IPv6 (Internet Protocol version 6) APNIC meeting, 3 September 2002 - - PowerPoint PPT Presentation

ipv6 internet protocol version 6
SMART_READER_LITE
LIVE PREVIEW

IPv6 (Internet Protocol version 6) APNIC meeting, 3 September 2002 - - PowerPoint PPT Presentation

IPv6 (Internet Protocol version 6) APNIC meeting, 3 September 2002 Internet Initiative Japan, Inc. / KAME Project Keiichi SHIMA <keiichi@iij.ad.jp> Contents Why do we use IPv6? IPv6 Addresses Link-layer address resolution


slide-1
SLIDE 1

IPv6 (Internet Protocol version 6)

APNIC meeting, 3 September 2002

Internet Initiative Japan, Inc. / KAME Project

Keiichi SHIMA <keiichi@iij.ad.jp>

slide-2
SLIDE 2

Contents

Why do we use IPv6? IPv6 Addresses Link-layer address resolution Auto-configuration mechanism Transision mechanisms Deployment status Recent event report

slide-3
SLIDE 3

Why do we use IPv6?

IPv6 Addresses Link-layer address resolution Auto-configuration mechanism DNS Transision mechanisms Deployment status Recent event report

slide-4
SLIDE 4

Why do we use IPv6?

Because IPv6 is better than IPv4

Almost infinite address space

Everything can have its own address No restriction to allocate addresses any more

Easy to use

Address auto-configuration Default route discovery

Restore the end-to-end communication Enhanced security

slide-5
SLIDE 5

IPv6 address space

IPv6 address is 128-bit (= 3.4 x 10^38)

IPv4 is 32-bit (= only 4 billions)

We can assign address to whatever we want

Small devices, Electrical appliances, even Thermometers 1mm

IPv4 Address Space

slide-6
SLIDE 6

IPv6 address space

IPv6 address is 128-bit (= 3.4 x 10^38)

IPv4 is 32-bit (= only 4 billions)

We can assign address to whatever we want

Small devices, Electrical appliances, even Thermometers 1mm

IPv4 Address Space IPv6 Address Space

slide-7
SLIDE 7

Plug-and-Play

Auto-configuration is mandated Just plug a node and we will get addresses Defualt routers are automatically installed

slide-8
SLIDE 8

End-to-end communication

Global address for everything makes it possible No need for NAT any more

NAT does not enhance security

Think about HTTP attack, Mail virus, etc..

NAT breaks end-to-end communication NAT breaks end-to-end security

Encourage development of new applications

Remember the old Internet where we have had various protocols and various applications on the net

slide-9
SLIDE 9

Enhanced security

IPsec is optional in IPv4 IPsec is mandatory for all IPv6 nodes Security features of IPv6

Protect from data forgery Protect from wiretapping Easy to make VPN connections

slide-10
SLIDE 10

What can we do with IPv6? (1)

Put addresses to everything! At N+I 2001 Tokyo, we put an address to a thermometer Hotnode The information that one hotnode creates is little, but...

slide-11
SLIDE 11

What can we do with IPv6? (1)

100 hotnodes made a temperature map

slide-12
SLIDE 12

What can we do with IPv6? (2)

Put addresses to everything! Internet ITS Project (2001.2 - 2002.5)

http://www.internetits.org/

We put addresses to hundreds of cars

In Nagoya city, 15 hundreds of taxies are addressed In Yokohama city, 70 cars are addressed

Each sensors has an address

Wipers Speed meters

slide-13
SLIDE 13

What can we do with IPv6? (2)

Rain map

slide-14
SLIDE 14

What can we do with IPv6? (2)

Traffic map

slide-15
SLIDE 15

Why do we use IPv6?

Questions?

slide-16
SLIDE 16

Why do we use IPv6?

