State of the IPv6 adoption (and when can we turn off IPv4?) Ole Trøan @ NORDUnet 2012 NOSTG 2012-09-19 © 20122010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1 IPv6 DNS <AAAA, A> IPv4 CGN Considerations : Transparency to application, Innovation, Scale, Security, Cost • IANA, APNIC, and RIPE has run out • After inventing Automatic Tunnels, 6over4, 6to4, ISATAP, Teredo, SIIT, NAT-PT we found ‘one’ transition mechanism that stuck – 6rd, (and “reinvented” NAT-PT). • Then “moved on”: CGNs, DS-lite, A+P, Public 4over6, Lightweight 4over6, dIVI, dIVI-PD, 4rd-{u,h}, MAP-{E,T}, 464XLAT Is this preparing for turning off IPv4? Or is it head in the sand, IPv4 life extensions? • Implementations: Maturing but still feature gaps • Deployment: Millions © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3 © 2012 Cisco and/or its affiliates. All rights reserved. 5 Do I pay less ? NAT’s are good. Where is the Any new RFC1918 gives me network? Where is the content? applications? security, and IPv4 Too much pain & address runout is no gain my ISP’s problem. Device User Enterprise ISP The network is not ready, Content users don’t care and I don’t want to risk a poor end- user experience today for potential gains tomorrow “A deadlock, stalemate, impasse; a roughly equal (frequently unsatisfactory) outcome to a conflict in which there is no clear © 2010 Cisco and/or its affiliates. All rights reserved. winner or loser,” Cisco Confidential 6 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8 • While NORDUnet itself and the core networks are IPv6 enabled, IPv6 to the end users is very patchy • Aren’t you about the pursuit of research, education and scholarship • While you might not be behind, you are not leading… • The network is a platform for enabling others. For letting others innovate. Enable IPv6 and allow for an end to end network © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9 Make my Get an IPv6 Advertise content prefix from a this prefix on reachable RIR the network on IPv6 ISPs provide IPv6 Svce + IPv6 end-points Planning Network Content Users Traffic http://6lab.cisco.com/stats/ http://blogs.cisco.com/news/two-months-after-world-ipv6-launch-measuring-ipv6-adoption-6lab-cisco-comstats/ © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10 IPv6 Transit AS IPv6 Enabled AS http://6lab.cisco.com/stats/ © 2012 Cisco and/or its affiliates. All rights reserved. 11 http://6lab.cisco.com/stats/ © 2012 Cisco and/or its affiliates. All rights reserved. 12 91 of Top500 WEB sites globally, + ~2500 smaller sites • IPv6 Testing (3.2%) Each site that is IPv6 enabled (tested) is represented proportionally to its % of global internet pages viewed (per www.alexa.com ranking) http://6lab.cisco.com/stats/ © 2012 Cisco and/or its affiliates. All rights reserved. 13 http://6lab.cisco.com/stats/ © 2012 Cisco and/or its affiliates. All rights reserved. 14 1 % Globally http://6lab.cisco.com/stats/ © 2012 Cisco and/or its affiliates. All rights reserved. 15 Introducing Cisco The Global Cisco Family . 300 locations in 90 countries . 450+ buildings . 51 data centers and server rooms . 1500+ labs world wide (500+ in San Jose) Engineering, Sales, Services, TAC, IT and Execs . 66,000+ Employees 20,000 Channel Partners . 110+ Application Over 180,000 people around the Service Providers . 210+ Business and Support Developmentworld in the extended Cisco Partners family Estimated Numbers Presentation_I D © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public Cisco IT “Stack” Cisco.com Internal Apps (CEC, and DMZ ASP Integration IWE, etc.) Apps (Salesforce.com) Application Environments (IP Protection, Protection, (IP Middleware Security Inspection & Monitoring Databases (Oracle, MY Roll-Out Releases & Planning Application Servers Web Servers (Messaging, Web SQL, MS SQL) & Operations Training Staff (Weblogic/ Liferay) (Apache, IIS) Services Middleware and Databases Gateway) NIDS Client VOIP, , Mobility, NetFlow Access Collaboration Sensors & DC (Compute, Email Printers (PCs) Devices & Controllers Storage, VDI) Gateways , Infrastructure Devices WSA Load Balancing , Security Optimization WAF DNS & & Content VPN (Firewall & (WAAS, SSL DHCP Content Distribution Access , Pen testing) , Pen IDS/IPS) Acceleration) Switching Network-embedded Services IP Services (QoS, Multicast, Mobility, Translation) Hardware IP Routing Connectivity Instrumentation Support Addressing Protocols Basic Network Infrastructure Presentation_I D © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public Making the Case for IPv6 Business Drivers Leadership and Product Readiness Mindshare IT Drivers Product Continuity and development and Cisco on Cisco Growth testing Goals IPv6 Internet Ubiquitous IPv6 Presence Access Constraints Maintain IPv4 SLA Funding and Product and and Security Resourcing Service Gaps Posture Presentation_I D © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public IPv6 Scope Pervasive adoption of IPv6 and co-existence with IPv4 Network Endpoints Applications and Services Presentation_I D © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public IPv6 Target State IPv6 Internet Presence • Internet Evolution • Business Continuity • Customers, partners, employees IPv6 Internet Ubiquitous IPv6 Access • Globalization • Technology Leadership • Product Development Dual-Stack Enterprise Presentation_I D © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public The IPv6 Journey – A High Level View IPv4-only IPv4 and IPv6 co-exist IPv6-only 2002-2009 2010 2011 2012 2013 2014 IPv6 Internet Presence (Outside-In) www.ipv6.cisco.co www.cisco.com Entire cisco.com platform m accessible over accessible over IPv6 IPv6 Ubiquitous IPv6 User Access (Inside-Out) On-demand tunnel services Dual stack global Dual stack Dual stack Dual stack Dual stack “alpha” networks core user access user access internal DC and (pilot) (prod) apps Presentation_I D © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public The IPv6 Journey – Low Level View Lab Deployment Short Term Plan Long Term Plan • 6 Bone • Regional tunnel head- • Formal IT-wide IPv6 • ARIN Address ends Program www.cisco.c Allocation • Anycast ISATAP • Network om • Tunnel overlay Service • Security • Single Tunnel Head- • Training • Endpoints end • SLA/Formal Support • Applications / Services • 6in4 for Labs, Internet • Dual Stack ISP • ISATAP for desktops connectivity IPv6 Lifecycle • No SLA – Best Effort • www.ipv6.cisco.com • IPv4 Address Deployment Conservation everywhere 2003 2005-2009 2010/2011 June 2011 Mar 2012 June 2012 2012 On Alpha IPv6 IPv6 Planning www.cisco.c Dual Stack Roll-outs • Non-Production • Business/Technical Drivers om • Global Backbone test networks • Use Cases • Internet edge/DMZ • 2 Buildings and 1 • Risk Assessment • Data center DC • Resourcing • User access, • DNS – AAAA DHCPv6 • Address • Remote Access Management • Network Management Presentation_I D © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public Current Implementation Strategy . Dual Stack where we can, tunnel where we can’t . Have a quick and scalable solution in hand to relieve delivery pressure . Absorb cost in established upgrade process rather than rip and replace . Rip and replace only where necessary (Fast track projects) . Develop a short term (relief) plan and a long term (absorbed) plan . Management via IPv4 with IPv6 Service Monitoring . Ongoing training and exposure for networking team Presentation_I D © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public .