- ipv6-wg - mailman.ripe.net

IP Analyser IPv6 functionality
by Alex Band 05 Nov '12

05 Nov '12

A few weeks ago the RIPE NCC introduced the production release of the IP Analyser; an LIR Portal tool to help you manage and analyse your allocations, assignments, free space and invalids: https://lirportal.ripe.net/ipanalyser/ (requires member login) Currently it only provides IPv4 functionality and we are in the process of gathering IPv6 feature requirements so we can plan a roadmap for the beginning of 2013. This is why I would like to know what kind of functionally you would like the IP Analyser to provide. I'm looking for input for invalid or incorrect DB assignments, and tools to make your IP address management easier. As warnings, the application could for example display all RIPE DB objects which have an incorrect prefix length; a sanity checker basically. So if you created an inetnum or route object with prefix "2001:0DB8:0401::/40", the application would tell you that you probably meant to create "2001:0DB8:0400::/40". For tools, the IP Analyser currently suggests prefixes out of your free IPv4 allocations for assignments, but this is not very useful in IPv6 (i.e. please suggest me a free /48 out of my /32). You would probably benefit more from a subnet calculator, an address notation validator or something else entirely. I'm looking forward to your input. Cheers, Alex Band Product Manager RIPE NCC

1 0

Re: [ipv6-wg] route6: 2A00::/12
by Antonio Prado 01 Nov '12

01 Nov '12

[cross-posted to ipv6-wg(a)ripe.net] Il 20/10/12 21:58, Manish Karir ha scritto: > > Hi Antonio, > > Yes. Merit is in the process of running a large IPv6 darknet experiment. Our goal is to announce every allocated /12 (1 from each RIR) first sequentially and then together. We conducted a 1hr test announcement on wed and to the best of knowledge we did not break anything. > These announcements will each last 1 week each starting Nov 1. > Your more specific announcements in BGP should still get all your data correctly routed to you. However if you have noticed any strange behavior please let us know. > > Thanks. > -manish Manish, thanks for your kind reply. Maybe I missed some announcement e-mail here. Is there any document to read about that "large IPv6 darknet experiment" you at Merit are going to run in accordance also with RIPE NCC? (I'm aware of what Geoff Juston made at APINIC in June 2010 with 2400::/12 https://labs.ripe.net/Members/mirjam/background-radiation-in-ipv6) I was wondering if any consensus is needed before starting such a big thing that involves IPv6 production networks as well. I mean: when my route6 is not announced via BGP, it's supposed that every packet sent to it doesn't get anywhere, hopefully. OTOH, if during this experiment, for any reason (wanted or not), my prefix is no more announced, I'm afraid the /12 would attract (perhaps hijack?) those packets (actually breaking, I believe, any existent ROA for the prefix). So, just asking: what kind of packets are going to be collected and how stored, analysed and by whom? Thank you -- antonio > ----- Original Message ----- > From: Antonio Prado <aprado(a)topnet.it> > To: ipv6-ops(a)lists.cluenet.de > Cc: mkarir(a)merit.edu > Sent: Fri, 19 Oct 2012 13:09:23 -0400 (EDT) > Subject: route6: 2A00::/12 > > Hello, > > just saw a new entry in RADB for 2A00::/12 and was wondering if could be > a fat-finger issue as our IPv6 prefix (a /29) actually belongs to that /12. > > route6: 2A00::/12 > descr: MERIT Network Inc. > 1000 Oakbrook Drive, Suite 200 > Ann Arbor > MI 48104, USA > origin: AS237 > mnt-by: MAINT-AS237 > remarks: This announcement is part of an RIPE approved > experiment. For additional information please > send email to mkarir(a)merit.edu > source: RADB > changed: ljb(a)merit.edu 20121017 > > Anyone aware of this experiment? > > Thank you > -- > antonio >

6 9

New on RIPE Labs: Counting IPv6 in the DNS
by Mirjam Kuehne 29 Oct '12

29 Oct '12

[apologies for duplicates] Dear colleagues, Geoff Huston gave an interesting presenting at the recent NANOG meeting showing another way to measure IPv6 deployment. This time he looked at the DNS. His findings are now published on RIPE Labs: "Counting IPv6 in the DNS" https://labs.ripe.net/Members/gih/counting-ipv6-in-the-dns Kind regards, Mirjam Kuehne RIPE NCC

1 0

RIPE NCC Webinars - new dates
by Training Mailbox 29 Oct '12

29 Oct '12

[Apologies for duplicate e-mails] Dear colleagues, We are pleased to announce the launch of new dates for our Webinars for LIRs. The RIPE NCC Webinars are live, one hour online training courses that allow participants to interact with our trainers without leaving their desks. We focus on the topics and issues most important for LIRs. Register now at https://www.ripe.net/lir-services/training/e-learning/webinars Participation is limited to 20 people, so don't hesitate if you want to take part! If you have questions, please email<e-learning(a)ripe.net>. We look forward to seeing you online. Kind regards, RIPE NCC Training Services

1 1

This may be of interest to this wg
by João Damas 25 Oct '12

25 Oct '12

It's a simple petition to request IPv6 support for Skype. I am not going to argue about the effectiveness of the approach, each person can do that. http://www.change.org/petitions/skype-add-ipv6-support-to-skype Joao

