- ipv6-wg - mailman.ripe.net

IPv6 Security Frequently Asked Questions (FAQ)
by Fernando Gont 08 Mar '19

08 Mar '19

Folks, The Internet Society has posted the "IPv6 Security Frequently Asked Questions (FAQ)" I authored. The document is available (HTML, and also easy-to-print PDF) at: https://www.internetsociety.org/deploy360/ipv6/security/faq/ If you think there are other questions that should be added, or have comments on the answers, please do let me know -- the document can eventually be revised. Thanks! Cheers, -- Fernando Gont SI6 Networks e-mail: fgont(a)si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

1 0

New on RIPE Labs: Deploying IPv6 at IBM
by Mirjam Kuehne 25 Feb '19

25 Feb '19

Dear colleagues, In this article, Andy Mindnich describes how IPv6 was introduced inside IBM’s own network over the past few years. As enterprises in general seem to lag behind in adopting IPv6 as compared to ISPs or carriers, this article is aimed at helping those who still need to build a case within their own company. https://labs.ripe.net/Members/andy_mindnich/deploying-ipv6-at-ibm Kind regards, Mirjam Kühne RIPE NCC

1 0

A common problem with SLAAC in "renumbering" scenarios
by Fernando Gont 31 Jan '19

31 Jan '19

Folks, We have posted a new I-D discussing a problem that can arise in typical deployment scenarios where the CPE obtains a prefix via DHCPv6-PD and advertises a prefix on the LAN side. We also propose a solution to the aforementioned problem. Our draft is available at: https://tools.ietf.org/html/draft-gont-6man-slaac-renum The Abstract is: A very common IPv6 deployment scenario is that in which a CPE employs DHCPv6 Prefix Delegation to obtain an IPv6 prefix, and at least one prefix from within the leased prefix is advertised on a local network via SLAAC. In scenarios where e.g. the CPE crashes and reboots, nodes on the local network continue using outdated prefixes which result in connectivity problems. This document analyzes this problem scenario, and proposes workarounds. Any comments will be welcome. Thanks! Cheers, -- Fernando Gont SI6 Networks e-mail: fgont(a)si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

1 0

IPv6 Working Group presentations for RIPE78
by Jetten Raymond 16 Jan '19

16 Jan '19

Hello All, The RIPE 78 meeting will take place will take place in Reykjavik Iceland from 20-24 May 2019. https://ripe78.ripe.net/ The IPv6 WG session will most likely be on Thursday after lunch. (still subject to change). Would you like to present at our WG session, and have a subject that would be of interest on IPv6? We, the IPv6 WG co-chairs, would like to invite you to submit your presentation proposals, including a brief description of the content and the time you would need. Please send them directly to us: ipv6-wg-chairs at ripe.net<https://lists.ripe.net/mailman/listinfo/ipv6-wg> . Once we start to make the final agenda, we will let you know if you are selected or not. Please be aware of the following: Due to potential technical issues, presenters/panelists should be physically present at the RIPE Meeting. RIPE Meeting attendees are quite sensitive to keeping presentations non-commercial, and product marketing talks are strongly discouraged. All sessions will be recorded and broadcasted, and will be publicly available afterwards, so make sure you own the copyrights of all content. See you in Reykjavik, Jen, Benedikt, Ray

1 0

New on RIPE Labs: Answering IPv6 Misconceptions
by Mirjam Kuehne 21 Dec '18

21 Dec '18

Dear colleagues, Please read these two new RIPE Labs articles by Jen Linkova where she responds to some common IPv6 misconceptions that are used as reasons for not deploying IPv6: https://labs.ripe.net/Members/jen_linkova/ipv6-misconceptions-it2019s-fake-… https://labs.ripe.net/Members/jen_linkova/ipv6-misconceptions-it2019s-fake-… Kind regards, Mirjam Kühne RIPE NCC

1 0

Report from ITU Study Group 20 meeting 3-13 December 2018 in Wuxi, China
by Marco Hogewoning 14 Dec '18

