6
p Documented in RFC6333
n 464XLAT
p IPv4 to IPv4 over IPv6
p Documented in RFC6877
n NAT64
p Translation between IPv6 and IPv4
p Documented in RFC6146
33
Dual-Stack Network
p The original transition scenario, but dependent on:
n IPv6 being available all the way to the consumer
n Sufficient IPv4 address space for the consumer and SP core
34
IPv4
Internet
IPv4 host
IPv4+IPv6 host
Subscriber Network Dual-Stack SP Network Internet
IPv4
Customer
Router
IPv6 host
IPv6
Internet
IPv6
Dual-Stack Network: Issues
p Advantages
n Most cost effective long term model
n Once services are on IPv6, IPv4 can simply be
discontinued
p Disadvantages
n IPv4 growth limited to available IPv4 address space
n Running dual-stack network requires extra staff training
n IPv6 on existing IPv4 infrastructure might cost extra in
terms of hardware changes (RIB and FIB memories)
n IPv6-only end-points cannot access IPv4, but given most
IPv6 end-points are dual-stack, require IPv4 address too
35
Dual-Stack Network: Applicability
p For Network Operators who:
n Have sufficient IPv4 address space for foreseeable future
n Also may consider purchasing IPv4 address space on the
open market
n Have no legacy equipment or infrastructure which does
not support IPv6
n Do not wish to deploy CGN (NAT44)
n Are willing to support dual-stack CPE
p Note: this is considered the ideal option
p Example:
n Typical traditional Internet Service Provider deployment
36
Dual-Stack with SP NAT
p More likely scenario:
n IPv6 being available all the way to the consumer
n SP core and customer has to use IPv4 NAT due to v4
depletion
37
IPv4
Internet
IPv4 host
IPv4+IPv6 host
Subscriber Network Dual-Stack SP Network using
RFC6598 addresses
Internet
IPv4
Customer
Router
IPv6 host
IPv6
Internet
IPv6
SP NAT
Sharing IPv4 address(es)
Dual-Stack with SP NAT: Issues
p Advantages
n ISPs can reclaim global IPv4 addresses from their customers,
replacing with non-routable private addresses and NAT
n Allows continued IPv4 subscriber growth
n SP can offer IPv6 connectivity too
n Does not postpone IPv6 deployment
n SP NAT off-load (compared with IPv4-only network)
p Disadvantages
n SP needs a large NAT device in the aggregation or core layers
n Has every well known technical drawback of NAT, including
prevention of service deployment by customers
n Double NAT highly likely (customer NAT as well as SP NAT)
n Sharing IPv4 addresses could have behavioural, security and
liability implications
n Tracking association of port/address and subscriber, not to
mention Lawful Intercept issues, are still under study
n SP incurs additional investment and operational expenditure
by deploying an IPv6 infrastructure
38
Dual-Stack with SP-NAT:
Applicability
p For Network Operators who:
n Have do not sufficient IPv4 address space and are
content deploying CGN (NAT44) in the core
n Are able to reclaim public IPv4 address space from
customers for redeployment on their backbone
infrastructure
n Have no legacy equipment or infrastructure which does
not support IPv6
n Are willing to support dual-stack CPE
p Note: this is considered the realistic best practice
p Example:
n Typical traditional Internet Service Provider deployment
39
Aside: SP-NAT Offload
p If 50% of end user traffic is IPv6, then this means 50% less
IPv4 traffic which has to be mapped and translated via the
SPโ€™s CGN installation
n The greater the proportion of IPv6 traffic (compared with
IPv4), the less the load is on the CGN devices, and reduced
demand on the public IPv4 address pool
n CGN is used simply for accessing legacy IPv4 sites
p Operators with high data volumes realise that by deploying
IPv6:
n End users have better Internet experience when traffic is not
NATโ€™ed
n They have reduced CapEx deploying fewer CGN devices
n Savings from reduced CGN CapEx are often greater than the
additional costs to deploy IPv6 to end-users
p This is called SP-NAT Offload
40
6rd
p 6rd (Rapid Deploy) used where ISP infrastructure to
customer is not IPv6 capable (eg IPv4-only BRAS)
n Customer has IPv4 Internet access either natively or via NAT
n Customer IPv6 address space based on ISP IPv4 block 41
IPv4-only
SP Network
IPv4
Internet
IPv4 host
IPv4+IPv6 host
Subscriber Network Internet
IPv4
IPv6
Internet
IPv6
Dual-Stack
SP NetworkCustomer
Router
IPv6 host
6rd BR
SP NAT
6rd: Issues
p Advantages
n The service provider has a relatively quick way of providing
IPv6 to their customer without deploying IPv6 across their
infrastructure
n Subscribers can readily get access to IPv6
n SP NAT off-load (compared with IPv4-only network)
n 6rd relay and CPE are becoming available from vendors
n 6rd operation is completely stateless, does not have the
operational drawbacks of 6to4, and does not postpone IPv6
deployment
p Disadvantages
n 6rd is not a long-term solution for transitioning to IPv6 โ€“ one
further transition step to remove the tunnels
n CPE needs to be upgraded to support 6rd
n The ISP has to deploy one or several 6rd termination devices
n If customer or SP uses NAT for IPv4, all NAT disadvantages
are inherited 42
6rd: Applicability
p For Network Operators who:
n Have do not sufficient IPv4 address space and are
content deploying CGN (NAT44) in the core
n Are able to reclaim public IPv4 address space from
customers for redeployment on their backbone
infrastructure
n Have legacy equipment or infrastructure which does not
support IPv6
p And realise that it will eventually have to be upgraded
n Are willing to run a 6rd Border Router
n Are willing to support dual-stack CPE (with 6rd)
p Example:
n Broadband operators who have legacy DSLAMs or lease
a third partyโ€™s L2 network 43
Dual-Stack Lite
p Service Provider deploys IPv6-only infrastructure:
n IPv6 being available all the way to the consumer
n IPv4 is tunnelled through IPv6 core to Internet via SP NAT
device
44
IPv4+IPv6 host
Subscriber Network IPv6-only SP Network Internet
Customer
Router
IPv6 host
IPv6
Internet
IPv6
IPv4
Internet
IPv4 host
IPv4
SP NAT
Sharing IPv4 address(es)
Tunnel
Dual-Stack Lite: Issues
p Advantages
n The SP is using IPv6 across their entire infrastructure,
avoiding the IPv4 address pool depletion issue totally
n The SP can scale their infrastructure without any IPv4
dependencies
n Consumers can transition from IPv4 to IPv6 without
being aware of any differences in the protocols
n IPv6 packets routed natively
n SP NAT off-load (compared with IPv4-only network)
p Disadvantages
n SP requires NAT device in core supporting DS-Lite
n Subscriber router needs to be IPv6 capable
n Model has all drawbacks of SP NAT model for IPv4 traffic
45
Dual-Stack Lite: Applicability
p For Network Operators who:
n Are considering โ€œgreen-fieldโ€ deployments
n Are content running an IPv6-only backbone
n Are willing to deploy CGN (DS-Lite) in the core
n Are willing to support dual-stack CPE (with DS-Lite)
p Example:
n Mobile operators rolling out a brand new network, with
handsets which have dual-stack radios
46
Stateful AFT (NAT64)
p Service Provider deploys IPv6-only infrastructure:
n Only IPv6 is available to the consumer
n IPv4 Internet available via Address Family Translation on SP
NAT device 47
IPv4 host
IPv4+IPv6 host
Subscriber Network IPv6-only SP Network Internet
Customer
Router
IPv6 host
IPv6
Internet
IPv6
IPv4
IPv4
Internet
SP DNS64
SP NAT64
Sharing IPv4 address(es)
NAT64 IPv6
Stateful AFT (NAT64) Details
48
IPv4 host
IPv4+IPv6 host
Subscriber Network IPv6-only SP Network Internet
Customer
Router
IPv4
IPv4
Internet
SP DNS64
SP NAT64
Sharing IPv4 address(es)
