World IPv6 Day in Indonesia World IPv6 Day in Indonesia APAN32, New Delhi , Affan Basalamah Affan Basalamah ITB/INHERENT, Indonesia
Outline Outline • Activities in ITB • Activities in INHERENT Activities in INHERENT • Activities in Indonesia IPv6 Forum • Recommendation
B AC ACKGROUND
World IPv6 Day World IPv6 Day • June 8, 2011 • Content provider open their services via IPv6 Content provider open their services via IPv6 – basically, they provide AAAA record to popular website website – Allow IPv6 client to access their content via IPv6 • So provider will know: – how many client has successfully to access IPv6 how many client has successfully to access IPv6 – how many client has failed to access IPv6
DNS Record at that day DNS Record at that day
IN ITB ITB ACTIVITIES TIVITIES IN
Activities in ITB Activities in ITB • Work together with SOI-ASIA (http://ipv6day.soi.asia) ( p // p y ) • IPv6-only video-on-demand streaming – Adobe Flash Media Streaming Server on Linux Ad b Fl h M di St i S Li – 2 video of Indonesia cultural show • IPv6-only website, embedding video content – http://ipv6dayitb ac id Apache on FreeBSD – http://ipv6day.itb.ac.id Apache on FreeBSD
Evaluate Brocade ADX1000 IPv6 SLB Evaluate Brocade ADX1000 IPv6 SLB • Provide IPv6 SLB for v6 client to v4 server • IPv6 SLB that can translate: IPv6 SLB that can translate: – v6 client – v6 server – v6 client – v6/v4 server 6 li 6/ 4 – v6 client – v4 server
Why IPv6 Load Balancer? Why IPv6 Load Balancer? • Hoping to solve questions: – Which is comes first, network or application? , pp – What is IPv6 killer apps? • How it’s going to solve: H it’ i t l – IPv4 killer apps can directly migrated to IPv6 – No apps rewrite or migration • At least in the theory • At least in the theory – Evaluation in the real world will tell you
Experience with IPv6 SLB (1) Experience with IPv6 SLB (1) • Basic services works just fine • Translate IPv4 web server to IPv6 client Translate IPv4 web server to IPv6 client • Translate IPv4 cache server to IPv6 client – real server(s) TCP4/8080 translated to virtual IP on TCP6/8080 – virtual server client TCP6 server IPv6 client
Experience with IPv6 SLB (2) Experience with IPv6 SLB (2) • At first we would like to use regular IPv4 web & streaming server to hosts g http://ipv6day.itb.ac.id , and SLB will translate IPv6 client to IPv4 server for us IPv6 client to IPv4 server for us • It turns out that our admin has natively enabled IPv6 for web & streaming, so we bl d f b don’t put our server behind SLB p
Screenshot Screenshot Video Video Stream from streaming streaming server Simple script to script to identify IPv6 client
Website Statistics (1) Website Statistics (1)
Website Statistics (2) Website Statistics (2)
User statistics User statistics • Viewer observed from ITB campus – Most of ITB campus network is IPv6 dual-stack p • Viewer also observed from Indonesia ISP • Also observed from WIDE Project Japan l b d f • No reverse address for IPv6 No reverse address for IPv6 – It’s hard to see which ISP has IPv6 address – Had to manually doing WHOIS on address H d t ll d i WHOIS dd
ACTIVITIES TIVITIES IN IN INHERENT INHERENT
Activities in INHERENT Activities in INHERENT • INHERENT currently is not deploying IPv6 • Most INHERENT partner (and most Indonesia Most INHERENT partner (and most Indonesia ISP) deploy IPv6 network through tunnel to Hurricane Electric Hurricane Electric • INHERENT get IPv6 prefix from TEIN3-POP in ITB
