Upload
affan-basalamah
View
849
Download
1
Embed Size (px)
DESCRIPTION
ITB Experience with World IPv6 Day
Citation preview
World IPv6 Day in Indonesia
APAN32, New Delhi
Affan Basalamah
ITB/INHERENT, Indonesia
Outline
• Activities in ITB
• Activities in INHERENT
• Activities in Indonesia IPv6 Forum
• Recommendation
BACKGROUND
World IPv6 Day
• June 8, 2011
• Content provider open their services via IPv6
– basically, they provide AAAA record to popular
website
– Allow IPv6 client to access their content via IPv6
• So provider will know:
– how many client has successfully to access IPv6
– how many client has failed to access IPv6
DNS Record at that day
ACTIVITIES IN ITB
Activities in ITB
• Work together with SOI-ASIA
(http://ipv6day.soi.asia)
• IPv6-only video-on-demand streaming
– Adobe Flash Media Streaming Server on Linux
– 2 video of Indonesia cultural show
• IPv6-only website, embedding video content
– http://ipv6day.itb.ac.id Apache on FreeBSD
Evaluate Brocade ADX1000 IPv6 SLB
• Provide IPv6 SLB for v6 client to v4 server
• IPv6 SLB that can translate:
– v6 client – v6 server
– v6 client – v6/v4 server
– v6 client – v4 server
Why IPv6 Load Balancer?
• Hoping to solve questions:
– Which is comes first, network or application?
– What is IPv6 killer apps?
• How it’s going to solve:
– IPv4 killer apps can directly migrated to IPv6
– No apps rewrite or migration
• At least in the theory
– Evaluation in the real world will tell you
Experience with IPv6 SLB (1)
• Basic services works just fine
• Translate IPv4 web server to IPv6 client
• Translate IPv4 cache server to IPv6 client
– real server(s) TCP4/8080 translated to virtual IP
on TCP6/8080
– virtual server client TCP6 server IPv6 client
Experience with IPv6 SLB (2)
• At first we would like to use regular IPv4 web
& streaming server to hosts
http://ipv6day.itb.ac.id , and SLB will translate
IPv6 client to IPv4 server for us
• It turns out that our admin has natively
enabled IPv6 for web & streaming, so we
don’t put our server behind SLB
Screenshot
Video
Stream
from
streaming
server
Simple
script to
identify
IPv6 client
Website Statistics (1)
Website Statistics (2)
User statistics
• Viewer observed from ITB campus
– Most of ITB campus network is IPv6 dual-stack
• Viewer also observed from Indonesia ISP
• Also observed from WIDE Project Japan
• No reverse address for IPv6
– It’s hard to see which ISP has IPv6 address
– Had to manually doing WHOIS on address
ACTIVITIES IN INHERENT
Activities in INHERENT
• INHERENT currently is not deploying IPv6
• Most INHERENT partner (and most Indonesia
ISP) deploy IPv6 network through tunnel to
Hurricane Electric
• INHERENT get IPv6 prefix from TEIN3-POP in
ITB
IPv6 tunnel broker for INHERENT
• Deployed on ITB router (Juniper SRX650)
– Ask INHERENT community to join
• Cleanup IPv6 prefix-list in TEIN3 ID-POP to
advertise new IPv6 prefix form ITB/INHERENT
IPv6 BGP peering in ITB router
2001:470:17:72::1 6939 176059 23178 0 18 1w0d9h Establ
inet6.0: 5917/6690/6690/0
2001:7fa:f::1 7717 2907 2496 0 265 19:07:49 Establ
inet6.0: 118/123/123/0
2403:8000:10::2 18007 1 3 0 15950 1 Establ
inet6.0: 672/672/672/0
inet6.2: 79/79/79/0
2403:8000:666:dead::2 46047 2031 101953 0 149 16:53:49 Establ
inet6.0: 1/1/1/0
2403:8000:666:dead::6 55687 35 2699 0 123 20:57:09 Active
2403:8000:666:dead::a 45304 1 30432 0 9 9w4d1h Active
2403:8000:666:dead::18 46052 0 0 0 0 9w5d18h Idle
2403:8000:666:dead::22 55674 0 0 0 0 9w5d18h Active
• Red: IPv6 Tunnel BGP peering (AS6939 above is HE.net)
• Blue: IPv6 BGP peering to Indonesia OpenIXP
• Green: IPv6 BGP peering to INHERENT router to TEIN3
network
Statistics
• At least 5 tunnel registered, 3 of them observed
alive, only 1 currently active
• Unable to run IPv6 network monitoring, because we
haven’t setup the the infrastructure
• Netflow, NFSen
Hurricane Electric Tunnel everywhere
• From simple show route protocol bgp, I see
most Indonesia ISP has HE.net tunnel
• AS6939 everywhere
– Makes BGP path adjustment difficult
• Path to AS6939 is preferred compared to TEIN3
• e.g., ITB needs to advertise /33 instead of /32 to TEIN3
– ITB has some IPv6 BGP peering
• Internet commercial IPv6 via HE.net
• Indonesia commercial via OpenIXP
• REN IPv6 via TEIN3
ACTIVITIES IN INDONESIA IPV6 FORUM
Indonesia IPv6 Forum
• Community effort to encourage IPv6
deployment in Indonesia
• Initiated in IPv6 Summit June 2010, Bali
• http://www.ipv6forum.or.id
Activities in IPv6 Forum
• ITB
– Mentioned above
• PT Telkom
– Celebrating IPv6 Day in Telkom RDC Bandung
– Presentation from vendor
– Setup dual stack website & proxy server
– Setup IPv6 tunnel broker for ISP
RECOMMENDATION
Recommendation (1)
• As usual, only network admins interested
with IPv6 activities
– User don’t see anything differently
– Server admins usually intimidated with IPv6
• That’s why IPv6 SLB is necessary
• ISP needs to create reverse record for their
IPv6 address, especially their customers
– So human observer can easily see traffic logs
Recommendation (2)
• Regular event on IPv6 operation is necessary
to push everybody operating live IPv6 network
– Endpoint OS maker (desktop, mobile, appliances)
– Network operator
– Content provider
• We should be doing this more often
– Admin can cleanup their “abandoned” IPv6 configs
in their routers and servers
Thank you!