IPv6 host
DNS
2. A RR?
3. A RR
IPv6
1. AAAA RR?
4. Synthetic
AAAA RR
Stateful AFT: Issues
p Advantages
n Allows IPv6 only consumers access to IPv4 based
content without giving them IPv4 address resources
n IPv6 services and applications offered natively to
consumers
n SP network runs IPv6 only, avoiding IPv4 dependencies
p Disadvantages
n SP requires NAT device in core
n SPโ€™s DNS infrastructure needs to be modified to support
NAT64
n Subscriber router needs to be IPv6 capable
n Subscriber devices need to be IPv6 capable (no legacy
support)
n Model has all drawbacks of SP NAT model for IPv4 traffic
49
Stateful AFT: Applicability
p For Network Operators who:
n Are considering โ€œgreen-fieldโ€ deployments
n Are content running an IPv6-only backbone
n Are willing to deploy CGN (NAT64) in the core
n Are willing to support IPv6-only CPE
p Example:
n Mobile operators rolling out a brand new network, with
handsets which have single-stack (IPv6-only) radios
50
464XLAT
p Service Provider deploys IPv6-only infrastructure:
n IPv6 being available all the way to the consumer
n IPv4 is transported through IPv6 core to Internet via SIIT on
customer router, and NAT64 on SP NAT device
51
IPv4+IPv6 host
Subscriber Network IPv6-only SP Network Internet
Customer
Router
(CLAT)
IPv4
Internet
IPv4 host
IPv4
SP NAT (PLAT)
Sharing IPv4 address(es)
SIIT encaps
IPv6 host
IPv6
Internet
IPv6
464XLAT: Issues
p Advantages
n The SP is using IPv6 across their entire infrastructure, avoiding
the IPv4 address pool depletion issue totally
n The SP can scale their infrastructure without any IPv4
dependencies
n Consumers can transition from IPv4 to IPv6 without being aware
of any differences in the protocols
n Devices not supporting IPv6 can access IPv6-only networks
n IPv6 packets routed natively
n SP NAT off-load (compared with IPv4-only network)
p Disadvantages
n SP requires NAT device in core (PLAT & NAT64)
n Subscriber router needs to be IPv6 capable and support
IPv4/IPv6 header translation (CLAT โ€“ SIIT)
n Model has all drawbacks of SP NAT model for IPv4 traffic 52
464XLAT: Applicability
p For Network Operators who:
n Are considering โ€œgreen-fieldโ€ deployments
n Are content running an IPv6-only backbone
n Are willing to deploy CGN (PLAT) in the core
n Are willing to support dual-stack CPE (CLAT)
p Example:
n Mobile operators rolling out a brand new network, with
handsets which have dual-stack radios
53
Conclusions &
Recommendations
54
55
Functionalities and Operational Issues
IPv4-only
network
IPv4-only
network with
IPv4 NAT
Dual-Stack, no
IPv4 NAT
Dual-Stack
with IPv4 NAT
6rd, no IPv4
NAT
6rd with IPv4
NAT
DS-Lite 464XLAT Stateful AFT
Prolongs IPv4 No Yes No Yes No Yes Yes Yes Yes
Allows Business
Growth
No
Yes (scaling
issues if
content is
mostly IPv6)
Limited to IP
v4 address
availability
Yes (traffic to
IPv4-only
servers)
Limited to
IPv4 address
availability
Yes Yes Yes Yes
Requires IPv6
Deployment
No No Yes Yes Yes Yes Yes Yes Yes
Coexists with IPv6
Deployment
No No Yes Yes Yes Yes Yes Yes Yes
Complexity of
Operation
Low Low Low Moderate Moderate Moderate Moderate Moderate Moderate
Complexity of
Troubleshooting
Low Moderate Low High Moderate High High High Moderate
Breaks End-to-End
IPv4
No Yes No Yes No Yes Yes Yes N/A
NAT Scalability
issues to IPv4
services
No Yes No Yes No Yes Yes Yes Yes
NAT Scalability
issues to IPv6
services
N/A Yes No No No No No No No
DNSSEC issues No Yes No
Yes for IPv4
No for IPv6
No
Yes for IPv6
No for IPv4
Yes for IPv4
No for IPv6
Yes for IPv4
No for IPv6
Yes for IPv4
No for IPv6
Lawful Intercept
issues
No Yes No Yes for IPv4 No Yes for IPv4 Yes for IPv4 Yes for IPv4 Yes for IPv4
Functionalities and Operational
Issues
p Complexity of operation:
n Moderate in the case of a single network with
two address families
p Complexity of troubleshooting:
n Running two address families and/or tunnels is
assumed to be more complex
p Breaks end-to-end connectivity in IPv4:
n Subscribers sharing a CGN will have little to no
hurdles in their communication
n Subscribers separated by one or several CGN
will experience some application issues
56
Comparing where changes will occur
IPv4-only
network
IPv4-only
network
with IPv4
NAT
Dual-Stack,
no IPv4 NAT
Dual-Stack
with IPv4
NAT
6rd, no
IPv4 NAT
6rd with
IPv4 NAT
DS-Lite 464XLAT
Stateful
AFT
Change
CPE
No No
Only if
customer
wants IPv6
Only if
customer
wants IPv6
Yes Yes Yes Yes Yes
CPE to do
AFT to
access
IPv6
No No No No No No No No No
IPv4 NAT
in
core/edge
No Yes No Yes No Yes Yes Yes No
AFT in
core/edge
to access
IPv6
Yes Yes No No No No No No Yes
57
Conclusions
Potential Scenarios
1. Most of the content and applications move to IPv6 only;
2. Most of the content and applications are offered for IPv4
and IPv6;
3. Most of the users move to IPv6 only
n Especially mobile operators offering LTE handsets in emerging
countries
4. No change (the contents/applications stay IPv4 and
absence of pro-IPv6 regulation), SP customer expectations
devolve to double-NAT;
5. No change (the contents/applications stay IPv4) but SP
customer expectations do not devolve to double-NAT (or
they are ready to pay for peer-to-peer connectivity).