IPv6 tunnel broker for INHERENT IPv6 tunnel broker for INHERENT • Deployed on ITB router (Juniper SRX650) – Ask INHERENT community to join y j • Cleanup IPv6 prefix-list in TEIN3 ID-POP to advertise new IPv6 prefix form ITB/INHERENT advertise new IPv6 prefix form ITB/INHERENT
IPv6 BGP peering in ITB router IPv6 BGP peering in ITB router 2001:470:17:72::1 6939 176059 23178 0 18 1 0d9h Establ 2001:470:17:72::1 6939 176059 23178 0 18 1w0d9h Establ inet6.0: 5917/6690/6690/0 2001:7fa:f::1 7717 2907 2496 0 265 19:07:49 Establ inet6.0: 118/123/123/0 2403 8000 10 2403:8000:10::2 18007 1 3 0 15950 1 Establ 2 18007 1 3 0 15950 1 E t bl inet6.0: 672/672/672/0 inet6.2: 79/79/79/0 2403:8000:666:dead::2 46047 2031 101953 0 149 16:53:49 Establ inet6.0: 1/1/1/0 2403:8000:666:dead::6 55687 35 2699 0 123 20:57:09 Active 2403:8000:666:dead::a 45304 1 30432 0 9 9w4d1h Active 2403:8000:666:dead::18 46052 0 0 0 0 9w5d18h Idle 2403:8000:666:dead::22 55674 0 0 0 0 9w5d18h Active • Red: IPv6 Tunnel BGP peering (AS6939 above is HE.net) • Blue: IPv6 BGP peering to Indonesia OpenIXP • Green: IPv6 BGP peering to INHERENT router to TEIN3 network
Statistics Statistics • At least 5 tunnel registered, 3 of them observed alive, only 1 currently active • Unable to run IPv6 network monitoring, because we haven’t setup the the infrastructure p • Netflow, NFSen
Hurricane Electric Tunnel everywhere Hurricane Electric Tunnel everywhere • From simple show route protocol bgp , I see most Indonesia ISP has HE.net tunnel • AS6939 everywhere – Makes BGP path adjustment difficult p j • Path to AS6939 is preferred compared to TEIN3 • e.g., ITB needs to advertise /33 instead of /32 to TEIN3 g , / / – ITB has some IPv6 BGP peering • Internet commercial IPv6 via HE net Internet commercial IPv6 via HE.net • Indonesia commercial via OpenIXP • REN IPv6 via TEIN3 • REN IPv6 via TEIN3
PV 6 6 FORUM ACTIVITIES TIVITIES IN IN INDONESIA INDONESIA IPV FORUM
Indonesia IPv6 Forum Indonesia IPv6 Forum • Community effort to encourage IPv6 deployment in Indonesia p y • Initiated in IPv6 Summit June 2010, Bali • http://www.ipv6forum.or.id h // i 6f id
Activities in IPv6 Forum Activities in IPv6 Forum • ITB – Mentioned above • PT T elkom – Celebrating IPv6 Day in T C l b i IP 6 D i T lk elkom RDC Bandung RDC B d – Presentation from vendor – Setup dual stack website & proxy server – Setup IPv6 tunnel broker for ISP Setup IPv6 tunnel broker for ISP
R EC ECOMMEND OMMENDATION ION
Recommendation (1) Recommendation (1) • As usual, only network admins interested with IPv6 activities ☺ – User don’t see anything differently – Server admins usually intimidated with IPv6 Server admins usually intimidated with IPv6 • That’s why IPv6 SLB is necessary • ISP needs to create reverse record for their d d f h IPv6 address, especially their customers p y – So human observer can easily see traffic logs
Recommendation (2) Recommendation (2) • Regular event on IPv6 operation is necessary to push everybody operating live IPv6 network p y y p g – Endpoint OS maker (desktop, mobile, appliances) – Network operator Network operator – Content provider • We should be doing this more often ☺ – Admin can cleanup their “abandoned” IPv6 configs Admin can cleanup their abandoned IPv6 configs in their routers and servers
Thank you!
Recommend
More recommend
