April 2010 - ipv6-wg - mailman.ripe.net

List of IPv6 measurements published on RIPE Labs
by Mirjam Kuehne 22 Jun '10

22 Jun '10

[I am sorry if you receive this more than once.] Dear colleagues, Please see two articles related to IPv6 Measurements recently published on RIPE Labs: 1. A list of IPv6 measurements various people and organisations are doing with a short description and pointers to the actual results of the measurements http://labs.ripe.net/content/ipv6-measurement-compilation 2. An interview with Alain Durand about the IPv6 measurements he is doing at Comcast together with the University of Pennsylvania http://labs.ripe.net/content/ipv6-monitor We would like to get feedback from you about the measurements presented. How would you chose to measure the growing deployment of IPv6? Have you set criteria for when you will deploy IPv6? Let us know what information and analysis would be helpful to assist you in the deployment of IPv6. And would measurements influence your decision to deploy IPv6 or not? Please go to the forum at http://labs.ripe.net/node/ipv6-measurements or contact me directly at labs(a)ripe.net. Kind Regards, Mirjam Kuehne RIPE NCC

1 1

Announcement: RIPE NCC Training Courses
by Training 03 Jun '10

03 Jun '10

[Apologies for duplicate e-mails] Dear Colleagues, The RIPE NCC invites you to register for one of our upcoming training courses: - The LIR Training Course This course teaches LIRs how to request Internet number resources and interact with the RIPE NCC. A course outline is available at: http://www.ripe.net/training/lir/outline.html - The Routing Registry Training Course This course teaches LIRs how to use the RIPE Database for routing. A course outline is available at: http://www.ripe.net/training/rr/outline.html - The IPv6 Training Course This course teaches LIRs about the need for IPv6 and includes basic information on how to plan your deployment. A course outline is available at: http://www.ripe.net/training/ipv6/outline.html To see the location of upcoming courses and to register, please use the LIR Portal or complete the registration form on our website at: RIPE NCC Upcoming Courses List & Registration https://lirportal.ripe.net/lirportal/training/course-list.html If you have any questions, please do not hesitate to contact us at <training(a)ripe.net>. Kind regards, Rumy Kanis Training Services Manager RIPE NCC

1 1

"IPv6 Ripeness" measurements on RIPE Labs
by Mirjam Kuehne 02 Jun '10

02 Jun '10

Dear colleagues, We looked at the "IPv6 ripeness" of all LIRs in the RIPE NCC service region. This was initially created to adjust our IPv6 training course depending on the country we are in. However, we felt this might also be valuable in a bigger context. Please find the results and methodology on RIPE Labs: http://labs.ripe.net/content/ipv6-ripeness We would be interested to hear what you think about this idea in general and if you have any suggestions on how to modify or improve this. Kind Regards, Mirjam Kühne RIPE NCC

13 28

Agenda for IPv6-wg @ RIPE 60 (v1)
by Shane Kerr 28 Apr '10

28 Apr '10

Hello, The IPv6 working group is scheduled for the same time at RIPE 60 in Prague as it was in RIPE 59 - immediately following the plenary on Tuesday. Here is a proposed agenda: A. Administrative stuff - Introduction - New charter - New chairs - Agenda bashing B. Javascript-based HTTP client measurements by Emile Aben C. IETF v6ops activity by Kurt Lindqvist D. CPE Overview by Marco Hogewoning E. IPv6 global policy review by Filiz Yilmaz F. IPv6-wg brainstorming . . . Y. Input for the RIPE NCC Activity Plan Z. AOB & wrap-up The "brainstorming" session is an attempt to have some discussion about concrete ideas that we can use to reach the goals of the new charter. Marco will lead the session, but hopefully everyone will come with new ideas ready and join in. -- Shane

4 4

IPv6 client loss measurements, now on the web
by Tore Anderson 28 Apr '10

28 Apr '10

Hi list, I've finally gotten around to creating a web page dedicated to the measurements I've posted about here earlier. You'll find it at <http://fud.no/ipv6/>. It will be automatically updated every night, and it even has graphs. I think it'll be a much better home for the information than an IPv6 mailing list archive, so this means I won't be posting monthly reports any longer. Feel free to have a look! Any feedback is of course very welcome. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54 41 27