IPv6 Addresses

Link-layer address resolution Auto-configuration mechanism DNS Transision mechanisms Deployment status Recent event report

slide-17
SLIDE 17

IPv6 address types

Unicast address

Represents one interface

Multicast address

Represents a set of interfaces those have joined to this multicast address

Anycast address

Represents a nearest interfaces which has this address Anycast address format is same as unicast address

slide-18
SLIDE 18

Unicast address

Basically same as IPv4 unicast address IPv6 addresses have "SCOPE"

Each scope has a special address block Easily distinguishable from its address form

Link-local address

Unique only in a single link Used by link-layer address resolution, default router discovery

Site-local address

Unique only in a single site Not well researched

Global address

Globally unique

slide-19
SLIDE 19

Link-local address

Unique only in a single link

Router Node A Linklocal Address: L1 Node B Linklocal Address: L2

slide-20
SLIDE 20

Link-local address

Unique only in a single link Can’t be forwarded to another link

Router Node A Linklocal Address: L1 Node B Linklocal Address: L2

slide-21
SLIDE 21

Link-local address

Unique only in a single link Can’t be forwarded to another link Same addresses may exist on other links

Router Node A Linklocal Address: L1 Node B Linklocal Address: L2 Node C Linklocal Address: L1 Node D Linklocal Address: L2

slide-22
SLIDE 22

Site-local address

Unique on a single site

Site Border Router Node A Sitelocal Address: S1 Node B Sitelocal Address: S1 Site A Site B

slide-23
SLIDE 23

Site-local address

Unique on a single site Can’t be forwarded to another site

Site Border Router Node A Sitelocal Address: S1 Node B Sitelocal Address: S1 Site A Site B

slide-24
SLIDE 24

Site-local address

Unique on a single site Can’t be forwarded to another site Same addresses may exist on other sites

Site Border Router Node A Sitelocal Address: S1 Node B Sitelocal Address: S1 Node C Sitelocal Address: S1 Node D Sitelocal Address: S1 Site A Site B

slide-25
SLIDE 25

Global address

Unique entirely

Internet Node A Global Address: G1 Node B Global Address: G2 Node C Global Address: G3 Node D Global Address: G4

slide-26
SLIDE 26

Multicast address

Basically same as IPv4 multicast address Multicast addresses also have "SCOPE"

Interface-local Link-local Subnet-local Admin-local Site-local Organization-local Global

Scope values are embedded to the address format Typical usage of multicast addresses

Link-local scope for link-layer address resolution, default router discovery Global scope for video conferences-like applications

slide-27
SLIDE 27

Broadcast address ?

There is no broadcast address in IPv6 Use multicast address instead Special multicast addresses are defined

All-node multicast address All-router multicast address

Some protocols have its own multicast address

Datalink-layer address resolution OSPF RIP PIM DHCP etc

slide-28
SLIDE 28

Anycast address

Represents a nearest interface in the sense of routing Address format is same as that of unicast What’s for?

Service discovery like a DNS server discovery

Need more study for using anycast addresses

slide-29
SLIDE 29

Anycast address

Many nodes have a same anycast address

Node B Anycast Address: A1 Node D Anycast Address: A1 Node A Node C

slide-30
SLIDE 30

Anycast address

Many nodes have a same anycast address Packets are sent to the nearest node

Node B Anycast Address: A1 Node D Anycast Address: A1 Node A Node C

slide-31
SLIDE 31

Anycast address

Many nodes have a same anycast address Packets are sent to the nearest node

Node B Anycast Address: A1 Node D Anycast Address: A1 Node A Node C

slide-32
SLIDE 32

Text representation of addresses

x:x:x:x:x:x:x:x

Where ’x’s are the hex values of 16-bit Separated by colons(:)

