World IPv6 Day in Indonesia World IPv6 Day in Indonesia APAN32, New - - PowerPoint PPT Presentation

World IPv6 Day in Indonesia World IPv6 Day in Indonesia APAN32, New Delhi ,

Affan Basalamah Affan Basalamah ITB/INHERENT, Indonesia

Outline Outline

• Activities in ITB
• Activities in INHERENT

Activities in INHERENT

• Activities in Indonesia IPv6 Forum
• Recommendation

BAC

ACKGROUND

World IPv6 Day World IPv6 Day

• June 8, 2011
• Content provider open their services via IPv6

Content provider open their services via IPv6

– basically, they provide AAAA record to popular website website – Allow IPv6 client to access their content via IPv6

• So provider will know:

– how many client has successfully to access IPv6 how many client has successfully to access IPv6 – how many client has failed to access IPv6

DNS Record at that day DNS Record at that day

ACTIVITIES TIVITIES IN IN ITB

ITB

Activities in ITB Activities in ITB

• Work together with SOI-ASIA

(http://ipv6day.soi.asia) ( p // p y )

• IPv6-only video-on-demand streaming

Ad b Fl h M di St i S Li – Adobe Flash Media Streaming Server on Linux – 2 video of Indonesia cultural show

• IPv6-only website, embedding video content

– http://ipv6dayitb ac id Apache on FreeBSD – http://ipv6day.itb.ac.id Apache on FreeBSD

Evaluate Brocade ADX1000 IPv6 SLB Evaluate Brocade ADX1000 IPv6 SLB

• Provide IPv6 SLB for v6 client to v4 server
• IPv6 SLB that can translate:

IPv6 SLB that can translate:

– v6 client – v6 server 6 li 6/ 4 – v6 client – v6/v4 server – v6 client – v4 server

Why IPv6 Load Balancer? Why IPv6 Load Balancer?

• Hoping to solve questions:

– Which is comes first, network or application? , pp – What is IPv6 killer apps?

H it’ i t l

• How it’s going to solve:

– IPv4 killer apps can directly migrated to IPv6 – No apps rewrite or migration

• At least in the theory
• At least in the theory

– Evaluation in the real world will tell you

Experience with IPv6 SLB (1) Experience with IPv6 SLB (1)

• Basic services works just fine
• Translate IPv4 web server to IPv6 client

Translate IPv4 web server to IPv6 client

• Translate IPv4 cache server to IPv6 client

– real server(s) TCP4/8080 translated to virtual IP

• n TCP6/8080

– virtual server client TCP6 server IPv6 client

Experience with IPv6 SLB (2) Experience with IPv6 SLB (2)

• At first we would like to use regular IPv4 web

& streaming server to hosts g http://ipv6day.itb.ac.id , and SLB will translate IPv6 client to IPv4 server for us IPv6 client to IPv4 server for us

• It turns out that our admin has natively

bl d f b enabled IPv6 for web & streaming, so we don’t put our server behind SLB p

Screenshot Screenshot

Video Video Stream from streaming streaming server Simple script to script to identify IPv6 client

Website Statistics (1) Website Statistics (1)

Website Statistics (2) Website Statistics (2)

User statistics User statistics

• Viewer observed from ITB campus

– Most of ITB campus network is IPv6 dual-stack p

• Viewer also observed from Indonesia ISP

l b d f

• Also observed from WIDE Project Japan
• No reverse address for IPv6

No reverse address for IPv6

– It’s hard to see which ISP has IPv6 address H d t ll d i WHOIS dd – Had to manually doing WHOIS on address

ACTIVITIES TIVITIES IN IN INHERENT INHERENT

Activities in INHERENT Activities in INHERENT

• INHERENT currently is not deploying IPv6
• Most INHERENT partner (and most Indonesia

Most INHERENT partner (and most Indonesia ISP) deploy IPv6 network through tunnel to Hurricane Electric Hurricane Electric

• INHERENT get IPv6 prefix from TEIN3-POP in

ITB

IPv6 tunnel broker for INHERENT IPv6 tunnel broker for INHERENT

• Deployed on ITB router (Juniper SRX650)