1 0

Agenda for IPv6-wg @ RIPE 60 (v2)
by Shane Kerr 27 Apr '10

27 Apr '10

All, An updated version of the agenda. ------------------------------------------------------------------- The IPv6 working group is scheduled for the same time at RIPE 60 in Prague as it was in RIPE 59 - immediately following the plenary on Tuesday. Here is a proposed agenda: A. Administrative stuff - Introduction - New charter - New chairs - Agenda bashing B. IPv6 at Web Clients and Caching Resolvers by Emile Aben, RIPE NCC C. IETF v6ops activity by Kurt Lindqvist, Netnod D. CPE Overview by Marco Hogewoning, XS4ALL E. IPv6 WorldWide Policy Review by Filiz Yilmaz, RIPE NCC F. Mobile broadband and IPv6 in Slovenia by Jan Zorz, go6.si G. Update on Recent RIPE NCC IPv6 Activity by Christ Buckridge, RIPE NCC H. IPv6-wg brainstorming . . . Y. Input for the RIPE NCC Activity Plan Z. AOB & wrap-up The "brainstorming" session is an attempt to have some discussion about concrete ideas that we can use to reach the goals of the new charter. Marco will lead the session, but hopefully everyone will come with new ideas ready and join in. -- Shane

1 0

Major additions to Team Cymru's Bogon Feed - includes IPv6 prefixes
by Steve Santorelli 19 Apr '10

19 Apr '10

Team Cymru is pleased to announce a significant addition to our bogon reference project which might be of interest to this list as it relates to IPv6 matters. The new portions of the project are offered at no cost to the community, and the original bogon lists and feeds are not being changed or canceled, just augmented. The new "fullbogon" feed includes prefixes allocated to RIRs, but not assigned by the RIRs to end-users, ISPs, etc, providing a more complete view of the unassigned space that should not be seen on the Internet. This new service is therefore more granular than the original feed, including a wide variety of non-routable prefixes as well as unassigned prefixes and it also includes IPv6 prefixes. Simply email bogonrs(a)cymru.com with your ASN, peering IP addresses and whether you use MD5 authentication. See an overview in the 46th episode of Team Cymru's 'The Who and Why Show' at www.youtube.com/teamcymru, as well as a more basic overview in episode 12. For a more detailed explanation, see <http://www.team-cymru.org/Services/Bogons/>. Even more so than the original feed, there are significant changes to the list every day and the feed automatically recalculates the prefixes as they are allocated from the regional registries, so make sure you are able to regularly update your lists. Internet security is all about "the other guy." If one sizeable network is insecure, it WILL be used to abuse other networks. We look forward to continuing to help our community to secure the edge. Why is this important? Bogons are defined as Martians (private and reserved addresses defined by RFC 1918 and RFC 5735) and netblocks that have not been allocated to a regional internet registry (RIR) by the Internet Assigned Numbers Authority. A bogon prefix is a route that should never appear in the Internet routing table on a Router. A packet routed over the public Internet (obviously, not including over VPNs or other tunnels) should never have a source address in a bogon range. These are commonly found as the source addresses of DDoS attacks and our research has previously shown that, in some cases, up to 60% of DDoS packets were obvious bogons (e.g. 127.1.2.3, 0.5.4.3, etc.). This new service comprises a larger set which also includes IP space that has been allocated to an RIR, but not by that RIR to an actual ISP or other end-user. While not all DDoS attacks use bogons, every little bit helps. Note additionally that bogon filtering is a component of anti-spoofing filtering, which is also very important. Internet security is all about "the other guy." If one sizeable network is insecure, it WILL be used to abuse other networks. We look forward to continuing to help our community to secure the edge. warm regards, Steve. -- Steve Santorelli,Team Cymru, Inc.|www.team-cymru.org steve(a)cymru.com|[moderated] Also, please note that there are many way to keep up with what Team Cymru are doing, see the lower part of: http://www.team-cymru.org/About/contact.html plus: * join our announce list via cymru-announce-subscribe(a)cymru.com * see what we see, www.team-cymru.org/Monitoring/Graphs * probably the best news feed in the world, www.team-cymru.org/News * cool stuff you can use, www.team-cymru.org/Services/ * see our Twitter feed at http://twitter.com/teamcymru

1 0

The end of IPv4 and the arrival of IPv6 in spanish newspaper
by García Fernández, Fernando 10 Apr '10

10 Apr '10

It seems that it's finally getting to the mass media. A spanish newspaper (Publico, one of the top ten if you can say clasify them), publish an article called "Internet runs out of address" with the subtitle "The OCDE tells that we must speed up the deployment of the new protocol IPv6". I think this is a good start. For those who understand spanish (or who dare to believe to Google translation) here is the URL: http://www.publico.es/ciencias/305214/internet/quedasin/direcciones Regards, Fernando -- Tecnocom Fernando García Fernández D.G. Integración de Redes y Sistemas Josefa Valcarcel, 26 Edificio Merrimack III Madrid - 28027 Tel. Fijo: 901900900 ext 40383 Fax: (+34) 914313240 Tel. Móvil: (+34) 649428591 E-mail: fernando.garcia(a)tecnocom.es http://www.tecnocom.es