14 Dec '18

Dear colleagues, The meeting of ITU Study Group 20 in Wuxi, China, just finished and I’d like to give you a brief report on the discussions of the work on a draft Recommendation on IPv6 addressing. This meeting was the group's first face-to-face meeting since our discussion of the draft Recommendation at RIPE 77 in May 2018 and the July 2018 draft review deadline. The RIPE community's comments were brought to the meeting as a Liaison Statement. Several other parties also submitted their own Contributions, including the RIPE NCC in its role as an ITU Sector Member. The proposal in our Contribution, with reference to earlier discussions and your review, was to discontinue this particular Work Item. The United States Government and ARIN made Contributions along similar lines, seeking to stop the work developing this particular Recommendation. This position was also supported by the United Kingdom, Canada, Germany and several sector members. I’d like to highlight that both in their Contribution and interventions, the US expressed their gratitude to the RIPE community for their extensive review and feedback on the draft Recommendation. The main author of the draft submitted a Contribution with their account of our discussions at RIPE 77 and the review process, as well as a joint Contribution with the Beijing University for Post and Telecommunications providing a case study of an IPv6 address plan. Having taken all of these contributions and interventions into consideration, the focus of the meeting discussion was on whether or not the work should continue. Unfortunately, the RIPE community’s feedback was only taken into consideration as a high-level conclusion that the current text does not meet the technical standards expected, and the actual text of the draft was not reviewed or revised during this meeting. Unable to reach consensus, the question of whether the work should continue was deferred upwards to the meeting of the Working Party and finally to the closing plenary. During the closing plenary, the Chairman of Study Group 20 proposed continuing the work for at least one more meeting on the premise that the draft’s main author would come back with a Contribution addressing the concerns raised with the current draft. He emphasised that the work item would be dropped unless there were contributions and agreement to advance the text at the next meeting. The RIPE NCC accepted the Chairman’s proposal as a constructive way forward. We look forward to the contributions at the next meeting with the expectation that they will address the concerns raised during your review. We would like to thank you again for the constructive comments raised during the review process. We would also like thank the Question’s rapporteur, associate rapporteur and the Study Group’s management team for all their time and assistance, and of course all the member states and sector members that participated in this discussion. The next meeting of Study Group 20 is scheduled to take place in mid-April, in Geneva, Switzerland. Regards, Marco Hogewoning RIPE NCC

5 7

Re: [ipv6-wg] [cooperation-wg] Fwd: Report on ITU Study Group 20 meeting 3-13 December 2018
by Jim Reid 14 Dec '18

14 Dec '18

> On 14 Dec 2018, at 02:44, Marco Hogewoning <marcoh(a)ripe.net> wrote: > > Please find below a report on the meeting of ITU Study Group 20, that I have just shared with the IPv6 Working Group. Marco, as a fellow traveller on the SG20 bus, I thank you for this summary and all the hard work you did in Wuxi and in the preparations for that meeting. You did an excellent job and were a great ambassador for both RIPE and the NCC. You represented our interests very effectively. I appreciate that and hope everyone else here does too.

2 1

IPv6 transition mechanisms used around the world
by Yannis Nikolopoulos 30 Nov '18

30 Nov '18

Hello all, this probably hasn't been posted here so for everyone's info, there's a google spreadsheet created by IETF's Lee Howard, with information about transition mechanisms used by ISPs around the world. Obviously, anyone can edit and the more people add info, the more meaningful and useful it can become https://docs.google.com/spreadsheets/d/1ksOoWOaRdRyjZnjLSikHf4O5L1OUTNOO_7N… cheers, Yannis

1 0

New on RIPE Labs: IPv6 for Governments and Enterprises
by Mirjam Kuehne 23 Nov '18

23 Nov '18

Dear colleagues, Please find two new articles by Jordi Palet on RIPE Labs: IPv6 for Governments and Enterprises – a Case Study https://labs.ripe.net/Members/jordipaletm/ipv6-for-governments-and-enterpri… and Twelve Steps to Enable IPv6 in Government and Enterprise Networks https://labs.ripe.net/Members/jordipaletm/twelve-steps-to-enable-ipv6-in-go… Kind regards, Mirjam Kühne RIPE NCC

