Ipv6 Integration: Building The Infrastructure
Ipv6 Integration: Building The Infrastructure
Ipv6 Integration: Building The Infrastructure
LT/BT
00
IPv4
Used at the beginning for transition with IPv4 Allows encapsulation of IPv6 packet into IPv6 packets Dynamic tunneling
LT/BT
LT/BT
6-bone
Create a virtual topology other the IPv4 network with configured tunnels
LT/BT
6-bone
6bone
First IPv6 network Started the 15th of July 1996 between 3 sites :
WIDE/JP UNI-C/DK G6/FR
Clouds of equipments connected with IPv6 Mainly IPv4 tunnels to interconnect IPv6 clouds. Some native links (e.g. connection to the 6TAP) Routing Protocol:
static, at the beginning Now dynamic (RIPng, OSPFv6, BGP4+, ...)
LT/BT
http://www.6bone.net
LT/BT
6 to 4
Another way to build a tunneled infrastructure Simpler configuration (no need to configure static tunnels) Use a special address plan
Prefix: 2002::/16
13
0x0002
32
16
64
001
LT/BT
V4ADDR
SLA
Interface ID
10
LT/BT
6 to 4 : Address Allocation
6 to 4 : Tunneling
DNS
1.2.3.4
Prefix: 2002:C001:0203::/48
2002:0102:0304::/48 2002:8001:0203::/48
192.1.2.3
128.1.2.3
A
11
LT/BT
192.1.2.3
128.1.2.3
LT/BT
12
If one has as a 6to4 and the other a 6to4 and global IPv6 addresses
Select 6to4 address
relay relay
relay
A
LT/BT
192.1.2.3
128.1.2.3
13
LT/BT
14
Relay are just routers with one interface on the native IPv6 network and one on the 6to4 network. If the relay can be announced trough a interior gateway protocol:
Doesnt change anything
relay
A
LT/BT
192.1.2.3
16
LT/BT
Tunnel brokers
FT R&D
Caen
Lille
Sfinx
Nancy Paris Loria
Belfort Colmar
Strasbourg
Brest
Rennes
INRIA
Nantes
Euro-IPv6
6TAP 6bone
G6bone
Grenoble
Sophia
tunnel
LT/BT
17
LT/BT
18
Some explanations
001 TLA
35
SLA
Interface ID
Core BB 6bits
Sites 7 bits
RIs Sites
pNLAs
NIO Renater-2 Ile de France Grenoble Strasbourg Rennes Nancy
19
001 TLA
2 bytes
SLA
Interface ID
10 bytes
LT/BT
20
2001:0660:1080::/41
2001:0660:0300::/41
Caen
Brest 2001:0660:0280::/41 Nantes
Strasbourg
2001:0660:0200::/41 Colmar
Paris
Rennes
2001:0660:0100::/41 Belfort
R.I
NLA-ID allocation Reverse zone delegation Site connection set up
2 3 1 4
GIP Renater
2001:0660:1000::/41
Montbonnot Grenoble
2001:0660:0180::/41
Site
NLA-ID request to be connected to IPv6 pilot
Renater = 2001:0660::/35
LT/BT
Sophia
21
LT/BT
22
FreeBSD:
4.x : included 3.x : INRIA, KAME
Microsoft:
Windows 2000 9x : Trumpet stack
NetBSD:
-current : included 1.4.2; INRIA, KAME
Linux:
2.2 : included
Apple
MacOS X : included
LT/BT
LT/BT
23
24 See http://playground.sun.com/ipng/
Used to v6fy applications Recompile applications to use IPv6 API Stay compatible with IPv4 applications Configuration of a dual stack
use of IPv4 mapped addresses
3ffe:305:1002::1->3ffe:305:1002::2
25
LT/BT
26
Cohabitation Mechanisms
Different approaches
Application Level Gateways
Applications IPv4
::FFFF:128.1.2.3 ->::FFFF.128.1.2.4
Kernel
128.1.2.3 ->128.1.2.4
LT/BT
27
LT/BT
28
Client
Spooler
Printer
IPv6
IPv4
LT/BT
30
IPv4 and IPv6 stack IPv4 stack is configured only when one or more application need it Three scenarios
Outcoming session (v6 -> v4) Incoming session (v4 -> v6) v4 applications (inside a v6 cloud):
Combination of scenario 1 & 2 Used to generate v6 traffic from v4 applications
V4-only application
Ethernet
Routing Table
dti
IPv4 IPv6
LT/BT
31
LT/BT
32
The v4 address of Z is used by the application, which sends v4 packet to the kernel The interface asks DSTM Server for a v4 source address The address X4 is returned with a tunnel end-point Y6
LT/BT
X6 tunnels to Y6 IPv4 packet X4 -> Z4 Y decapsulates the v4 packet and send it to Z4 Y keeps the mapping between the v4 and v6 LT/BT address in the routing table
33
34
DSTM
Invisible
to applications
Network is only configured for v6 V4 address allocation is simple Fails if not enough v4 addresses Subject to deny of service
Scenario 2 & 3 should be limited to Intranet
35
Suppress the v4 stack Translate the v6 header into a v4 header on some point of the network
Routing can direct packet to those translation points.
LT/BT
LT/BT
SIIT
SIIT
::FFFF:0:X4 ::FFFF:Z4 X4Z4
V6 header contains:
IPv4 mapped addresses
80
16 FFFF
32
00
IPv4
16 FFFF
16 0000
32
Network routes IPv4-mapped packets to a translation point Have a IPv4-translated address assigned from a pool
00
IPv4
LT/BT
LT/BT
38
SIIT
::FFFF:0:X4 ::FFFF:Z4 X4Z4
Network routes IPv4-translated to the destination Have a IPv4-translated address assigned from a pool
Translate addresses and headers A pool of routable addresses is assigned to the translator Out coming session translation is easy Incoming translation must intercept DNS requests
LT/BT
39
LT/BT
40
NAT-PT: v6 to v4
dns dns
Migration strategies
Technical factors
IPv6 availability
2001::1 Prefix::Z4
@v4Z4
Y
2001::1 @v4
Psychological factors
skill to configure IPv6 risk to modify something working
Prefix is routed to the NAT box May change port numbers to allow more translations
LT/BT
41
42
Migration scenarios
Private Networks
Private Network
V6 instead of prefix 10/8
43
LT/BT
Why ?
Private Networks
Public address space
Web Proxy Mail
DNS
Internet
45
LT/BT
DNS
Company
File server
LT/BT
46
MPLS
Conclusion
LT/BT
47
LT/BT
48
Conclusion
complexity
Conclusion
IPv6
IPv4 Time
LT/BT
49
LT/BT
50
To go on
http://playground.sun.com/IPng
RFCs, IDs, implementations,
LT/BT
51