Example

fe80:0000:0000:0000:0203:47ff:fe3d:02bd

Leading 0 can be ommited

fe80:0000:0000:0000:0203:47ff:fe3d:02bd fe80:0:0:0:203:47ff:fe3d:2bd

0 can be compressed, but only once

fe80:0:0:0:203:47ff:fe3d:2bd fe80::203:47ff:fe3d:2bd

Specify prefix length using slash

fe80::203:47ff:fe3d:2bd/64

slide-33
SLIDE 33

Address blocks

The high-order bits represents address blocks

Unicast Multicast 0000000000 0010000000 0100000000 1111111010 1111111011 1111111100 0000000000 0000000000 0000000000 0000000000 0000000000 0000000000 1111111111 1111111111 Global Link-local Site-local fe80::/10 fec0::/10 ff00::/8 2000::/3

slide-34
SLIDE 34

Aggregatable addressing architecture

Hierarchical address allocation Aggregate routing information

Manages only downstream ISPs/Sites’ routes

Backbone Large ISP ISP Site

slide-35
SLIDE 35

Aggregatable addressing architecture

Aggregate routes in each level

TLA NLA SLA Interface ID Top-Level Aggregation ID Assigned to large ISPs Next-Level Aggregation ID Assigned to sub-ISPs and sites Site-Level Aggregation ID Assigned to each subnet in a site NLA1 ........ NLAn

64-bit 16-bit 13-bit 24-bit 3 8

Res 001

The backbone only manages routes for TLAs A large ISP assigned TLA ID only manages routes fot its NLA1s And so on...

slide-36
SLIDE 36

Current Status

We are now in the initial stage Using one TLA ID (2001::/16) The TLA ID 1 (2001::/16) has 13-bit Sub-TLA (sTLA)

A large ISP has a sTLA ID

TLA

SLA Interface ID

1 sTLA

NLAs

13-bit 13-bit 19-bit 16-bit 001 64-bit 3

2001:0200::/29 - 2001:03f8::/29 APNIC 2001:0400::/29 - 2001:05f8::/29 ARIN 2001:0600::/29 - 2001:07f8::/29 RIPE NCC

slide-37
SLIDE 37

Address allocation policy

LIR can get /32 space from RIR

LIR...large ISPs RIR...APNIC, ARIN, RIPE

A large ISP can get a huge space for their customers by default

Potentially, 65536 customers

Current allocation status can be found

http://www.ripe.net/cgi-bin/ipv6allocs

A site will have /48 address space from ISP

65536 subnets with /64 prefix

slide-38
SLIDE 38

IPv6 addresses

Questions?

slide-39
SLIDE 39

Why do we use IPv6? IPv6 Addresses

Link-layer address resolution

Auto-configuration mechanism DNS Transision mechanisms Deployment status Recent event report

slide-40
SLIDE 40

Neighbour Discovery Protocol (NDP)

ARP (Address Resolution Protocol) for IPv4 Do not use broadcasting

Use multicasting Lightweight than ARP

NDP is designed as ICMP

Datalink independent

New features

Duplicate Address Detection Neighbour Unreachability Detection

Integrated functions

Redirection

slide-41
SLIDE 41

How does NDP work?

A special multicast address

Related to a node’s IPv6 address All nodes must join to its special multicast address

Querier sends Neighbour Solicitation (NS) to that special multicast address A target node replys by Neighbour Advertisement (NA) NA includes a datalink address

slide-42
SLIDE 42

Solicited node multicast address

A special multicast address Calculated from node’s interface ID Interface ID creation (Ethernet)

Ethernet MAC address (48-bit)

00:03:47:3d:02:bd

Interface ID (64-bit)

slide-43
SLIDE 43

Solicited node multicast address

A special multicast address Calculated from node’s interface ID Interface ID creation (Ethernet)

Ethernet MAC address (48-bit)

00:03:47:3d:02:bd 00 03 ff fe 3d 02 bd 47

Interface ID (64-bit)

slide-44
SLIDE 44

Solicited node multicast address

A special multicast address Calculated from node’s interface ID Interface ID creation (Ethernet)

Ethernet MAC address (48-bit)

00:03:47:3d:02:bd 00 03 ff fe 3d 02 bd 47

Negate one bit

02 03 ff fe 3d 02 bd 47

Interface ID (64-bit)

slide-45
SLIDE 45

Solicited node multicast address

A special multicast address Calculated from node’s interface ID Interface ID creation (Ethernet)

Ethernet MAC address (48-bit)

00:03:47:3d:02:bd 00 03 ff fe 3d 02 bd 47

Negate one bit

02 03 ff fe 3d 02 bd 47

Interface ID (64-bit)

