IPv6/IPv4 Transition: The experience sharing of Tunnel Broker deployment
Download as PPT, PDF1 like724 views
This document summarizes the deployment of a Tunnel Broker by Academia Sinica Computing Centre to facilitate IPv6/IPv4 transition. It discusses the stages of transition, the role of Tunnel Brokers, and ASCC's implementation which combines the Broker with RADIUS for single sign-on. Statistics on IPv6 traffic growth and user adoption are provided. Challenges including firewall configuration and performance issues are also mentioned.
![Customers connection transition steps(1)
Tunneling, prefix is
the key
Configured/automated
Tunneling
ISATAP [RFC 4214]
6to4 [RFC 3056]
Teredo [RFC 4380]
Small sites
Dual stack ->
configured tunneling ->
automated tunneling
Large sites
Dual stack ->
Configured tunneling
Customer premise equipment
Too much to manual configured
DHCPv6 or stateless mechanism](https://image.slidesharecdn.com/8thopm-ascc-ethern-final-141031001238-conversion-gate02/85/IPv6-IPv4-Transition-The-experience-sharing-of-Tunnel-Broker-deployment-11-320.jpg)
IPv6/IPv4 Transition: The experience sharing of Tunnel Broker deployment
- 1. Ethern M., Lin The experience sharing Tunnel Broker deployment Academia Sinica Computing Centre 6, July, 2007 IPv6/IPv4 Transition of 8th IP Open Policy Meeting TWNIC
- 2. Outline Introduction The roadmap of IPv6 transition The role of Tunnel Broker The O&M of ASCC IPv6 applications
- 3. Introduction
- 4. Introduction Just experience sharing, not advertisement! Solving the access problems in end-user side. Combine with RADIUS, provide SSO. Minimize the cost in operation and management for IPv6/IPv4 Transition. Easy to use for end-users.
- 5. The roadmap of IPv6 transition
- 6. Transition stages(1) Stage 1 IPv4 backbone + IPv4 customers Get IPv6 Address; IPv6 Connectivity to Upstream or peers; IPv6 transit; IPv6 IX Stage 2 Backbone support IPv6/IPv4 Software/hardware upgrade; Tunnel could help customer to connect to IPv6 Customers support IPv6/IPv4 Tunnel; IPv6 overlay network(6PE)
- 7. Transition stages(2) Stage 3 IPv6/IPv4 backbone + IPv6/IPv4 customers Import IPv6 features for yourself Routine or scheduled evolution Get IPv6 features in all new equipments.
- 8. Transition actions(1) Backbone IPv6 connectivity to upstream or peers Enable IPv6 function to IPv6 network components Upgrade regular network management and monitoring applications Connect dual-stack customers through IPv4 backbone Backbone from IPv4 to dual-stack
- 9. Transition actions(2) Customers connection IPv6 customers <-> IPv4 network <-> IPv6 backbone IPv4 customer link -> dual stack Network and service operation Extend customer management(e.g., RADIUS) to enable IPv6 Accounting, billing etc., Implement security
- 10. Backbone transition steps Backbone transition Transition path: IPv4 Only -> Tunnel + dedicated IPv6 Link -> Dual-Stack IPv6-over-MPLS Backbone gears’ configuration Routing Issues Performance, cost, upgradable
- 11. Customers connection transition steps(1) Tunneling, prefix is the key Configured/automated Tunneling ISATAP [RFC 4214] 6to4 [RFC 3056] Teredo [RFC 4380] Small sites Dual stack -> configured tunneling -> automated tunneling Large sites Dual stack -> Configured tunneling Customer premise equipment Too much to manual configured DHCPv6 or stateless mechanism
- 12. Customers connection transition steps(2) Issues Firewall, NAT, dynamic IP assigned User authentication/access control Traceability Ingress filtering, uRPF Multi-homing developing; multi-connection Quality of Service
- 13. Network and service operation action IPv6 network device configuration IPv6 network management IPv6 monitoring IPv6 customers management IPv6 network and service operation security
- 14. How does ASCC proceed? At the outset -> Tunneling IPv6/IPv4 Tunnel w/ BGP4+ Where is the Dual-Stack exist? Campus, WAN Native and pure IPv6 Link IPv6 IX, dedicated IPv6 Link with other networks Transition mechanism 6to4, Tunnel broker
- 15. The role of Tunnel Broker
- 16. Where is Tunnel Broker?
- 23. The operation and management of ASCC
- 24. What are we doing in IPv6? Cooperate with VoIPv6 Task Force http://www.ipv6.artdio.com.tw/ Multimedia service(trial) IPv6 streaming for conference ADSLv6 service DHCPv6, Tunnel Broker. IPv6 Multicasting
- 25. VoIPv6連線使用方 式 ** Reference from VoIPv6 Task Force
- 26. They are glories of Taiwan
- 27. The pros and cons of Tunnel Broker (1) pros To solve the network that can’t get IPv6 access for the time being, and minimize the cost for IPv6 upgrade. Easy for end-user; avoiding the single point of failure. One account, many services. Dynamic DNS Update. Work for both end-user and organization. Configured and automated tunneling.
- 28. The pros and cons of Tunnel Broker (2) cons Realm can’t be supported yet. IPv6 Multicast don’t work yet. Allow IPv6-over-IPv4 Tunnel(protocol number 41) & TCP/UDP port 3653 in Firewall device. Local database sync. problem. IPv6 network performance issue.
- 33. Other IPv6 stuff IPv6 Applications http://www.deepspace6.net/docs/ipv6_status_pa g http://anf.ne.kr/~ipv6/application_list.htm e_apps.html IPv6 Services http://www.ipv6style.jp/en/statistics/services/inde x.shtml http://www.ipv6day.org/action.php? n=En.Services
- 34. IPv6 Application Lists http://hIttPp:IPv6 v//www.6w wSwe.Services deepspace6.dreveipcsepsace6.net/docs/ipv6_status_pag http://www.ipv6day.org/action.php?n=En.Services
- 35. Tunnel Broker List SixXS http://www.sixxs.net/ XS26 http://www.xs26.net/Project/ AARNet http://broker.aarnet.net.au/ Mytbs http://tbroker.mybsd.org.my/ BT exact https://tb.ipv6.btexact.com/
- 36. Thank you For Your participation ! !
Editor's Notes
- #35: IPv6 applications list