ISOC ION Conference Advancing the Network - Where Weve Been, Where - PowerPoint PPT Presentation

ISOC ION Conference Advancing the Network - Where We’ve Been, Where We’re Headed Shumon Huque Ron Broersma Paul Ebersman John Spence Paul Mockapetris San Diego, California, December 11th 2012 1

Advancing the Network: Where We've Been, Where We're Headed Shumon Huque, University of Pennsylvania (moderator) Ron Broersma, DREN Paul Ebersman, Infoblox John Spence, Nephos6 Paul Mockapetris, Nominum Panelists will examine the progress made in cutting-edge network advancements, such as IPv6 and DNSSEC, over the past year. Experts will share important lessons learned in the deployment of new technologies and provide insight into the future of the Internet networking landscape. [Internet Society, ION Conference, San Diego, CA, Dec 11th 2012] 2

World IPv6 Launch • http://www.worldipv6launch.org/ 6 JUNE 2012 Major Internet service providers (ISPs), home networking equipment manufacturers, and web companies around the world are coming together to permanently enable IPv6 for their products and services by 6 June 2012. • Google, Facebook, Netflix, Yahoo!, MS Bing, ... • ISPs: Comcast, AT&T, Free Telecom, Time Warner, ... • CDNS: Akamai, Limelight, ... • some universities, corporations, government agencies, .... [Internet Society, ION Conference, San Diego, CA, Dec 11th 2012] 3

http://www.google.com/intl/en/ipv6/statistics.html Also see http://www.worldipv6launch.org/measurements/ [Internet Society, ION Conference, San Diego, CA, Dec 11th 2012] 4

from http://ipv4.potaroo.net (Geoff Huston, APNIC) (from October 15th 2012) Depleted already! ARIN’s own website says 2.82 /8’s available See https://www.arin.net/resources/request/ipv4_countdown.html [Internet Society, ION Conference, San Diego, CA, Dec 11th 2012] 5

DNSSEC Deployment • DNSSEC Root signed (July 2010) • Many TLDs signed:104 of 316 (33%) as of Dec 2012: • GTLD: edu gov com net org biz info arpa • ccTLD: many, including a number of IDNs • See http://stats.research.icann.org/dns/tld_report/ • Reverse trees: in-addr.arpa ip6.arpa [Internet Society, ION Conference, San Diego, CA, Dec 11th 2012] 6

Deployment status • Note: not all TLD registrars support DNSSEC yet (ie. ability to install a DS record in the TLD) • ICANN maintains a list at: • http://www.icann.org/en/news/in-focus/dnssec/deployment [Internet Society, ION Conference, San Diego, CA, Dec 11th 2012] 7

SecSpider • DNSSEC zone monitoring project • http://secspider.cs.ucla.edu/ • Over ~205,000 signed zones as of mid Dec 2012 • Crawling and user submissions • Distributed polling [Internet Society, ION Conference, San Diego, CA, Dec 11th 2012] 8

SecSpider [Internet Society, ION Conference, San Diego, CA, Dec 11th 2012] 9