Solicited node multicast address calculation

02 03 47 ff fe 3d 02 bd Interface ID

slide-46
SLIDE 46

Solicited node multicast address

A special multicast address Calculated from node’s interface ID Interface ID creation (Ethernet)

Ethernet MAC address (48-bit)

00:03:47:3d:02:bd 00 03 ff fe 3d 02 bd 47

Negate one bit

02 03 ff fe 3d 02 bd 47

Interface ID (64-bit)

Solicited node multicast address calculation

02 03 47 ff fe 3d 02 bd ff 02 00 00 00 00 00 00 Interface ID Link-local multicast prefix 00 00 00 01 ff 3d 02 bd Lower 24-bit ff02::/16

slide-47
SLIDE 47

NS/NA transmission

Solicited node multicast address

Represents a set of nodes including a target node Lower 24-bits are the same

Address resolution request is sent to this address

Neighbour Solicitation

slide-48
SLIDE 48

NS/NA transmission

Solicited node multicast address

Represents a set of nodes including a target node Lower 24-bits are the same

Address resolution request is sent to this address

Neighbour Advertisement

In most cases, solicited node multicast address includes only the target node

It is rare to have same lower 24-bit address Address resolution is done between only two nodes

slide-49
SLIDE 49

Duplicate address detection (DAD)

Try to resolve my IPv6 address Send NS to "MY" solicited node multicast address No answer will come if no duplication

Neighbour Solicitation to my solicited node multicast

slide-50
SLIDE 50

Duplicate address detection (DAD)

Try to resolve my IPv6 address Send NS to "MY" solicited node multicast address No answer will come if no duplication

Neighbour Advertisement

Duplicated!!!

slide-51
SLIDE 51

Neighbour Unreachability Detection (NUD)

Datalink addresses are cached

Expire in a short time (default 30sec) ARP has 20min expiration time, too long

Probe nodes using NS when expired

The cache can be used No additional wait for resolution

If the node stays, NA will come If the node disappers, NA will not come

Datalink address cache is removed

Fast detection of node reachability

slide-52
SLIDE 52

Link-layer address resolution

Questions?

slide-53
SLIDE 53

Why do we use IPv6? IPv6 Addresses Link-layer address resolution

Auto-configuration mechanism

DNS Transision mechanisms Deployment status Recent event report

slide-54
SLIDE 54

Why is auto-configuration important?

IPv6 has a huge address space

It is nightmare to manage them by hand

Many small devices will appear

They may not have a console Should be plag-and-play

slide-55
SLIDE 55

IPv6 auto-configuration

Host configuration

Address auto-configuration Defualt router discovery

Edge-router configuration

Prefix Delegation

slide-56
SLIDE 56

Stateless address auto-configuration

Auto-configuration steps

Create interface ID Assign a link-local address Receive prefix information from routers Assign global address(es)

No need for a central server like DHCP Defacto stadard for IPv6 address auto-configuration

slide-57
SLIDE 57

Create interface ID

Interface ID is calculated from MAC address No additional information Calculation methods are defined by RFC for each datalink Example (Ethernet)

Ethernet MAC address (48-bit)

00:03:47:3d:02:bd 00 03 ff fe 3d 02 bd 47

Negate one bit

02 03 ff fe 3d 02 bd 47

Interface ID (64-bit)

slide-58
SLIDE 58

Link-local address creation

Concatinate link-local prefix and interface ID

Link-local prefix fe80::/64 interface ID is calculated from the MAC address

Example

Interface ID Link-local prefix fe 80 00 00 00 00 00 00 02 03 47 ff fe 3d 02 bd fe80::/10 02 03 47 ff fe 3d 02 bd

With link-local addresses, we can communicate other nodes on the same link

slide-59
SLIDE 59

Receive prefix information

Router advertisement (RA)

Multicasted periodically from routers to all nodes connected to the same link Routers use link-local addresses to communicate with nodes

RA includes link information

Global/Site-local prefixes MTU size, etc

Nodes receive prefix information and create global/site-local addresses

slide-60
SLIDE 60

Global/Site-local address creation

Extract prefix information from RA Concatinate global/site-local prefix and interface ID