n Perhaps well established broadband markets like US or Europe
58
Conclusions
Potential Techniques
Scenario Potential Techniques
Content and Applications
move to IPv6
IPv6 only network; Dual-Stack, 6rd,
464XLAT or DS-lite as migration techniques
Content and Applications on
IPv4 and IPv6
Dual-Stack (if enough IPv4) or 6rd; SP IPv4-
NAT; DS-lite or 464XLAT (for greenfield) *
Users are IPv6 only Stateful AFT to get to IPv4 content *
No change (double NAT) SP IPv4-NAT *
No change (no double NAT) Do nothing *
59
* Transfer Market applicable
Recommendations
1. Start deploying IPv6 as long term
strategy
2. Evaluate current addressing usage to
understand if IPv4 to IPv4 NAT is
sufficient for transition period
3. Prepare a translation mechanism from the
IPv4 Internet to the IPv6 Internet
4. Educate your user base on IPv6
introduction, the use cases and
troubleshooting
60
Recommendations
p Mobile operator:
n 464XLAT (support IPv4 and IPv6)
n NAT64 (IPv6 only)
p Access provider:
n Dual stack core and access (if supported to end-user)
n 6rd (if legacy IPv4 infrastructure or legacy 3rd party L2)
p Enterprise service provider:
n Dual stack access and core
p Content provider:
n Dual stack access and core
61
IPv6 Transition Planning
A Review of IPv4-IPv6 Co-
Existence Techniques
62

More Related Content

PDF
IPv6 Transition Strategies
ย 
PDF
Cisco Live! :: Cisco ASR 9000 Architecture :: BRKARC-2003 | Las Vegas 2017
PDF
Segment Routing Lab
PPTX
Bgp protocol
PDF
SRv6 Network Programming: deployment use-cases
ย 
PPTX
Routing Protocols
PDF
Cisco Live! :: Introduction to Segment Routing :: BRKRST-2124 | Las Vegas 2017
PDF
Sigtran oracle
ย 
IPv6 Transition Strategies
ย 
Cisco Live! :: Cisco ASR 9000 Architecture :: BRKARC-2003 | Las Vegas 2017
Segment Routing Lab
Bgp protocol
SRv6 Network Programming: deployment use-cases
ย 
Routing Protocols
Cisco Live! :: Introduction to Segment Routing :: BRKRST-2124 | Las Vegas 2017
Sigtran oracle
ย 

What's hot (20)

PDF
CCNA-LAB-GUIDE-V3_LAST-ADDITION (4).pdf
PDF
MPLS Traffic Engineering
ย 
PPTX
VXLAN
PPTX
MPLS VPN
PDF
Segment Routing
ย 
PDF
VXLAN Design and Deployment.pdf
ย 
PDF
PLNOG15: BGP New Advanced Features - Piotr Wojciechowski
ย 
PPT
PDF
Cloud RAN fronthaul
ย 
PDF
HSRP (hot standby router protocol)
PDF
Cisco Live! :: Introduction to IOS XR for Enterprises and Service Providers
PPTX
Network management ppt
PDF
IPv6 Address Planning
ย 
PPTX
Software Defined networking (SDN)
PDF
CCNA Lab Guide
PDF
Ospf.ppt
PDF
MPLS Presentation
PDF
Cisco ASR 9000 Architecture - BRKARC-2003 3rd session.pdf
PPTX
Link Aggregation Control Protocol
PPT
Juniper mpls best practice part 2
CCNA-LAB-GUIDE-V3_LAST-ADDITION (4).pdf
MPLS Traffic Engineering
ย 
VXLAN
MPLS VPN
Segment Routing
ย 
VXLAN Design and Deployment.pdf
ย 
PLNOG15: BGP New Advanced Features - Piotr Wojciechowski
ย 
Cloud RAN fronthaul
ย 
HSRP (hot standby router protocol)
Cisco Live! :: Introduction to IOS XR for Enterprises and Service Providers
Network management ppt
IPv6 Address Planning
ย 
Software Defined networking (SDN)
CCNA Lab Guide
Ospf.ppt
MPLS Presentation
Cisco ASR 9000 Architecture - BRKARC-2003 3rd session.pdf
Link Aggregation Control Protocol
Juniper mpls best practice part 2
Ad

Similar to IPv6 Transition Techniques (20)

PDF
IPv6 Transition Strategies Tutorial, by Philip Smith [APNIC 38]
ย 
PDF
IPV6 by Philip Smith
ย 
PDF
IPv6 Deployment Planning Tutorial, by Philip Smith [APNIC 38]
ย 
PDF
apnic36-ipv6-planning_137752590hhhh2.pdf
PPTX
APNIC Update
ย 
PDF
bgp-cum.pdf
PDF
IPv6 in Mobile Networks
ย 
PDF
Robert Raszuk - Technologies for IPv4/IPv6 coexistance
ย 
PPTX
CGNAT Wide Screen
ย 
PDF
IPv6 Deployment: Why and Why not?
PDF
IPv6 in Cellular Networks
ย 
PDF
IXP Design and Operational BCP
ย 
PPT
Apnic V6 Tutorial Distribution
DOCX
I pv6
PPTX
Upcoming internet challenges
PDF
Getting The World IPv6 Enabled
PDF
BGP Multihoming Techniques
ย 
PDF
IPv6 Deployment: Why and Why not? - HostingCon 2013
ย 
PDF
Tutorial: IPv6-only transition with demo
ย 
PDF
IPv4aaS tutorial and hands-on
ย 
IPv6 Transition Strategies Tutorial, by Philip Smith [APNIC 38]
ย 
IPV6 by Philip Smith
ย 
IPv6 Deployment Planning Tutorial, by Philip Smith [APNIC 38]
ย 
apnic36-ipv6-planning_137752590hhhh2.pdf
APNIC Update
ย 
bgp-cum.pdf
IPv6 in Mobile Networks
ย 
Robert Raszuk - Technologies for IPv4/IPv6 coexistance
ย 
CGNAT Wide Screen
ย 
IPv6 Deployment: Why and Why not?
