ipv6 at cern
DESCRIPTION
Ipv6 at CERN. Pilot Project Status. Endre Futo and Joop Joosten. 7 December 2001. Topics. Short review of the IPv6 standard Test collaborations Connectivity CERN IPv6 pilot project Host implementations & applications (EF) What next?. Changed. Removed. - PowerPoint PPT PresentationTRANSCRIPT
Ipv6 at CERNPilot Project Status
Endre Futo and Joop Joosten
7 December 2001
Topics
• Short review of the IPv6 standard
• Test collaborations
• Connectivity
• CERN IPv6 pilot project
• Host implementations & applications (EF)
• What next?
0 bits 31
Ver IHL Total Length
Identifier Flags Fragment Offset
32 bit Source Address
32 bit Destination Address
4 8 2416
Service Type
Options and Padding
Time to Live Header ChecksumProtocol
RemovedChanged
IPv4 Header 20 octets + options : 13 fields
0 31
Version Priority Flow Label (QoS)
Payload Length Next Header Hop Limit
128 bit Source Address
128 bit Destination Address
4 12 2416
IPv6 Header40 Octets, 8 fields
Benefits of IPv6 Addresses
• enough for stable, unique addresses for all devices– note: stable does not mean permanent!– allow continued growth of the Internet (for centuries to
come)– restore end-to-end transparency of the Internet
• additional benefits:– plug-and-play (no need for configuration servers)– verifiable end-to-end packet integrity (no need for
NATs)– simpler mobility (no need for “foreign agent” function)
sitetopology(16 bits)
interfaceidentifier(64 bits)
publictopology(45 bits)
Global Unicast Addresses
• FP = Format Prefix (001)• TLA = Top-Level Aggregator
NLA = Next-Level Aggregator(s) SLA = Site-level Aggregator• TLAs may be assigned to providers or exchanges• This structure showed to be a moving target• Aim is good aggregation and flexibility
interface IDSLANLATLAFP
sitetopology(16 bits)
interfaceidentifier(64 bits)
publictopology(45 bits)
Global Unicast Address Formats
Interface IDSLANLATLA
001
FP
FP TLA RES NLA SLA Interface ID
subTLA NLA SLA Interface ID
subTLA RES NLA SLA Interface ID
3 13 8 24 16 64
16 13 19 16
16 13 6 13 16
2001
2001
Example: SWITCH has 2001:0620::/35 up to 2001:0627::/35
35
sitetopology(16 bits)
interfaceidentifier(64 bits)
publictopology(45 bits)
6BONE pTLA and pNLA Formats
Interface IDSLANLATLA
001
FP
pTLA pNLA SLA Interface ID 16 8 24 16
16 12 20 16
Initial allocation policy /24
New allocation policy /28
3FFE
3FFE pTLA pNLA SLA Interface ID
Prefix
2A0:C9FF:FE43:95A7
Interface ID
Prefix Representation 3FFE:8120:AFFE::/64
IPv6 Host Address• Formed from a combination of the:
• Separation of “who you are” from “where you are connected to”– Prefix: Routing topology
– Interface ID: Node Identifier (MAC address)
Node MAC address 02A0:C9FF:FE43:95A7CERN Data Base 00-A0-C9-43-95-A7
3FFE:8120:AFFE::
Test Projects6TAP: Joint project between Esnet, Viagenie and Canarie High speed native IPv6 interconnect in Chicago 16 organisations are connected , CERN included
QTPv6: 13 participants all over Europe Each participant got a /34 prefix (Cern: 3FFE:8036::/34) Star Configuration (Telebit router in Amsterdam) Managed Bandwidth Service Overlay on TEN155 Called now GTPv6 and is virtually dead
6BONE: World wide informal collaborative project Tunneled and native IPv6 Test standards, implementations, transition and operational procedures About 100 pTLA’s have been issued CERN has 3FFE:8120::/28 pTLA
6NET: Cisco initiative for high speed native IPv6 network in Europe
ESNET OTHERSWIDE
OTHERSCESNET REDIRIS
6TAP QTPv6
RTR-CHI RTR-GVA RTR-NAT
SWITCH
CISCORENATER
ENST-BDSTM-SVR
DSTMCLIENT
WEBSERVER
DNS
JNPR-M531-3-019
FIREWALL
6NET
HOSTXYZ
*BAT31
VPN
INTERNET- IPv4
GRE 6TO46IN4
TUNNELS TOOTHER PEERS
2001-11-22
Implementations tested• Linux RedHat 6.2, 7.0. 7.1 and 7.2• SuSE Linux 7.2• FreeBSD 4.1 and 4.3• Solaris 8• Microsoft Win2000 Service Pack1• Cisco IOS 12.2 + EFT-200007• Nameserver:
– bind 9.2.0 on Linux RedHat 7.1 kernel 2.4.6and Linux RedHat 7.2, kernel 2.4.9
• Note: so far no operating system has PURE IPv6 stack,all of them have dual stack (IPv4 + more or less complete IPv6 stack)Question: how to construct a pure IPv6 machine ?