Router Prefix: 2001:200:1:2::/64 Interface ID: 02:03:47:ff:fe:3d:02:bd Router Advertisement

slide-61
SLIDE 61

Global/Site-local address creation

Extract prefix information from RA Concatinate global/site-local prefix and interface ID

Router Prefix: 2001:200:1:2::/64 Interface ID: 02:03:47:ff:fe:3d:02:bd 2001:200:1:2:203:47ff:fe3d:2bd Router Advertisement

slide-62
SLIDE 62

Default router discovery

Routers send RA periodically Those routers are the candidates of the default router A host selects one router from the default router list

Router Advertisement Router A Router B Default Router List

  • Router A
slide-63
SLIDE 63

Default router discovery

Routers send RA periodically Those routers are the candidates of the default router A host selects one router from the default router list

Router Advertisement Router A Router B Default Router List

  • Router A
  • Router B
slide-64
SLIDE 64

Prefix Delegation

Provide prefix to an edge router No need to configure site prefixes by hand

Edge router ISP Solicit

slide-65
SLIDE 65

Prefix Delegation

Provide prefix to an edge router No need to configure site prefixes by hand

Edge router ISP Solicit Advertise Prefix = 2001:200:1::/48

slide-66
SLIDE 66

Prefix Delegation

Provide prefix to an edge router No need to configure site prefixes by hand

Edge router ISP Request 2001:200:1::/48

slide-67
SLIDE 67

Prefix Delegation

Provide prefix to an edge router No need to configure site prefixes by hand

Edge router ISP Request 2001:200:1::/48 Reply 2001:200:1::/64 2001:200:1:1::/64

slide-68
SLIDE 68

Auto-configuration mechanisms

Questions?

slide-69
SLIDE 69

Why do we use IPv6? IPv6 Addresses Link-layer address resolution Auto-configuration mechanism

DNS

Transision mechanisms Deployment status Recent event report

slide-70
SLIDE 70

Accessing IPv6 services

IPv6 nodes can be specified by hostnames as we can in IPv4 Users are not aware of which protocol they are using

telnet www.iij.ad.jp You use IPv6 if your PC is connected to IPv6 cloud You use IPv4 if your PC is not connected to IPv6

Textual representtion can be used, of course

telnet 2001:240::80 Problem with using URL

’:’ is used to specify a port number http://www.iij.ad.jp:8080/ http://[2001:240::80]:8080/

slide-71
SLIDE 71

DNS records

AAAA record for IPv6 forward lookup

$ORIGIN iij.ad.jp. www IN AAAA 2001:240::80 www IN A 202.232.2.10

PTR record for reverse lookup

$ORIGIN 0.0.0.0.0.0.0.0.0.4.2.0.1.0.0.2.IP6.ARPA. 0.8.0.0.0.0.0.0.0.0.0.0 IN PTR www.iij.ad.jp. $ORIGIN 2.232.202.IN-ADDR.ARPA. 10 IN PTR www.iij.ad.jp.

Other resource records are same as IPv4

slide-72
SLIDE 72

DNS transport

DNS query and answer can be on IPv4/IPv6 Some resolver don’t support IPv6 transport yet

DNS query/answer are done by IPv4 Such a node must be a dual stack node But, users can use IPv6 applications

Root DNS

Currently, root DNS servers are not IPv6 ready DNS servers must be a dual stack node A client can be an IPv6 only node

slide-73
SLIDE 73

DNS

Questions?

slide-74
SLIDE 74

Why do we use IPv6? IPv6 Addresses Link-layer address resolution Auto-configuration mechanism DNS

Transision mechanisms

Deployment status Recent event report

slide-75
SLIDE 75

Transision stages

Early stage

IPv4 network is wider than IPv6 network There are many IPv6 islands

Late stage

IPv4 networks are isolated

IPv4 IPv6 IPv6 IPv6 IPv6 Node IPv6 IPv4 IPv4 IPv4 IPv4

Early stage Late stage

slide-76
SLIDE 76

Transision mechanism types

Dual stack node

Support both IPv4 and IPv6

Tunneling

Encapsulate IPv6 packet in IPv4 packet (for early stage) Encapsulate IPv4 packet in IPv6 packet (for late stage)