IPv6 in Cellular Networks
ย 
IXP Design and Operational BCP
ย 
Apnic V6 Tutorial Distribution
I pv6
Upcoming internet challenges
Getting The World IPv6 Enabled
BGP Multihoming Techniques
ย 
IPv6 Deployment: Why and Why not? - HostingCon 2013
ย 
Tutorial: IPv6-only transition with demo
ย 
IPv4aaS tutorial and hands-on
ย 
Ad

More from APNIC (20)

PPTX
APNIC Report, presented at APAN 60 by Thy Boskovic
ย 
PDF
APNIC Update, presented at PHNOG 2025 by Shane Hermoso
ย 
PDF
RPKI Status Update, presented by Makito Lay at IDNOG 10
ย 
PDF
The Internet -By the Numbers, Sri Lanka Edition
ย 
PDF
Triggering QUIC, presented by Geoff Huston at IETF 123
ย 
PDF
DNSSEC Made Easy, presented at PHNOG 2025
ย 
PDF
BGP Security Best Practices that Matter, presented at PHNOG 2025
ย 
PDF
APNIC's Role in the Pacific Islands, presented at Pacific IGF 2205
ย 
PDF
IPv6 Deployment and Best Practices, presented by Makito Lay
ย 
PDF
Cleaning up your RPKI invalids, presented at PacNOG 35
ย 
PDF
The Internet - By the numbers, presented at npNOG 11
ย 
PDF
Transmission Control Protocol (TCP) and Starlink
ย 
PDF
DDoS in India, presented at INNOG 8 by Dave Phelan
ย 
PDF
Global Networking Trends, presented at the India ISP Conclave 2025
ย 
PDF
Make DDoS expensive for the threat actors
ย 
PDF
Fast Reroute in SR-MPLS, presented at bdNOG 19
ย 
PDF
DDos Mitigation Strategie, presented at bdNOG 19
ย 
PDF
ICP -2 Review โ€“ What It Is, and How to Participate and Provide Your Feedback
ย 
PDF
APNIC Update - Global Synergy among the RIRs: Connecting the Regions
ย 
PDF
Measuring Starlink Protocol Performance, presented at LACNIC 43
ย 
APNIC Report, presented at APAN 60 by Thy Boskovic
ย 
APNIC Update, presented at PHNOG 2025 by Shane Hermoso
ย 
RPKI Status Update, presented by Makito Lay at IDNOG 10
ย 
The Internet -By the Numbers, Sri Lanka Edition
ย 
Triggering QUIC, presented by Geoff Huston at IETF 123
ย 
DNSSEC Made Easy, presented at PHNOG 2025
ย 
BGP Security Best Practices that Matter, presented at PHNOG 2025
ย 
APNIC's Role in the Pacific Islands, presented at Pacific IGF 2205
ย 
IPv6 Deployment and Best Practices, presented by Makito Lay
ย 
Cleaning up your RPKI invalids, presented at PacNOG 35
ย 
The Internet - By the numbers, presented at npNOG 11
ย 
Transmission Control Protocol (TCP) and Starlink
ย 
DDoS in India, presented at INNOG 8 by Dave Phelan
ย 
Global Networking Trends, presented at the India ISP Conclave 2025
ย 
Make DDoS expensive for the threat actors
ย 
Fast Reroute in SR-MPLS, presented at bdNOG 19
ย 
DDos Mitigation Strategie, presented at bdNOG 19
ย 
ICP -2 Review โ€“ What It Is, and How to Participate and Provide Your Feedback
ย 
APNIC Update - Global Synergy among the RIRs: Connecting the Regions
ย 
Measuring Starlink Protocol Performance, presented at LACNIC 43
ย 

Recently uploaded (20)

PPTX
artificial intelligence overview of it and more
PPT
tcp ip networks nd ip layering assotred slides
PDF
๐Ÿ’ฐ ๐”๐Š๐“๐ˆ ๐Š๐„๐Œ๐„๐๐€๐๐†๐€๐ ๐Š๐ˆ๐๐„๐‘๐Ÿ’๐ƒ ๐‡๐€๐‘๐ˆ ๐ˆ๐๐ˆ ๐Ÿ๐ŸŽ๐Ÿ๐Ÿ“ ๐Ÿ’ฐ
ย 
PDF
Tenda Login Guide: Access Your Router in 5 Easy Steps
PDF
Testing WebRTC applications at scale.pdf
PPTX
Introuction about WHO-FIC in ICD-10.pptx
PPTX
June-4-Sermon-Powerpoint.pptx USE THIS FOR YOUR MOTIVATION
PDF
Decoding a Decade: 10 Years of Applied CTI Discipline
PDF
The New Creative Director: How AI Tools for Social Media Content Creation Are...
PDF
Paper PDF World Game (s) Great Redesign.pdf
PDF
FINAL CALL-6th International Conference on Networks & IOT (NeTIOT 2025)
PDF
Automated vs Manual WooCommerce to Shopify Migration_ Pros & Cons.pdf
PPTX
Digital Literacy And Online Safety on internet
PPTX
Module 1 - Cyber Law and Ethics 101.pptx
PDF
SASE Traffic Flow - ZTNA Connector-1.pdf
PDF
How to Ensure Data Integrity During Shopify Migration_ Best Practices for Sec...
PDF
Best Practices for Testing and Debugging Shopify Third-Party API Integrations...
PPTX
Introuction about ICD -10 and ICD-11 PPT.pptx
PDF
Introduction to the IoT system, how the IoT system works
ย 
PPTX
CHE NAA, , b,mn,mblblblbljb jb jlb ,j , ,C PPT.pptx
artificial intelligence overview of it and more
tcp ip networks nd ip layering assotred slides
๐Ÿ’ฐ ๐”๐Š๐“๐ˆ ๐Š๐„๐Œ๐„๐๐€๐๐†๐€๐ ๐Š๐ˆ๐๐„๐‘๐Ÿ’๐ƒ ๐‡๐€๐‘๐ˆ ๐ˆ๐๐ˆ ๐Ÿ๐ŸŽ๐Ÿ๐Ÿ“ ๐Ÿ’ฐ
ย 
Tenda Login Guide: Access Your Router in 5 Easy Steps
Testing WebRTC applications at scale.pdf
Introuction about WHO-FIC in ICD-10.pptx
June-4-Sermon-Powerpoint.pptx USE THIS FOR YOUR MOTIVATION
Decoding a Decade: 10 Years of Applied CTI Discipline
The New Creative Director: How AI Tools for Social Media Content Creation Are...