– Ask INHERENT community to join y j

• Cleanup IPv6 prefix-list in TEIN3 ID-POP to

advertise new IPv6 prefix form ITB/INHERENT advertise new IPv6 prefix form ITB/INHERENT

IPv6 BGP peering in ITB router IPv6 BGP peering in ITB router

2001:470:17:72::1 6939 176059 23178 0 18 1 0d9h Establ 2001:470:17:72::1 6939 176059 23178 0 18 1w0d9h Establ inet6.0: 5917/6690/6690/0 2001:7fa:f::1 7717 2907 2496 0 265 19:07:49 Establ inet6.0: 118/123/123/0 2403 8000 10 2 18007 1 3 0 15950 1 E t bl 2403:8000:10::2 18007 1 3 0 15950 1 Establ inet6.0: 672/672/672/0 inet6.2: 79/79/79/0 2403:8000:666:dead::2 46047 2031 101953 0 149 16:53:49 Establ inet6.0: 1/1/1/0 2403:8000:666:dead::6 55687 35 2699 0 123 20:57:09 Active 2403:8000:666:dead::a 45304 1 30432 0 9 9w4d1h Active 2403:8000:666:dead::18 46052 0 0 0 0 9w5d18h Idle 2403:8000:666:dead::22 55674 0 0 0 0 9w5d18h Active

• Red: IPv6 Tunnel BGP peering (AS6939 above is HE.net)
• Blue: IPv6 BGP peering to Indonesia OpenIXP
• Green: IPv6 BGP peering to INHERENT router to TEIN3

network

Statistics Statistics

• At least 5 tunnel registered, 3 of them observed

alive, only 1 currently active

• Unable to run IPv6 network monitoring, because we

haven’t setup the the infrastructure p

• Netflow, NFSen

Hurricane Electric Tunnel everywhere Hurricane Electric Tunnel everywhere

• From simple show route protocol bgp, I see

most Indonesia ISP has HE.net tunnel

• AS6939 everywhere

– Makes BGP path adjustment difficult p j

• Path to AS6939 is preferred compared to TEIN3
• e.g., ITB needs to advertise /33 instead of /32 to TEIN3

g , / /

– ITB has some IPv6 BGP peering

• Internet commercial IPv6 via HE net

Internet commercial IPv6 via HE.net

• Indonesia commercial via OpenIXP
• REN IPv6 via TEIN3
• REN IPv6 via TEIN3

ACTIVITIES TIVITIES IN IN INDONESIA INDONESIA IPV PV6

6 FORUM

FORUM

Indonesia IPv6 Forum Indonesia IPv6 Forum

• Community effort to encourage IPv6

deployment in Indonesia p y

• Initiated in IPv6 Summit June 2010, Bali

h // i 6f id

• http://www.ipv6forum.or.id

Activities in IPv6 Forum Activities in IPv6 Forum

• ITB

– Mentioned above

• PT T

elkom

C l b i IP 6 D i T lk RDC B d – Celebrating IPv6 Day in T elkom RDC Bandung – Presentation from vendor – Setup dual stack website & proxy server – Setup IPv6 tunnel broker for ISP Setup IPv6 tunnel broker for ISP

REC

ECOMMEND OMMENDATION ION

Recommendation (1) Recommendation (1)

• As usual, only network admins interested

with IPv6 activities ☺

– User don’t see anything differently Server admins usually intimidated with IPv6 – Server admins usually intimidated with IPv6

• That’s why IPv6 SLB is necessary

d d f h

• ISP needs to create reverse record for their

IPv6 address, especially their customers p y

– So human observer can easily see traffic logs

Recommendation (2) Recommendation (2)

• Regular event on IPv6 operation is necessary

to push everybody operating live IPv6 network p y y p g

– Endpoint OS maker (desktop, mobile, appliances) Network operator – Network operator – Content provider

• We should be doing this more often ☺

– Admin can cleanup their “abandoned” IPv6 configs Admin can cleanup their abandoned IPv6 configs in their routers and servers

Thank you!