Translator

Translate IPv6 packet to IPv4, and vice versa

slide-77
SLIDE 77

Dual stack node

Dual stack node has both IPv4 and IPv6 address Use IPv4 address when communicating with IPv4 node Use IPv6 address when communicating with IPv6 node

IPv6 only node Dual stack node IPv4 only node

IPv6 IPv6 IPv4 IPv4

slide-78
SLIDE 78

Tunneling

IP in IP encapsulating Use IPv4(IPv6) as a datalink layer of IPv6(IPv4) Connect isolated IPv6(IPv4) networks/hosts over IPv4(IPv6) network Bordar routers must be a dual stack node

IPv4 network IPv6 network A IPv6 network B

IPv6

IPv6 node A IPv6 node B Dual stack router A Dual stack router B IPv6 communication

slide-79
SLIDE 79

Tunneling

IP in IP encapsulating Use IPv4(IPv6) as a datalink layer of IPv6(IPv4) Connect isolated IPv6(IPv4) networks/hosts over IPv4(IPv6) network Bordar routers must be a dual stack node

IPv4 network IPv6 network A IPv6 network B

IPv6 IPv6

IPv6 node A IPv6 node B Dual stack router A Dual stack router B IPv6 communication

slide-80
SLIDE 80

Tunneling

IP in IP encapsulating Use IPv4(IPv6) as a datalink layer of IPv6(IPv4) Connect isolated IPv6(IPv4) networks/hosts over IPv4(IPv6) network Bordar routers must be a dual stack node

IPv4 network IPv6 network A IPv6 network B

IPv6 IPv6 IPv4

IPv6 node A IPv6 node B Dual stack router A Dual stack router B IPv6 communication IPv4 communication

slide-81
SLIDE 81

Tunneling

IP in IP encapsulating Use IPv4(IPv6) as a datalink layer of IPv6(IPv4) Connect isolated IPv6(IPv4) networks/hosts over IPv4(IPv6) network Bordar routers must be a dual stack node

IPv4 network IPv6 network A IPv6 network B

IPv6 IPv6 IPv6 IPv4

IPv6 node A IPv6 node B Dual stack router A Dual stack router B IPv6 communication IPv4 communication IPv6 communication

slide-82
SLIDE 82

6to4 automatic tunneling

Use other TLA ID (2) for tunneling Embed IPv4 address in IPv6 prefix A user can get /48 address space over tunnel

6to4 Relay Router IPv6 Internet IPv4 IPv6 site IPv4:1.2.3.4 IPv4:5.6.7.8

slide-83
SLIDE 83

6to4 automatic tunneling

Use other TLA ID (2) for tunneling Embed IPv4 address in IPv6 prefix A user can get /48 address space over tunnel

6to4 Relay Router IPv6 Internet IPv4 IPv6 site IPv4:1.2.3.4 IPv4:5.6.7.8 2002:1.2.3.4::/48

slide-84
SLIDE 84

6to4 automatic tunneling

Use other TLA ID (2) for tunneling Embed IPv4 address in IPv6 prefix A user can get /48 address space over tunnel

6to4 Relay Router IPv6 Internet IPv4 IPv6 site IPv4:1.2.3.4 IPv4:5.6.7.8 2002:1.2.3.4::/48

IPv6 IPv6 IPv4 src: 1.2.3.4 dst: 5.6.7.8 payload: IPv6 packet

2002:5.6.7.8::/48

slide-85
SLIDE 85

6to4 automatic tunneling

Use other TLA ID (2) for tunneling Embed IPv4 address in IPv6 prefix A user can get /48 address space over tunnel

6to4 Relay Router IPv6 Internet IPv4 IPv6 site IPv4:1.2.3.4 IPv4:5.6.7.8 2002:1.2.3.4::/48