Paper PDF World Game (s) Great Redesign.pdf
FINAL CALL-6th International Conference on Networks & IOT (NeTIOT 2025)
Automated vs Manual WooCommerce to Shopify Migration_ Pros & Cons.pdf
Digital Literacy And Online Safety on internet
Module 1 - Cyber Law and Ethics 101.pptx
SASE Traffic Flow - ZTNA Connector-1.pdf
How to Ensure Data Integrity During Shopify Migration_ Best Practices for Sec...
Best Practices for Testing and Debugging Shopify Third-Party API Integrations...
Introuction about ICD -10 and ICD-11 PPT.pptx
Introduction to the IoT system, how the IoT system works
ย 
CHE NAA, , b,mn,mblblblbljb jb jlb ,j , ,C PPT.pptx

IPv6 Transition Techniques

  • 1. IPv6 Transition Strategies Philip Smith <philip@apnic.net> APNIC 44 Taichung, Taiwan 7th โ€“ 14th September 2017 1Last updated 12th September 2017
  • 2. Presentation Slides p Will be available on n http://bgp4all.com/dokuwiki/conferences/ n And on the APNIC44 website p Feel free to ask questions any time
  • 3. Acknowledgements p This material originated from the Cisco ISP/IXP Workshop Programme developed by Philip Smith & Barry Greene n These slides were originally developed by Ciscoโ€™s CTO Consulting Engineering Group p Use of these materials is encouraged as long as the source is fully acknowledged and this notice remains in place p Bug fixes and improvements are welcomed n Please email workshop (at) bgp4all.com 3 Philip Smith
  • 5. โ€œThe times, They are aโ€™ changinโ€™โ€ 5 Source: ipv4.potaroo.net (September 2017) IPv4 All Gone!
  • 6. Is IPv4 really running out? p Yes! n IANA IPv4 free pool ran out on 3rd February 2011 n RIR IPv4 free pool is starting to run out now p www.potaroo.net/tools/ipv4/ p (depends on RIR soft-landing policies) p The runout gadgets and widgets are now watching when the RIR pools will run out: n inetcore.com/project/ipv4ec/index_en.html p (shows 1 RIR with no IPv4 left, and 3 out of 4 RIRs in run out austerity phase) n ipv6.he.net/statistics/ 6
  • 7. Strategies available for Service Providers p Do nothing n Wait and see what competitors do n Business not growing, so donโ€™t care what happens p Extend life of IPv4 n Force customers to NAT n Buy IPv4 address space on the marketplace p Deploy IPv6 n Dual-stack infrastructure n IPv6 and NATed IPv4 for customers n 6rd (Rapid Deploy) with native or NATed IPv4 for customers n DS-Lite or 464XLAT with native IPv6 and NATed IPv4 for customers n Or other combinations of IPv6, IPv4 and NAT 7
  • 9. Dual-Stack Networks p Both IPv4 and IPv6 have been fully deployed across all the infrastructure n Routing protocols handle IPv4 and IPv6 n Content, application, and services available on IPv4 and IPv6 p End-users use dual-stack network transparently: n If DNS returns IPv6 address for domain name query, IPv6 transport is used n If no IPv6 address returned, DNS is queried for IPv4 address, and IPv4 transport is used instead n Recent improvements introduce โ€œhappy eye-ballsโ€ (RFC6555) p It is envisaged that the Internet will operate dual-stack for many years to come 9
  • 10. IP in IP Tunnels p A mechanism whereby an IP packet from one address family is encapsulated in an IP packet from another address family n Enables the original packet to be transported over network of another address family p Allows ISP to provide dual-stack service prior to completing infrastructure deployment p Tunnelling techniques include: n IPinIP, GRE, 6to4, Teredo, ISATAP, 6rd, MPLS 10
  • 11. Address Family Translation (AFT) p Refers to translation of an IP address from one address family into another address family n e.g. IPv6 to IPv4 translation p Usually called NAT64 n Or IPv4 to IPv6 translation p Usually called NAT46, usually using SIIT 11
  • 12. Network Address Translation (NAT) p NAT is translation of one IP address into another IP address p NAPT (Network Address & Port Translation) translates multiple IP addresses into one other IP address n TCP/UDP port distinguishes different packet flows p NAT-PT (NAT โ€“ Protocol Translation) is a particular technology which does protocol translation in addition to address translation n NAT-PT is has now been made obsolete by the IETF 12
  • 13. Carrier Grade NAT (CGN) p ISP version of subscriber NAT n Subscriber NAT can handle only hundreds of translations n ISP NAT can handle millions of translations n Expensive high performance hardware p Not limited to just translation within one address family, but does address family translation as well p Sometimes referred to as Large Scale NAT (LSN) 13
  • 14. โ€œHappy Eyeballsโ€ โ€“ RFC6555 p The device or application chooses the protocol which will give the user the best experience p Designed to work around shortcomings in either IPv4 or IPv6 infrastructure, or misconfigured IPv4 or IPv6 destination devices p Short summary for dual stack device: n Application asks for IPv4 and IPv6 address n If both are returned, application opens connection using IPv6 and IPv4 simultaneously (or IPv6 first, then IPv4 after a short (few ms) delay) n Application uses the transport which responds with a connection first 14
  • 15. Aside: NAT Issues (1) p How to scale NAT performance for large networks? n Limiting tcp/udp ports per user harms user experience p CGN deployment usually requires redesign of SP network n Deploy in core, or access edge, or border,โ€ฆ? p Breaks the end-to-end model of IP p Breaks end-to-end network security p Breaks non-NAT friendly applications n Or NAT has to be upgraded (if possible) 15
  • 16. Aside: NAT Issues (2) p Makes fast rerouting and multihoming more difficult n Moving IPv4 address pools between CGNs for external traffic engineering p Address sharing has reputation, reliability and security issues for end-users p Layered NAT devices (double or even triple NAT) p Mandates that the network keeps the state of the connections p Makes the NAT device a target for miscreants due to possible impact on large numbers of users p Makes content hosting impossible 16
  • 17. Aside: NAT Issues (3) p Limited ports for NAPT: n Typical user device 400 sessions n TCP/UDP ports per IPv4 address 130k n Implies 130000/400 users 320 users n One IPv4 /22 has: 1024 addresses n One IPv4 /22 could support: 320k users p Sizing a NAT device has to be considered quite seriously 17