1 0

New on RIPE Labs: 10 Years of IPv6 Stakeout!
by Mirjam Kuehne 13 Nov '18

13 Nov '18

Dear colleagues, Please read on RIPE Labs how Torbjörn Eklöv is encouraging the municipalities in Sweden to deploy IPv6: https://labs.ripe.net/Members/teklov/10-years-of-ipv6-stakeout Kind regards, Mirjam Kühne RIPE NCC

1 0

IPv6 ipsec tunnel server on linux server
by Michael Hock 06 Nov '18

06 Nov '18

Hello, I'm trying to set up an ipsec server on a linux machine. The connection between clients and server should be IPv6 only but also needs to transport IPv4 packets. However, the linux kernel doesn't seem to support a feature which is required to transport IPv4 packets within an IPv6 ipsec connection, as shown here: https://wiki.strongswan.org/issues/939 Does maybe one of you know how to transport IPv4 packets in an IPv6 ipsec connection, or do we need to wait for the linux kernel to support this feature? Because this stops me from switching to IPv6 ipsec connections and I would like to reduce the usage of IPv4 as much as possible ... Sorry if this might be off-topic from the general IPv6 WG topics, but I thank you in advance for your time and answers! Best regards, Michael Hock

4 7

ipv6 francais: If you can read French...
by Jen Linkova 19 Oct '18

19 Oct '18

Very good document about IPv6 adoption in France (thanks Gordon for sharing!): https://www.arcep.fr/cartes-et-donnees/nos-publications-chiffrees/transitio… https://www.arcep.fr/fileadmin/reprise/observatoire/ipv6/Arcep_Barometre_20… -- SY, Jen Linkova aka Furry

2 1

New on RIPE Labs: iSEND: IPv6 SEcure Neighbor Discovery Implementation for Android Devices
by Mirjam Kuehne 16 Oct '18

16 Oct '18

Dear colleagues, Please read this new article on RIPE Labs by Ahmad Alsadeh: iSEND: IPv6 SEcure Neighbor Discovery Implementation for Android Devices With the help of the RIPE NCC Community Projects Fund, the project looks to achieve a solid implementation of iSEND for Android devices, which will help spread and accelerate the deployment of IPv6 in a secure manner. https://labs.ripe.net/Members/ahmad_alsadeh/isend Kind regards, Mirjam Kühne RIPE NCC

1 0

IPv6 WG Agenda (RIPE 77)
by Jetten Raymond 05 Oct '18

05 Oct '18

Hello, The draft agenda for the IPv6 WG session at RIPE 77 has been published, minor changes can still be made: https://ripe77.ripe.net/programme/meeting-plan/ipv6-wg/ Thanks, Ray, Jen and Benedikt

1 0

RIPE76 IPv6 WG meeting minutes
by Jetten Raymond 05 Oct '18

05 Oct '18

Hello , Below the minutes from the last meeting, a warm thank you to Amanda. Please have a look at them, especially if you said something at the microphone, and let us know if any corrections are required. https://www.ripe.net/participate/ripe/wg/ipv6/minutes/ipv6-working-group-mi… Thanks, Ray, Jen and Benedikt.

1 0

New on RIPE Labs: Clusters in the Expanse: Understanding and Unbiasing IPv6 Hitlists
by Mirjam Kuehne 02 Oct '18

02 Oct '18

Dear colleagues, In this new RIPE Labs article, Olive Gasser et. al. analyse IPv6 hitlists to further understand their use in IPv6 measurements and explore techniques to tailor hitlists to your own measurement needs: https://labs.ripe.net/Members/oliver_gasser/clusters-in-the-expanse-underst… Oliver Gasser will be presenting on this topic during IPv6 WG session at the upcoming RIPE 77 meeting in Amsterdam. Kind regards, Mirjam Kühne RIPE NCC

1 0

New on RIPE Labs: Microsoft Making Progress Towards IPv6-only
by Mirjam Kuehne 21 Sep '18

21 Sep '18

Dear colleagues, Following up from an earlier article, Veronika McKillop, network architect at Microsoft, describes how the organisation is making progress towards an IPv6-only network: https://labs.ripe.net/Members/mirjam/microsoft-making-progress-towards-ipv6… Kind regards, Mirjam Kühne RIPE NCC