IPv6 IPv6 IPv4 IPv6 src: 1.2.3.4 dst: 5.6.7.8 payload: IPv6 packet

2002:5.6.7.8::/48

slide-86
SLIDE 86

6to4 automatic tunneling

Requirement

A user must have one (static) IPv4 global address A user must know 6to4 relay router’s IPv4 address

RFC3068 defines a special address for 6to4 relay router 6to4 relay router’s IP address may be provided statically from 6to4 service provider Public 6to4 relay routers

http://www.kfu.com/~nsayer/6to4/

slide-87
SLIDE 87

Translator

IPv4 never disappear

IPv6 and IPv4 will co-exist

We must provide the way for them to communicate with each

  • ther

Translator mechanisms

Application level gateway

Proxy (HTTP, FTP, and so on)

NAT-PT

slide-88
SLIDE 88

Application level gateway

A kind of a proxy Proxy must be a dual stack node Proxy receives requests on its IPv6 interface from IPv6 client Proxy sends requests to IPv4 server using its IPv4 interface Example

IPv6 only node Dual stack node IPv4 only node HTTP client HTTP proxy IPv6 stack IPv6 stack IPv4 stack HTTP server IPv4 stack

slide-89
SLIDE 89

NAT-PT

Map IPv4 addresses to special IPv6 addresses using a fake DNS server Provide transparent connection to IPv6 nodes IPv6 nodes communicates with IPv4 node as if it is IPv6 node

fake DNS server DNS server Site ipv4.com NAT-PT IPv6 client

slide-90
SLIDE 90

NAT-PT

Map IPv4 addresses to special IPv6 addresses using a fake DNS server Provide transparent connection to IPv6 nodes IPv6 nodes communicates with IPv4 node as if it is IPv6 node

fake DNS server DNS server Site ipv4.com NAT-PT IPv6 client

(1)Query ’ipv4.com’

slide-91
SLIDE 91

NAT-PT

Map IPv4 addresses to special IPv6 addresses using a fake DNS server Provide transparent connection to IPv6 nodes IPv6 nodes communicates with IPv4 node as if it is IPv6 node

fake DNS server DNS server Site ipv4.com NAT-PT IPv6 client

(1)Query ’ipv4.com’ (2)Query ’ipv4.com’

slide-92
SLIDE 92

NAT-PT

Map IPv4 addresses to special IPv6 addresses using a fake DNS server Provide transparent connection to IPv6 nodes IPv6 nodes communicates with IPv4 node as if it is IPv6 node

fake DNS server DNS server Site ipv4.com NAT-PT IPv6 client

(1)Query ’ipv4.com’ (2)Query ’ipv4.com’ (3)Answer ’ipv4.com’ is 1.2.3.4

slide-93
SLIDE 93

NAT-PT

Map IPv4 addresses to special IPv6 addresses using a fake DNS server Provide transparent connection to IPv6 nodes IPv6 nodes communicates with IPv4 node as if it is IPv6 node

fake DNS server DNS server Site ipv4.com NAT-PT IPv6 client

(1)Query ’ipv4.com’ (2)Query ’ipv4.com’ (3)Answer ’ipv4.com’ is 1.2.3.4 (4)Answer ’ipv4.com’ is site-prefix:1.2.3.4

slide-94
SLIDE 94

NAT-PT

Map IPv4 addresses to special IPv6 addresses using a fake DNS server Provide transparent connection to IPv6 nodes IPv6 nodes communicates with IPv4 node as if it is IPv6 node

fake DNS server DNS server Site ipv4.com NAT-PT IPv6 client

(1)Query ’ipv4.com’ (2)Query ’ipv4.com’ (3)Answer ’ipv4.com’ is 1.2.3.4 (4)Answer ’ipv4.com’ is site-prefix:1.2.3.4 (5) connect using IPv6

slide-95
SLIDE 95

NAT-PT

Map IPv4 addresses to special IPv6 addresses using a fake DNS server Provide transparent connection to IPv6 nodes IPv6 nodes communicates with IPv4 node as if it is IPv6 node

fake DNS server DNS server Site ipv4.com NAT-PT IPv6 client

(1)Query ’ipv4.com’ (2)Query ’ipv4.com’ (3)Answer ’ipv4.com’ is 1.2.3.4 (4)Answer ’ipv4.com’ is site-prefix:1.2.3.4 (5) connect using IPv6 (6) connect using IPv4

slide-96
SLIDE 96

Problems of translator

Have same problems which NAT has Break end-to-end security Hard to translate if the protocol itself utilizes address information (e.g. FTP, VoIP)