  • 18. Aside: NAT Issues (4) p Consumer NAT device: n 3000 sessions means only 7 connected devices! n โ€œNAT table FULLโ€ error messages n โ€œBroken Googlemapsโ€ n โ€œStuck Internetโ€ p Carrier Grade NAT device: n 20 million sessions (Cisco ASR9001 ISM) n Which realistically is 50k users (400 sessions per user) n APNIC final /22 only allows 320k users L p How to support LTE networks?! n Number of users? Public IPv4 addresses for CGN? n Maintaining LTE performance? Throughput of CGN? 18
  • 20. IPv4 only Network p The situation for many SPs today: n No IPv6 for consumer n IPv4 scaling lasts as long as IPv4 addresses are available 20 IPv4 Internet IPv4 host IPv4+IPv6 host Subscriber Network IPv4-only SP Network Internet IPv4 Customer Router IPv6 host IPv6 Internet IPv6
  • 21. IPv4 only: Issues p Advantages n Easiest and most cost effective short term strategy p Disadvantages n Limited to IPv4 address availability (RIRs or marketplace) n No access to IPv6 n Negative public perception of SP as a laggard n Strategy will have to be reconsidered once IPv4 address space is no longer available 21
  • 22. IPv4 only: Applicability p For Network Operators who: n Have sufficient IPv4 address space for foreseeable future business needs n Donโ€™t undertake long term planning n Are not heeding customer requests regarding IPv6 access n Have sufficient funds to purchase IPv4 address space via the marketplace 22
  • 23. Strategy Two Extend life of IPv4 network 23
  • 24. Extending life of IPv4 Network p Two ways of extending IPv4 network n Next step along from โ€œStrategy One: Do nothingโ€ 1. Force customers to use NAT n Customers moved to RFC1918 address space n SP infrastructure moved to RFC6598 address space (as public IPv4 needed for CGN pools) 2. Acquire IPv4 address space from another organisation n IPv4 subnet trading 24
  • 25. SP NAT in IPv4-only network p Next step on from โ€œdoing nothingโ€: n SP introduces NAT in core when IPv4 addresses run out n No access to IPv6 Internet for IPv6 enabled hosts 25 IPv4 Internet IPv4 host IPv4+IPv6 host Subscriber Network SP IPv4-only Network using RFC6598 addresses Internet IPv4 Customer Router IPv6 host IPv6 Internet IPv6 SP NAT Sharing IPv4 address(es)
  • 26. SP NAT in IPv4-only network: Issues p Advantages n ISPs can reclaim global IPv4 addresses from their customers, replacing with non-routable private addresses and NAT n Allows continued IPv4 subscriber growth p Disadvantages n SP needs a large NAT device in the aggregation or core layers n Has every well known technical drawback of NAT, including prevention of service deployment by customers n Double NAT highly likely (customer NAT as well as SP NAT) n Sharing IPv4 addresses could have behavioural, security and liability implications n Tracking association of port/address and subscriber, not to mention Lawful Intercept issues, are still under study n May postpone IPv6 deployment for a couple of years n Prevents subscribers from using IPv6 content, services and applications 26
  • 27. SP NAT in IPv4-only network: Applicability p For Network Operators who: n Are happy to purchase and operate CGN devices within their core network n Are aware of the operational and performance pitfalls of CGN devices n Are aware that their IPv4 network will need to be redesigned to accommodate CGN devices n Are aware of suboptimal routing and extra bandwidth requirements n Are able to reclaim public addresses from their customers for redeployment in their backbone n Are not heeding requests from customers for IPv6 access 27
  • 28. IPv4 Subnet Trading p Today the cost of getting IPv4 address space is low: n Service Provider: p RIR membership fee p Registration service fee (varies according to RIR service region) n End-sites usually receive IPv4 address block from SP as part of service n Many SPs already charge end-site for privilege of public IPv4 address p In future when RIRs have no more IPv4 address space to distribute: n Cost of IPv4 addresses will be higher (today itโ€™s close to 0) n SPs may โ€œpurchaseโ€ IPv4 address space from other organisations 28
  • 29. IPv4 Subnet Trading: Issues p Advantages n Valuation of IPv4 addresses may hasten IPv6 adoption by encouraging sellers, perhaps more than offsetting costs to move some or all of their network to v6 n Receivers of transferred IPv4 address space can prolong their IPv4 networks p Disadvantages n Market may not materialise, so organisations hoping to benefit may not n Depending on region, if RIR doesnโ€™t register transfer, there may be no routability n Risk to integrity of routing system, as RIRs no longer authoritative for address records n Even more rapid growth of routing system n Financial pressure on ISPs to dispose of IPv4 addresses they still need 29
  • 30. IPv4 Subnet Trading: Applicability p For Network Operators who: n Are have sufficient funds to purchase IPv4 address space on the marketplace n Are aware of the operational and performance pitfalls of purchased address space p Routability (legacy SP filters) p Registration (RIR vs not) p Reputation (previous user) n Are not heeding requests from customers for IPv6 access 30
  • 32. IPv4/IPv6 coexistence & transition p Three strategies for IPv6 transition: n Dual Stack Network p The original strategy p Depends on sufficient IPv4 being available n 6rd (Rapid Deploy) p Special case of & improvement on 6to4 for SP customer deployment p Documented in RFC5969 n 464XLAT or DS-Lite or NAT64 with CGN p SP deploys large NAT boxes to do address and/or protocol translation 32
  • 33. IPv4/IPv6 coexistence & transition p Carrier Grade NAT (CGN) n Dual-Stack Lite p IPv4 to IPv4 over IPv6 p Documented in RFC6333 n 464XLAT p IPv4 to IPv4 over IPv6 p Documented in RFC6877 n NAT64 p Translation between IPv6 and IPv4 p Documented in RFC6146 33
  • 34. Dual-Stack Network p The original transition scenario, but dependent on: n IPv6 being available all the way to the consumer n Sufficient IPv4 address space for the consumer and SP core 34 IPv4 Internet IPv4 host IPv4+IPv6 host Subscriber Network Dual-Stack SP Network Internet IPv4 Customer Router IPv6 host IPv6 Internet IPv6
  • 35. Dual-Stack Network: Issues p Advantages n Most cost effective long term model n Once services are on IPv6, IPv4 can simply be discontinued p Disadvantages n IPv4 growth limited to available IPv4 address space n Running dual-stack network requires extra staff training n IPv6 on existing IPv4 infrastructure might cost extra in terms of hardware changes (RIB and FIB memories) n IPv6-only end-points cannot access IPv4, but given most IPv6 end-points are dual-stack, require IPv4 address too 35