1 0

IPv6 Working Group presentations for RIPE77
by Jetten Raymond 04 Sep '18

04 Sep '18

Hello All, The RIPE 77 meeting will take place will take place in Amsterdam, the Netherlands from 15-19 October 2018. https://ripe77.ripe.net/ The IPv6 WG session will be either on Wednesday or Thursday (subject to change). Would you like to present at our WG session, and have a subject that would be of interest on IPv6? We, the IPv6 WG co-chairs, would like to invite you to submit your presentation proposals, including a brief description of the content and the time you would need. Please send them directly to us: ipv6-wg-chairs(a)ripe.net . Once we have enjoyed our summer holidays, and we start to make the agenda, we will let you know if you are selected or not. Please be aware of the following: Due to potential technical issues, presenters/panelists should be physically present at the RIPE Meeting. RIPE Meeting attendees are quite sensitive to keeping presentations non-commercial, and product marketing talks are strongly discouraged. All sessions will be recorded and broadcasted, and will be publicly available afterwards, so make sure you own the copyrights of all content. See you in Amsterdam, Jen, Benedikt, Ray For Internal Use Only

1 1

SD-WAN and Dual stack
by christian bretterhofer 31 Aug '18

31 Aug '18

Hello to all, We as enterprise (https://www.andritz.com) have deployed multiple DMZ ( DNS, some websites, soon VPN solutions ) in Dualstack, We converted most of our MPLS lines that they transport Dualstack Our first internal Datacenter is also Dualstack and IPV6 only capable. But now we need to extend some WLAN links and want to utilize SD-WAN offerings. But it seems that there are few solutions that support Dualstack. Cisco IWAN, Citrix Cloud bridge, Riverbed seems to support Dualstack partly What about others? CloudGenix Silverpeak ... Any hints? Some older blog posts i found: https://community.infoblox.com/t5/IPv6-CoE-Blog/Could-SD-WAN-Change-IPv6-Ad… https://community.infoblox.com/t5/IPv6-CoE-Blog/Making-a-New-Product-Make-i… -- --- best regards Christian Bretterhofer Andritz AG

2 1

Compilation of Comments on Y.IPv6RefModel Sent to ITU-T SG20
by Marco Hogewoning 04 Jul '18

04 Jul '18

Dear colleagues, In our role as secretariat to the RIPE community, we committed ourselves to compiling an overview of your evaluation of draft Recommendation Y.IPv6RefModel and sharing this with ITU Study Group 20. In consultation with the Chairs of this working group, we have now produced and submitted this document to the ITU, and this will serve as input to the next meeting of Study Group 20 from 3-13 December 2018 in Wuxi, China. We have also made the document available on our website: https://www-static.ripe.net/docs/2018/20180703-RIPE-Response-ITU-IPv6.pdf The document includes links to the working group discussions and excerpts taken from the email comments and meeting minutes. The RIPE NCC has also strongly encouraged Study Group 20 participants to review all of the feedback received via the working group. As a Sector Member of ITU-T, the RIPE NCC will attend the meeting in China to give further input, based on the community's feedback and comments received during this review process. We would like to thank the Chairs of this working group and all community members who took the time to submit comments. We will keep the RIPE community informed as this process continues within ITU Study Group 20. Regards, Marco Hogewoning Senior External Relations Officer RIPE NCC

1 0

New on RIPE Labs: A Large-scale lw4o6 Deployment for Broadband Users in Greece
by Mirjam Kuehne 04 Jul '18

04 Jul '18

Dear colleagues, Please read this interesting new article by Kostas Zorbadelos in which he describes a large-scale Lightweight 4over6 deployment for broadband users in Greece: https://labs.ripe.net/Members/kzorba/a-large-scale-lw4o6-deployment-for-bro… Kind regards, Mirjam Kühne RIPE NCC

1 0

New on RIPE Labs: Lightweight 4over6: One-step Further Than Dual-stack Networks
by Mirjam Kuehne 28 Jun '18

28 Jun '18

Dear colleagues, Please read this new RIPE Labs article by Diego Pino Garcia, one of the RACI fellows from RIPE 76. Diego describes lw4o6 (RFC 7596) and introduces Snabb, a toolkit that eases the development of high-performance network functions: https://labs.ripe.net/Members/diego_pino_garcia/lw4o6-one-step-further-than… Kind regards, Mirjm Kühne RIPE NCC

