page 1 ipv6 at yale rick beebe. page 2 ipv what? ipv4 = tcp/ip = ip address + protocols...
TRANSCRIPT
Page 1
IPv6 at YaleRick Beebe
Page 2
IPv what?
IPv4 = tcp/ip = IP address + protocols
130.132.35.53
Page 3
Why Do We Need IPv6?
MORE ADDRESSES!
•Depletion of IPv4 addresses• 4 billion possible•1.8 billion mobile communication devices sold in 2008
• IPv4 was never expected to last this long• OSF.1 was going to take over• CIDR and NAT gained us a decade
Page 4
Explosion of New Internet Appliances
Page 5
What Ever Happened to IPv5?
0 IP March 1977 version (deprecated)1 IP January 1978 version (deprecated)2 IP February 1978 version A (deprecated)3 IP February 1978 version B (deprecated)4 IPv4 September 1981 version (current widespread)5 ST Stream Transport (not a new IP, little use)6 IPv6 December 1998 version (formerly SIP, SIPP)7 CATNIP IPng evaluation (TP/IX; deprecated) 8 Pip IPng evaluation (deprecated)9 TUBA IPng evaluation (deprecated)10-15 unassigned
Page 6
What Does IPv6 Offer?
•Fixes many of the shortcomings of IPv4• More efficient routing• More efficient packet processing• Directed data flows• Simplified network configuration• No more NAT• Security built in
and, of course, 128 bits of addresses
Page 7
What were the goals of a new IP design?
• Expectation of a resurgence of “always-on” technologies– xDSL, cable, Ethernet-to-the-home, Cell-phones, etc.
• Expectation of new users with multiple devices.– China, India, etc. as new growth– Consumer appliances as network devices
– (1015 endpoints)• Expectation of millions of new networks.
– Expanded competition and structured delegation.– (1012 sites)
Page 8
How big is 128 bits?
IPv4 is 32 bits: 4,294,967,296 addresses
IPv6 is 128 bits: 340,282,366,920,938,463,463,374,607,431,768,211,456 addresses(Three hundred and forty undecillion, two hundred and eighty-two decillion, three hundred and sixty-six nonillion, nine hundred and twenty octillion, nine hundred and thirty-eight septillion, four hundred and sixty-three sextillion, four hundred and sixty-three quintillion, three hundred and seventy-four quadrillion, six hundred and seven trillion, four hundred and thirty-one billion, seven hundred and sixty-eight million, two hundred and eleven thousand, four hundred and fifty-six.)
The smallest subnet allocation is /64 which contains 4 billion IPv4 networks!
Page 9
What does an address look like?
Eight groups of four hexadecimal digits separated by colons:
2604:b200:85a3:0000:0000:8a2e:0370:7334
• The hexadecimal digits are case-insensitive.• An IPv6 address can be abbreviated with the following rules:
• Omit leading zeroes in a 16-bit value.• Replace one group of consecutive zeroes by a double colon.
Page 10
Compression rules
Fully qualified addressfe80 : 0000 : 0000 : 0000 : 0202 : b3ff : fe1e : 8329
Omit leading zeroes in a 16-bit valuefe80 : 0 : 0 : 0 : 202 : b3ff : fe1e : 8329
Replace one group of consecutive zeroes by a double colonfe80 : : 202 : b3ff : fe1e : 8329
Below are the text representations of these addresses:fe80:0000:0000:0000:0202:b3ff:fe1e:8329fe80:0:0:0:202:b3ff:fe1e:8329fe80::202:b3ff:fe1e:8329
Page 11
Yale IPv6 Address Scheme
2604 : b200
Yale prefix
Page 12
Yale IPv6 Address Scheme
2604 : b200 : 0000
Service/Router• 0000 – infrastructure and p to p• 0001 – Data Center subnets• 0002 – Anger• 0003 – College• 0004 – Envy• 0005 – Lust• 0600 – access.yale.edu (VPN)• 0609 – Med imaging firewalletc
Page 13
Yale IPv6 Address Scheme
2604 : b200 : 0000 : 0000
VLAN ID in hex
Service ID• 0 = data• 1 = voice
Page 14
Yale IPv6 Address Scheme
2604 : b200 : 0000 : 0000 : 0202 : b3ff : fe1e : 8329
Interface address
Page 15
Yale IPv6 Address Scheme
2604 : b200 : 0000 : 0000 : 0202 : b3ff : fe1e : 8329
Easy calculator available at:
http://dno.med.yale.edu/ipv6.php
Page 16
IPv6 - Addressing Model
Link-LocalSite-LocalGlobal
Addresses are assigned to interfaces
change from IPv4 model :
Interface 'expected' to have multiple addresses
Addresses have scope
Link Local
Site Local
Global
Addresses have lifetime
Valid and Preferred lifetime
Page 17
Types of IPv6 Addresses
• Unicast– One address on a single interface– Delivery to single interface
• Multicast– Address of a set of interfaces– Delivery to all interfaces in the set
• Anycast– Address of a set of interfaces– Delivery to a single interface in the set
No broadcast addresses
Page 18
Types of IPv6 Addresses
• Unicast and Anycast: first 3 bits 001• Reserved: first 8 bits 0000 0000 (hex 00)
• Embedded IPv4 addresses in this space• Multicast: first 8 bits 1111 1111 (hex ff)
• Default route: ::/0 (0.0.0.0/0)• Loopback: ::1/128 (127.0.0.1)• Link Local: fe80::/10 (169.254.0.0/16)• Site Local: fc00::/7 (rfc1918)• IPv4: 0:0:0:0:0:FFFF:10.1.68.3 (::FFFF:10.1.68.3)
Page 19
Advantage: Efficient Routing
• Header is larger, but simpler• Routers do not fragment• No checksum• TTL is now Hop Limit• Route aggregation
Page 20
Advantage: Multicast
• No more broadcasts• All-Nodes packet sent to ff02::1•Because Multicast is built-in, configuration is significantly easier than in IPv4
Page 21
Advantage: SLAAC
Stateless Address Autoconfiguraton
• Host sends a router solicitation message• Router sends back router advertisement
• Includes network, netmask and gateway• May remove the need for DHCP servers
• Host generates its own host address• May be NIC address• May be randomly generated for privacy
Page 22
Advantage: Security
• IPSec encryption is built into the protocol although its use is optional
• All implementations required to support authentication and encryption headers (“IPsec”)
• Authentication separate from encryption for usein situations where encryption is prohibited or prohibitively expensive
• Key distribution protocols are under development (independent of IP v4/v6)
• Support for manual key configuration required
Page 23
Where is it at Yale?
• Prefix assigned through ARIN:•2604:b200::/32
•IPv6 enabled through virtually entire infrastructure• www.yale.edu reachable via IPv6:
• 2604:b200:6:65::10• Building 25 4th floor• Computer Science Zoo• Sprague Hall• IPv6 on DNS servers
Participated in World IPv6 Day!
Page 24
Thank you