  • 36. Dual-Stack Network: Applicability p For Network Operators who: n Have sufficient IPv4 address space for foreseeable future n Also may consider purchasing IPv4 address space on the open market n Have no legacy equipment or infrastructure which does not support IPv6 n Do not wish to deploy CGN (NAT44) n Are willing to support dual-stack CPE p Note: this is considered the ideal option p Example: n Typical traditional Internet Service Provider deployment 36
  • 37. Dual-Stack with SP NAT p More likely scenario: n IPv6 being available all the way to the consumer n SP core and customer has to use IPv4 NAT due to v4 depletion 37 IPv4 Internet IPv4 host IPv4+IPv6 host Subscriber Network Dual-Stack SP Network using RFC6598 addresses Internet IPv4 Customer Router IPv6 host IPv6 Internet IPv6 SP NAT Sharing IPv4 address(es)
  • 38. Dual-Stack with SP NAT: Issues p Advantages n ISPs can reclaim global IPv4 addresses from their customers, replacing with non-routable private addresses and NAT n Allows continued IPv4 subscriber growth n SP can offer IPv6 connectivity too n Does not postpone IPv6 deployment n SP NAT off-load (compared with IPv4-only network) p Disadvantages n SP needs a large NAT device in the aggregation or core layers n Has every well known technical drawback of NAT, including prevention of service deployment by customers n Double NAT highly likely (customer NAT as well as SP NAT) n Sharing IPv4 addresses could have behavioural, security and liability implications n Tracking association of port/address and subscriber, not to mention Lawful Intercept issues, are still under study n SP incurs additional investment and operational expenditure by deploying an IPv6 infrastructure 38
  • 39. Dual-Stack with SP-NAT: Applicability p For Network Operators who: n Have do not sufficient IPv4 address space and are content deploying CGN (NAT44) in the core n Are able to reclaim public IPv4 address space from customers for redeployment on their backbone infrastructure n Have no legacy equipment or infrastructure which does not support IPv6 n Are willing to support dual-stack CPE p Note: this is considered the realistic best practice p Example: n Typical traditional Internet Service Provider deployment 39
  • 40. Aside: SP-NAT Offload p If 50% of end user traffic is IPv6, then this means 50% less IPv4 traffic which has to be mapped and translated via the SPโ€™s CGN installation n The greater the proportion of IPv6 traffic (compared with IPv4), the less the load is on the CGN devices, and reduced demand on the public IPv4 address pool n CGN is used simply for accessing legacy IPv4 sites p Operators with high data volumes realise that by deploying IPv6: n End users have better Internet experience when traffic is not NATโ€™ed n They have reduced CapEx deploying fewer CGN devices n Savings from reduced CGN CapEx are often greater than the additional costs to deploy IPv6 to end-users p This is called SP-NAT Offload 40
  • 41. 6rd p 6rd (Rapid Deploy) used where ISP infrastructure to customer is not IPv6 capable (eg IPv4-only BRAS) n Customer has IPv4 Internet access either natively or via NAT n Customer IPv6 address space based on ISP IPv4 block 41 IPv4-only SP Network IPv4 Internet IPv4 host IPv4+IPv6 host Subscriber Network Internet IPv4 IPv6 Internet IPv6 Dual-Stack SP NetworkCustomer Router IPv6 host 6rd BR SP NAT
  • 42. 6rd: Issues p Advantages n The service provider has a relatively quick way of providing IPv6 to their customer without deploying IPv6 across their infrastructure n Subscribers can readily get access to IPv6 n SP NAT off-load (compared with IPv4-only network) n 6rd relay and CPE are becoming available from vendors n 6rd operation is completely stateless, does not have the operational drawbacks of 6to4, and does not postpone IPv6 deployment p Disadvantages n 6rd is not a long-term solution for transitioning to IPv6 โ€“ one further transition step to remove the tunnels n CPE needs to be upgraded to support 6rd n The ISP has to deploy one or several 6rd termination devices n If customer or SP uses NAT for IPv4, all NAT disadvantages are inherited 42
  • 43. 6rd: Applicability p For Network Operators who: n Have do not sufficient IPv4 address space and are content deploying CGN (NAT44) in the core n Are able to reclaim public IPv4 address space from customers for redeployment on their backbone infrastructure n Have legacy equipment or infrastructure which does not support IPv6 p And realise that it will eventually have to be upgraded n Are willing to run a 6rd Border Router n Are willing to support dual-stack CPE (with 6rd) p Example: n Broadband operators who have legacy DSLAMs or lease a third partyโ€™s L2 network 43
  • 44. Dual-Stack Lite p Service Provider deploys IPv6-only infrastructure: n IPv6 being available all the way to the consumer n IPv4 is tunnelled through IPv6 core to Internet via SP NAT device 44 IPv4+IPv6 host Subscriber Network IPv6-only SP Network Internet Customer Router IPv6 host IPv6 Internet IPv6 IPv4 Internet IPv4 host IPv4 SP NAT Sharing IPv4 address(es) Tunnel
  • 45. Dual-Stack Lite: Issues p Advantages n The SP is using IPv6 across their entire infrastructure, avoiding the IPv4 address pool depletion issue totally n The SP can scale their infrastructure without any IPv4 dependencies n Consumers can transition from IPv4 to IPv6 without being aware of any differences in the protocols n IPv6 packets routed natively n SP NAT off-load (compared with IPv4-only network) p Disadvantages n SP requires NAT device in core supporting DS-Lite n Subscriber router needs to be IPv6 capable n Model has all drawbacks of SP NAT model for IPv4 traffic 45
  • 46. Dual-Stack Lite: Applicability p For Network Operators who: n Are considering โ€œgreen-fieldโ€ deployments n Are content running an IPv6-only backbone n Are willing to deploy CGN (DS-Lite) in the core n Are willing to support dual-stack CPE (with DS-Lite) p Example: n Mobile operators rolling out a brand new network, with handsets which have dual-stack radios 46
  • 47. Stateful AFT (NAT64) p Service Provider deploys IPv6-only infrastructure: n Only IPv6 is available to the consumer n IPv4 Internet available via Address Family Translation on SP NAT device 47 IPv4 host IPv4+IPv6 host Subscriber Network IPv6-only SP Network Internet Customer Router IPv6 host IPv6 Internet IPv6 IPv4 IPv4 Internet SP DNS64 SP NAT64 Sharing IPv4 address(es) NAT64 IPv6
  • 48. Stateful AFT (NAT64) Details 48 IPv4 host IPv4+IPv6 host Subscriber Network IPv6-only SP Network Internet Customer Router IPv4 IPv4 Internet SP DNS64 SP NAT64 Sharing IPv4 address(es) IPv6 host DNS 2. A RR? 3. A RR IPv6 1. AAAA RR? 4. Synthetic AAAA RR