We need a special gateway per protocol

slide-97
SLIDE 97

Transision mechanisms

Questions?

slide-98
SLIDE 98

Why do we use IPv6? IPv6 Addresses Link-layer address resolution Auto-configuration mechanism DNS Transision mechanisms

Deployment status

Recent event report

slide-99
SLIDE 99

Deployment areas

Network products

Routers, Switches

User end products

Operating Systems

ISP

Consumer/Prosumer ISP services

Software

slide-100
SLIDE 100

Network products

Many vendors are shipping IPv6 enabled boxes

Cisco Systems Hitachi Juniper Networks Nortel Networks 6Wind IIJ YAMAHA NEC Fujitsu 3Com many other...

slide-101
SLIDE 101

User end products

Many Operating Systems support IPv6

UNIX

NetBSD, FreeBSD, OpenBSD, BSD/OS Linux Solaris HP-UX IRIX AIX etc

Windows

Windows XP Windows 2000 (additional patches needed) Windows CE.NET

Macintosh

MacOS X10.2 (aka Jaguar)

Embeded OS

VxWorks TRON

slide-102
SLIDE 102

ISP

In Japan, many ISPs provide IPv6 services Commercial service

IIJ Japan Telecom NTT Communications PoweredCom

Experimental service

AboveNet Chita Media Network JENS KDDI KMN Miako net Nifty

slide-103
SLIDE 103

Software

Many software supports IPv6

Network programs bundled with BSD/Linux Sendmail/Postfix Cyrus IMAP/Courier IMAP Apache Mozilla/Internet Explorer BIND

slide-104
SLIDE 104

Deployment status

Questions?

slide-105
SLIDE 105

Why do we use IPv6? IPv6 Addresses Link-layer address resolution Auto-configuration mechanism DNS Transision mechanisms Deployment status

Recent event report

slide-106
SLIDE 106

IPv6 ShowCase (N+I 2002, July 2002 )

IPv6 town image is presented 3 zones

ISP/Datacenter zone Home zone Mobile zone

Over 30 companies/organizations participated

slide-107
SLIDE 107

ISP/Datacenter zone

ISP services

Connectibily Prefix Delegation

Router/Switch products

Many vendor supports IPv6

Radius products

slide-108
SLIDE 108

ISP/Datacenter zone

Routers and Switches

slide-109
SLIDE 109

Home zone

Home appliances

Digital camera Microoven Refrigerator

VoD software P2P application Live camera

slide-110
SLIDE 110

Home zone

Home appliances Game console / P2P application

slide-111
SLIDE 111

Mobile zone

Mobile IPv6

Mobile Video/Music player Mobile conference tools

Network mobility

Internet car

Many small devices IPv6/Mobile IPv6 enabled

PDA Handheld PC Note PC

slide-112
SLIDE 112

Mobile zone

Mobile nodes and home agents Internet car

slide-113
SLIDE 113

Many IPv6 related products

One chip IPv6 processer IPv6 network management tools Radius servers IP phone over IPv6 Cipher chip for IP security Embeded OSes which support IPv6

slide-114
SLIDE 114

IPv6 ShowCase 2002

Questions?

slide-115
SLIDE 115

Summary

IPv6 is not a next generation protocol IPv6 is a current protocol It is not too early to start IPv6

IPv6 has many advantages

Huge address space Plug-and-Play End-to-end communication Security

Hardware/Software are ready

Routers/Switches/Operating Systems/Major applications

Network infrastructure is ready

Many ISPs provide/plan to provide IPv6 services

Not to be late!

slide-116
SLIDE 116

Thank you!