Network Administration IP Addresses
Total Page:16
File Type:pdf, Size:1020Kb
Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Outline Introduction Network Administration IP addresses Toward IPv6 Grégory Mounié Host name SCCI - Master-2 Routing <2013-09-17 mar.> Services Integration between different OS 1 / 75 2 / 75 Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Challenge Introduction IP addresses For people with sufficient background: Toward IPv6 easy Chat on google talk (or facebook) with XMPP on wifi-campus/eduroam of the campus Host name hard Surf on ipv6.google.com on wifi-campus/eduroam of the campus Routing Services Integration between different OS 3 / 75 3 / 75 Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Networks Networks of networks Definition (network) group of interconnected machines Definition (Internet) • network of networks • based on TCP (Transmission Control Protocol) and IP (Internet Protocol) protocols Figure : Interconnection of networks 4 / 75 5 / 75 Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS TCP/IP IP address • unique number identifying a Network interface • eg. IPv6: 2a00:1450:4009:804::1007; Internet Protocol • IPv4: 74.125.230.130 • identifies network interfaces • eg. IPv6: fe80::2677:3ff:fe2e:22c0/64; • handles routing • IPv4: 192.168.0.1 • eg. IPv6: ; • fragmentation of data into packets ::1 • IPv4: 127.0.0.1 Transmission Control Protocol Two parts in a single number • transmissions in connected mode • fixed size number • error corrections, packets arriving in order • parts of variable length • beginning part : network ID • ending part : host ID 6 / 75 7 / 75 Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS IP address notation Network IPv4 classes 3 classes of networks : the problem of the 3 bears IPv6 16 bytes, 128 bits, hexadecimal notation class A • few networks • lots of hosts • aaaa:bbbb:cccc:dddd:eeee:ffff:gggg:hhhh • NNN.mmm.mmm.mmm • :: replace a single 0 sequence class B • not enough of middle size networks IPv4 4 bytes, 32 bits, decimal notation • NNN.NNN.mmm.mmm • aaa.bbb.ccc.ddd class C • lots of networks • few hosts • NNN.NNN.NNN.mmm 8 / 75 9 / 75 Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Network mask Special IPv6 addresses • flexible network/machine ID size Which bits are used for network ID and which bits are used for host ID ? • 0:0:0:0:0:0:0:0, :: : host not specified • notation: =ip address=/X ; the X first bits are the network • FE80::/10 (truly /64) : link-local address (autoconf) address • FEC0::/10 : site-local address, non routed on Internet • IPv4 address mask denoted 255.255.255.0 • FF00::/8 : address multicast (0b1111111111111111111111100000000) • ::1/128 : loopback Various masks • ::FFFF:(IPv4 address) : double stack for IPv4 mapping • ::(IPv4 address) : IPv4 compatibility address • fe80::2677:3ff:fe2e:22c0/64 : 64 bits network ID • 255.255.255.0 : mask for IPv4 class C network • 255.0.0.0 : mask for IPv4 class A network • 255.128.0.0 : IPv4 mask: 9 bits for network, 23 bits for hosts 10 / 75 11 / 75 Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Special IPv4 addresses Basic configuration • 0.0.0.0 : this host, or default • 0.host : un host of the local network • ifconfig command • 255.255.255.255 : local broadcast • ifconfig -a : list all available interfaces • PrefixNet.[1]+ : local broadcast • ip command • PrefixNet.PrefixSubnet.[1]+ : idem • ip link; ip addr • 127.x.x.x : loopback ifconfig eth0 add 2a00:1450:4007:803::1017/64 • 10/8, 172.16/12, 192.168/16 : private network ifconfig eth0 192.168.0.1 netmask 255.255.255.0 up • 169.254.x.y : zeroconf (bonjour) autoconf (for local usage only) 12 / 75 13 / 75 Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS From IPv4 to IPv6 IPv4 is a zombie IPv4 was dead long time ago ! • In 1993, IPv4 become classless : remaining C networks were • IPv4 name adress space is too small. grouped in (21 bits, 2048 hosts) networks and distributed • Transition path was planned with the IPv6 standard (RFC geographically : 2460, 1998): • Europe : 194-195.x.x.x • Dual stack public IP address during the transition • America : 198-199.x.x.x • Asia : 202-203.x.x.x Planned transition failure Large usage of private networks (NAT) • Nobody has done the transition. • All plan used double stack strategies. • Major architecture change. • No public IPv4 address anymore (IANA: 3 fev 2011 !) ! • One-way Internet connection for personal use: 1 public IP address per your DSL box (your CPE: customer premises equipment) • New services and protocols become undeployable ! 14 / 75 • Mobile phone routing (how to route efficiently multiple private 15 / 75 network ?) Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS IPv4 is a zombie II IPv4 is a zombi III Early adopters have a lot of remaining addresses NAT Zoo • people with competences have plenty of IPv4 adresses: • NAT44 : your home, your phone network • eg: recent wifi-campus and eduroam give one IPv4 address • NAT 444 : asia and africa : not a single public IP anymore ! per connected student • NAT 64 : early adopters • people without enough IPv4 address have not the competence • NAT 66 : NAT lovers to manage IPv6 network • NAT 464 ou 646 ?? 16 / 75 17 / 75 Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Is IPv6 ready ? IPv6 Transition Big software are ready. (Chicken and eggs problem for small software) 5 main strategies: http://www.google.com/ipv6/statistics.html 1. full dual stack: not for everybody • 2% of google access (France 5%, Germany 4.5 %, Romania 2. tunnel: IPv6 over IPv4 to connect IPv6 islands 7.5%) • trouble with MTU 3. 6rd : CPE (your box) encapsulate IPv6 to the boundaries of http://6lab.cisco.com/stats/ the FAI • Free • France: 48% of prefix; 71.4% Transit AS; 50% Content; 5% 4. DS-Lite: the opposite of 6rd: encapsulate IPv4 packets in a users; IPv6 FAI network to the boundaries of the FAI. Grenoble academic science 5. NAT64: to connect to the remaining Internet from IPv6 only computer • IPv6 address space mapping of Grenoble universities and • very useful without IPv4 address (Mobile carrier soon ?) laboratories exists since 2001 • working at the main routers level • not deployed yet to end-user save exception 18 / 75 19 / 75 Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Host names URL • Uniform Resource Locator • needed for human readable names • IP address may change ) name does not change • association between names and addresses • several names can be associated to the same address • several address can be associated to the same name Host name versus authentication A host name and its associated IP, are not sufficient as authentication ! 20 / 75 21 / 75 Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Domain name Address resolving Domain Name System (DNS) • hierarchy • subdomains : en.wikipedia.org different mechanisms • recursive address resolution • configuration in /etc/nsswitch.conf • heavy use of caching • DNS servers IP : /etc/resolv.conf • slow propagation of changes (up to several days) • different addresses may be seen for a name if requests originate • /etc/hosts : list of known hosts from different places • may be the cause of process stall Host name versus authentication A host name and its associated IP, are not sufficient as authentication ! 22 / 75 23 / 75 Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS Introduction IP addresses Toward IPv6 Host name Routing Services Integration between different OS DNSSEC Private Network is not a protection • private IP ) no direct connection from Internet • still indirect connection are possible Browser + DNS attack • No security in the original design ) forged address by 1. Browsers download web pages including javascript code man-in-the-middle attack 2. Javascript code can connect only with the server • Digitally sign the record with public key cryptography and a 3. the server IP is given by the DNS of the server chain of trust (subdomain key is recursively authenticated