  • 49. Stateful AFT: Issues p Advantages n Allows IPv6 only consumers access to IPv4 based content without giving them IPv4 address resources n IPv6 services and applications offered natively to consumers n SP network runs IPv6 only, avoiding IPv4 dependencies p Disadvantages n SP requires NAT device in core n SPโ€™s DNS infrastructure needs to be modified to support NAT64 n Subscriber router needs to be IPv6 capable n Subscriber devices need to be IPv6 capable (no legacy support) n Model has all drawbacks of SP NAT model for IPv4 traffic 49
  • 50. Stateful AFT: Applicability p For Network Operators who: n Are considering โ€œgreen-fieldโ€ deployments n Are content running an IPv6-only backbone n Are willing to deploy CGN (NAT64) in the core n Are willing to support IPv6-only CPE p Example: n Mobile operators rolling out a brand new network, with handsets which have single-stack (IPv6-only) radios 50
  • 51. 464XLAT p Service Provider deploys IPv6-only infrastructure: n IPv6 being available all the way to the consumer n IPv4 is transported through IPv6 core to Internet via SIIT on customer router, and NAT64 on SP NAT device 51 IPv4+IPv6 host Subscriber Network IPv6-only SP Network Internet Customer Router (CLAT) IPv4 Internet IPv4 host IPv4 SP NAT (PLAT) Sharing IPv4 address(es) SIIT encaps IPv6 host IPv6 Internet IPv6
  • 52. 464XLAT: Issues p Advantages n The SP is using IPv6 across their entire infrastructure, avoiding the IPv4 address pool depletion issue totally n The SP can scale their infrastructure without any IPv4 dependencies n Consumers can transition from IPv4 to IPv6 without being aware of any differences in the protocols n Devices not supporting IPv6 can access IPv6-only networks n IPv6 packets routed natively n SP NAT off-load (compared with IPv4-only network) p Disadvantages n SP requires NAT device in core (PLAT & NAT64) n Subscriber router needs to be IPv6 capable and support IPv4/IPv6 header translation (CLAT โ€“ SIIT) n Model has all drawbacks of SP NAT model for IPv4 traffic 52
  • 53. 464XLAT: Applicability p For Network Operators who: n Are considering โ€œgreen-fieldโ€ deployments n Are content running an IPv6-only backbone n Are willing to deploy CGN (PLAT) in the core n Are willing to support dual-stack CPE (CLAT) p Example: n Mobile operators rolling out a brand new network, with handsets which have dual-stack radios 53
  • 55. 55 Functionalities and Operational Issues IPv4-only network IPv4-only network with IPv4 NAT Dual-Stack, no IPv4 NAT Dual-Stack with IPv4 NAT 6rd, no IPv4 NAT 6rd with IPv4 NAT DS-Lite 464XLAT Stateful AFT Prolongs IPv4 No Yes No Yes No Yes Yes Yes Yes Allows Business Growth No Yes (scaling issues if content is mostly IPv6) Limited to IP v4 address availability Yes (traffic to IPv4-only servers) Limited to IPv4 address availability Yes Yes Yes Yes Requires IPv6 Deployment No No Yes Yes Yes Yes Yes Yes Yes Coexists with IPv6 Deployment No No Yes Yes Yes Yes Yes Yes Yes Complexity of Operation Low Low Low Moderate Moderate Moderate Moderate Moderate Moderate Complexity of Troubleshooting Low Moderate Low High Moderate High High High Moderate Breaks End-to-End IPv4 No Yes No Yes No Yes Yes Yes N/A NAT Scalability issues to IPv4 services No Yes No Yes No Yes Yes Yes Yes NAT Scalability issues to IPv6 services N/A Yes No No No No No No No DNSSEC issues No Yes No Yes for IPv4 No for IPv6 No Yes for IPv6 No for IPv4 Yes for IPv4 No for IPv6 Yes for IPv4 No for IPv6 Yes for IPv4 No for IPv6 Lawful Intercept issues No Yes No Yes for IPv4 No Yes for IPv4 Yes for IPv4 Yes for IPv4 Yes for IPv4
  • 56. Functionalities and Operational Issues p Complexity of operation: n Moderate in the case of a single network with two address families p Complexity of troubleshooting: n Running two address families and/or tunnels is assumed to be more complex p Breaks end-to-end connectivity in IPv4: n Subscribers sharing a CGN will have little to no hurdles in their communication n Subscribers separated by one or several CGN will experience some application issues 56
  • 57. Comparing where changes will occur IPv4-only network IPv4-only network with IPv4 NAT Dual-Stack, no IPv4 NAT Dual-Stack with IPv4 NAT 6rd, no IPv4 NAT 6rd with IPv4 NAT DS-Lite 464XLAT Stateful AFT Change CPE No No Only if customer wants IPv6 Only if customer wants IPv6 Yes Yes Yes Yes Yes CPE to do AFT to access IPv6 No No No No No No No No No IPv4 NAT in core/edge No Yes No Yes No Yes Yes Yes No AFT in core/edge to access IPv6 Yes Yes No No No No No No Yes 57
  • 58. Conclusions Potential Scenarios 1. Most of the content and applications move to IPv6 only; 2. Most of the content and applications are offered for IPv4 and IPv6; 3. Most of the users move to IPv6 only n Especially mobile operators offering LTE handsets in emerging countries 4. No change (the contents/applications stay IPv4 and absence of pro-IPv6 regulation), SP customer expectations devolve to double-NAT; 5. No change (the contents/applications stay IPv4) but SP customer expectations do not devolve to double-NAT (or they are ready to pay for peer-to-peer connectivity). n Perhaps well established broadband markets like US or Europe 58
  • 59. Conclusions Potential Techniques Scenario Potential Techniques Content and Applications move to IPv6 IPv6 only network; Dual-Stack, 6rd, 464XLAT or DS-lite as migration techniques Content and Applications on IPv4 and IPv6 Dual-Stack (if enough IPv4) or 6rd; SP IPv4- NAT; DS-lite or 464XLAT (for greenfield) * Users are IPv6 only Stateful AFT to get to IPv4 content * No change (double NAT) SP IPv4-NAT * No change (no double NAT) Do nothing * 59 * Transfer Market applicable
  • 60. Recommendations 1. Start deploying IPv6 as long term strategy 2. Evaluate current addressing usage to understand if IPv4 to IPv4 NAT is sufficient for transition period 3. Prepare a translation mechanism from the IPv4 Internet to the IPv6 Internet 4. Educate your user base on IPv6 introduction, the use cases and troubleshooting 60
  • 61. Recommendations p Mobile operator: n 464XLAT (support IPv4 and IPv6) n NAT64 (IPv6 only) p Access provider: n Dual stack core and access (if supported to end-user) n 6rd (if legacy IPv4 infrastructure or legacy 3rd party L2) p Enterprise service provider: n Dual stack access and core p Content provider: n Dual stack access and core 61
  • 62. IPv6 Transition Planning A Review of IPv4-IPv6 Co- Existence Techniques 62