1 0

New on RIPE Labs: Spam Over IPv6 - Eight Years Later
by Mirjam Kuehne 18 Jun '18

18 Jun '18

Dear colleagues, A long time ago we published an article on the amount of spam we receive over IPv6. Now, eight years later, we were curious to see if the spam landscape has changed: https://labs.ripe.net/Members/ivodijkhuis/spam-over-ipv6-8-years-later Kind regards, Mirjam Kühne RIPE NCC

1 0

Invitation to supply feedback on ITU draft Recommendation on IPv6 address planning for IoT
by Jetten Raymond 15 Jun '18

15 Jun '18

Dear colleagues, RIPE 76 is coming closer and as you may have seen on the agenda, the date of the IPv6 WG has changed from Wednesday to Thursday. The reason for the date change you can read below and in the subject. If you want to present or have a topic that would be of great interest to the IPv6wg, send your presentation or explain the contents to ipv6-wg-chairs(a)ripe.net<mailto:ipv6-wg-chairs@ripe.net> and mention also how much time you would need. The session which will be on Thursday 17 may 2018, in Palais du Pharo, Marseille, France. Now back to the subject: During RIPE 74, Marco Hogewoning of the RIPE NCC, presented about ongoing work in ITU Study Group 20, which includes development of a Recommendation on an IPv6 address plan for IoT networks. In his presentation he also mentioned a Liaison Statement send by the ITU asking the RIPE NCC for feedback, to which they suggested that this work would be done in a more appropriate venue such as the RIPE community or at least that such a document would be developed in close coordination with the operational community. We, the chairs, have been following this discussion and after talking to RIPE NCC and some community members, we have understood that there has not been any operational feedback on this particular draft and ITU is still seeking input, for instance also by sending a Liaison Statement to IETF. In response to all this, we have decided to invite a representative of ITU, to join us in Marseille for RIPE 76 and present this work to us, for the purpose of collecting and incorporating feedback from IPv6 experts and network operators on their draft recommendation. We are happy to announce that ITU Study Group 20 has responded positively to our offer and have decided to share the current working draft with us, for the purpose of review and for RIPE community to provide feedback. As it is quite big, the text of this draft Recommendation Y.IPv6RefModel "Reference model of IPv6 subnet addressing plan for Internet of things deployment" has been made available on the IPv6 WG pages: https://www.ripe.net/participate/ripe/wg/ipv6/documents/itu-ipv6refmodel We kindly invite you to provide feedback and comments on the contents of this document via this mailing list or of course the RIPE Forum web interface. The RIPE NCC has agreed to ensure that the comments will be collected and made available to the ITU via response to the Liaison Statement below. We of course also hope to discuss the feedback with the editor of the document during our second session at RIPE 76. Regards, Benedikt, Jen, Raymond Liaison Statement we received from ITU Study Group 20 in response to our invite: > ITU-T Study Group 20 Q3/20 thanks the RIPE NCC for their contribution that contained the invitation from the RIPE IPv6 Working Group. We thank the RIPE IPv6 Working Group for the invitation to present Draft Recommendation ITU-T Y.IPv6RefModel at the May 2018 RIPE meeting for the purpose of obtaining operational feedback and input. We are delighted to recognize the invitation from RIPE and confirm it is the intention of the editor of the Draft Recommendation ITU-T Y.IPv6RefModel to participate in the RIPE meeting in May 2018. > > Attached is a copy of the draft Recommendation. We look forward to the feedback and comments from the RIPE community. For Internal Use Only

8 8

New on RIPE Labs: IPv6 Adoption Statistics: How do APNIC and Facebook Compare?
by Mirjam Kuehne 13 Jun '18

13 Jun '18

Dear colleagues, Both APNIC and Facebook publish statistics on IPv6 adoption per country. Next to the visualisations, these organisations also provide the numerical data. We take a look at these to see how the two methodologies compare. Please read on RIPE Labs: IPv6 Adoption Statistics: How do APNIC and Facebook Compare? https://labs.ripe.net/Members/wilhelm/ipv6-adoption-statistics-how-do-apnic… Kind regards, Mirjam Kühne RIPE NCC

1 0