Linux IPv6• Set up done according to an excellent Web-page:
www.bieringer.de/linux/IPv6/• Here you find:
– Status page of IPv6 & Linux
– Linux distribution status pages
– How to set up Linux for IPv6
– IPv6 enabled applications or link to them
– Connecting to the 6bone through PPP witha dynamically-allocated IPv4 address
– List of links to IPv6 & Linux related information
– Some IPv6 & Linux tools
and • RedHat 7.2 and SuSE 7.2 comes with several IPv6 enabled
applications
– xinetd, ssh, tcpdump, some utilities (ping6, traceroute6, …)
– For older RedHat versions see the www.bieringer.de/linux/IPv6/
• SuSE 7.2 is the only Linux distribution with IPv6 enabledrsh and rlogin(used in some applications, e.g. ASpath, Looking glass, mrtg, ...)
• Capabilities of different Linux distributions, seewww.bieringer.de/linux/IPv6/status/IPv6+Linux-status-distributions.html
Additional soft for Linux IPv6
• IPv6 capable World Wide Web– Server:
• Apachesunsite.cnlab-switch.ch/www/mirror/apache/dist/httpd/old/download version apache_1.3.19ftp://ftp.kame.net/pub/kame/misc/download patch for IPv6apache_1.3.19-v6-20010309a.diff.gz
• thttpd (tiny/turbo/throttling HTTP server)(www.acme.com/software/thttpd/thttpd-2.20c.tar.gz)
– Client:• Mozilla• Netscape 6
• FreeBSD 4.3 IPv6• KAME Project (Japan)
– www.kame.net
• KAME IPv6/patched applications– www.kame.net/apps– a much wider set of applications than in Linux
(mozilla, apache, cvs, python, perl, ucd-snmp,…)
• Some applications checked– (ping6, telnet6, ftp6, ssh, rsh,...)
• Used for Dual Stack Transition Method (DSTM)client test
Solaris 8• See www.sun.com/software/solaris/ipv6/
– Dual IPv4 and IPv6 stack– Cannot be configured as an IPv6-only node.– Can be an IPv4-only node or a dual stack
node.– With a dual stack IPv4 applications are
unaffected.– IPv6 is "off" by default.
You must enable it during the installation process.– The IPv6 Socket Scrubber is a tool
developed by Sun to help port applications to IPv6.
Solaris 8 IPv6 applications
• Sendmail • ifconfig • ndd • telenet/in.telnetd • inetd • finger/in.fingerd • tftp/in.tftpd • rcp • rsh • in.rexecd • in.rshd • in.rlogind • rlogin • No Java IPv6 support
• snoop• ping• route• traceroute• netstat• getent• nslookup• Printing• Mconnect• Rdate• rdist• If you install BIND 9.2.0
you can have the newest version of dig and host and nslookup
Microsoft IPv6 for Win2K• Microsoft IPv6 Technology Preview for Win2K
– msdn.microsoft.com/downloads/sdks/platform/tpipv6.asp
• WinXP is already IPv6 capable, no extra downloads• System requirements:
– Win2K Service Pack 1 or 2– Any Ethernet adapter– IPv4 protocol – dual stack implementation
• Available IPv6 enabled tools:– ipv6.exe, ping6.exe, tracert6.exe, ttcp.exe, 6to4cfg.exe– HTTP client (Internet Explorer)– FTP client– Telnet client– Telnet server
• www.isc.org
• BIND 9.2.0 run now on Linux RedHat 7.2 kernel 2.4.9
• Documentation
• For our zone files see:www-ipv6.cern.ch (via IPv4)www.ipv6.cern.ch (via IPv6)
• AAAA versus A6 type of addressesBIND 9.2.0 is capable of handling IPv6 resource records (A6, DNAME, etc.),but available applications use AAAA type of addresses,A6 address type is not yet standardized.
Dual Stack Transition Method• .
NAT-PT.
IPv4 hostIPv4 host IPv6 hostIPv6 hostCisco IPv6
router with
NAT-PT
Cisco IPv6
router with
NAT-PT
IPv4 InternetIPv4 Internet IPv6 InternetIPv6 Internet
IPv4: 192.65.29.253 SA: 3ffe:8120:4000:ee:2a0:c9ff:fe43:95a7DA: 3ffe:8120:4000:bb::898a:1dfdprefix: 3ffe:8120:4000:bb::/96
192.65.28.253 3ffe:8120:4000:bb::898a:1dfd
What next?
• Go native between CERN and Chicago• Connect to 6NET
• IPv6 to the office: real users, security!
• Enhanced operating systems & applications
• DNS issues: integration, data entry
• Transition mechanisms
• Performance
• Get RIPE prefix: /44?