1 0

Question on Challenges of IPv6 deployment
by Edu Abume 05 Apr '10

05 Apr '10

Hi, This site has been very educative and helpful to me. Can anyone tell me: The challenges organizations face with IPv6 deployment, The organizational settings (types) that really needs to deploy quickly and Probably the deployment methodologies they prefer to use. Thanks. Edu

1 0

IPv6 brokenness in Norway, March 2010 (fwd)
by Tore Anderson 01 Apr '10

01 Apr '10

Hi, I've been posting these reports to the ipv6-ops list for some time now. Shane Kerr asked if I could post them here too, something which I don't mind doing at all, so here comes the one for March: -------- Opprinnelig melding -------- Emne: IPv6 brokenness in Norway, March 2010 Dato: Thu, 01 Apr 2010 01:35:01 +0200 Fra: Tore Anderson <tore.anderson(a)redpill-linpro.com> Organisasjon: Redpill Linpro AS Til: ipv6-ops(a)lists.cluenet.de Hi list, I'm happy to announce that the client loss is at an all-time low: 0.074% over the whole month, and it's been steadily decreasing. Buggy versions of Opera as well as Mac OS X appears to be responsible for about 95% of all measured client loss. Some noteworthy dates and events: 20100302: Opera 10.50 released, using getaddrinfo() on Windows. Gets an initial boost thanks to the Microsoft browser ballot. 20100322: Opera pushes 10.51 to their auto-update function. 20100324: A-Pressen Interaktiv re-joins the experiment. 20100327: First day of (extended) Easter holiday for many Norwegians. 20100331: The Gathering, a large data-party, kicks off. Provides native IPv6 connectivity to all participants. The numbers show that the release of Opera has helped quite a lot. Before the release of 10.50, the overall client loss was above 0.090%, but already right before Easter holiday it's below 0.065%. Easter holiday shows an interesting effect - both the measured amount of native IPv6 _and_ client loss drop sharply. The reason for this is that there's one particular network here in Norway that is the by far largest deployment of native IPv6 (about 80-85% of all requests over native IPv6 comes from it), but it is at the same time one of the largest causes of client loss, because it aggravates the Mac OS X/Opera problems significantly by filtering 6to4 traffic on ingress for a large number of end users (that have no native IPv6 service). The typical user on this network is also much more likely to take an extended Easter holiday than the the rest of Norway's population, I believe. I've been measuring the uptake of Opera 10.50+ on Windows Vista/7 in the whole period, and it has been steadily increasing even during the extended Easter holiday. About 72.5% of the Win Vista/7 Opera users were using 10.50+ at the end of the month. So while I do expect the client loss number to rebound somewhat when Easter holiday is over (on the 6th of April), I will be very surprised if it stabilises higher than 0.06-0.07%. The Mac OS X problem appears to occur when a client station has internet service using NAT/RFC 1918 numbering for IPv4, and 6to4 for IPv6. The Apple Airport Extreme SOHO router can operate in this way, and did so by default up until recently. In this case, OS X, or more precisely its getaddinfo() implementation, will prioritise 6to4 over IPv4. In addition, GNU libc (therefore all major Linux distributions) behave in the same way, but I'm not able to measure any impact, probably because there's so few Linux users to begin with. The issue is not actually a bug, but a shortcoming of RFC 3484. I've elaborated on it in reports to Apple and the glibc developers here: http://lists.apple.com/archives/Ipv6-dev/2010/Mar/msg00003.html http://sourceware.org/bugzilla/show_bug.cgi?id=11438 As an aside it's a bit fun to see how a relatively small deployment of IPv6 eyeballs like the data party (around 5000 participants I think) can dramatically change the amount of hits coming in from hosts with native IPv6. It more than doubled overnight. There's two reports attached, one generated from the readers of VG Multimedia - the online edition of Norways largest newspaper, and also Norway's largest web site, and the other from the readers of A-Pressen Interaktiv - an umbrella organisation that publishes the online editions of about 70 regional newspapers. When put together, they constitute Norway's fourth largest web site. In addition to the overall calculation, I've done five other calculations so you can see the individual impact of the different problems I've identified: - One that excludes hits from buggy versions of Opera on Windows Vista/7 (which auto-configures 6to4 and Teredo by default) excluded, - one that excludes hits from buggy versions of Opera on other versions of Windows (where a user must explicitly enable 6to4/Teredo), - one that excludes all hits from Mac OS X, - one that excludes all of the above, and - one that excludes all hits from the two significant end-user networks in Norway that filter 6to4 ingress traffic (one of them is the one I discussed above). This calculation does _not_ exclude Opera/OS X; when Opera and OS X are excluded, the two networks have about the same levels of client loss as rest of the internet. The seventh column shows approximately how much of the total client loss would have been avoided (in percentage points and percent), if the software in question didn't prefer 6to4 over IPv4, or, in the last case, if the two end-user networks mentioned didn't filter 6to4 on ingress. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54 41 27

1 0