1 0

6a44
by Aleksi Suhonen 22 Oct '12

22 Oct '12

Hi, A new RFC (RFC6751) defines a new transition technology called 6a44 that (re)uses 192.88.99.0/24. As an operator of a 6to4 relay router, I'm looking for implementations of 6a44. A google search yielded nothing, so I wonder if anyone here has heard of any implementations in progress? -- Aleksi Suhonen / TREX

2 1

New on RIPE Labs: IPv6 CPE Survey and More IPv6 RIPEness
by Mirjam Kuehne 17 Oct '12

17 Oct '12

Dear colleagues, We just published two new IPv6 related articles on RIPE Labs: 1. The 2012 IPv6 CPE Survey (Background info and description): https://labs.ripe.net/Members/marco_hogewoning/the-2012-ipv6-cpe-survey Please note that the actual survey results are on IPv6ActNow: http://www.ipv6actnow.org/cpe 2. IPv6 RIPEness - More Stars (introducing a 5th star): https://labs.ripe.net/Members/emileaben/ipv6-ripeness-more-stars Please do not hesitate to leave any comments or suggestions under the articles on RIPE Labs. Kind Regards, Mirjam Kuehne RIPE NCC

4 4

New on RIPE Labs: Number of New LIRs and their IPv6 RIPEness
by Mirjam Kuehne 12 Oct '12

12 Oct '12

Dear colleagues, In Q3 2012, we observed an increase in the number of new LIRs in the RIPE NCC service region. Many of these new LIRs show 1-star IPv6 RIPEness. Read more on RIPE Labs: Number of New LIRs and their IPv6 RIPEness https://labs.ripe.net/Members/mirjam/new-lirs-and-their-ipv6-ripeness Kind Regards, Mirjam Kuehne RIPE NCC

1 0

New on RIPE Labs: RIPE Atlas - A Case Study of AAAA Filtering
by Mirjam Kuehne 11 Oct '12

11 Oct '12

[apologies for duplicates] Dear colleagues, Following up on a question raised during RIPE 65, we used RIPE Atlas to see if we can detect significant filtering of AAAA DNS queries or replies. Please read our findings on RIPE Labs: RIPE Atlas - A Case Study of AAAA Filtering https://labs.ripe.net/Members/emileaben/ripe-atlas-case-study-of-aaaa-filte… Kind Regards, Mirjam Kuehne RIPE NCC

1 0

Final draft agenda for RIPE 65
by Marco Hogewoning 21 Sep '12

21 Sep '12

Dear colleagues, Attached a copy of our latest agenda. Many thanks to everyone who submitted a talk or who suggested speakers to us. We once again have a very broad and packed agenda. We have two slots: Wednesday, September 26, from 14:00 - 15:30 CEST Thursday, September 27, from 09:00 - 10:30 CEST In case you won't be able to make it to Amsterdam, both of these sessions will be webcasted. With the help of the RIPE NCC, we will also provide options for remote participation. For more information please have a look at http://ripe65.ripe.net which will have the links to the video streams and chat boxes. Hope to see you all next week, The IPv6 Working Group chairs, Marco, David and Shane (PS: please note the order of the presentations has been changed compared to earlier versions) ====================================================================================================== IPv6 Working Group RIPE 65 Agenda Session 1: Wednesday 14:00 - 15:30 A. Welcome and administrative items - Agenda bashing - Minutes of RIPE 64 - Announcements B. Implementing IPv6 in RCS & RDS Network (Liviu Pislaru, Chief Architect for IPv6, RCS & RDS) More than 1 million RCS & RDS residential customers can now use native IPv6 on a dual stack PPPoE connection and 20% already do. Our presentation is about this achievement, more specific about history of IPv6 in our network, success factors and obstacles that we encountered. C. World IPv6 Launch (Yannis Nikolopoulos, OTE, Greece) An overview of OTE’s preparation for World IPv6 Lauch and a discussion of things that went wrong (expected or unexpected) and what was done to remedy the situation for the short and long term. D. IPv6 deployment in Forthnet (Tassos Chatzithomaoglou, Forthnet) The deployment of IPv6 dual-stack in Forthnet, also including our latest tests on DS-Lite and radius-based semi-dynamic IPv6 assignment. E. IPv6 CPE Survey 2012 (Marco Hogewoning, RIPE NCC) Introduction to the new IPv6 CPE Survey F. IPv6 RIPEness (Emile Aben, RIPE NCC) Measuring IPv6 in production at LIRs G. Wrap up Session 2: Thursday 09:00 - 10:30 H. Welcome back I. L2 issues and solutions (Eric Vyncke, Cisco) Overview of the IPv6 related layer 2 issues that got raised over time, such as user separation in shared access networks. Work being done in the IETF to resolve such issues and the current state of implementation of these techniques. J. IETF work on operational security for an IPv6 network (Merike Kaeoi, Double Shot Security) Merike will introduce the other IPv6 related security work being undertaken by the various IETF working groups. K. KATR Catalogue of (IPv6) routers (Ondrej Filip, CZ.NIC) The router catalog offers reviews of home-user routers. The main aim of our reviews is to test support of new technologies in routers, such as for the IPv6 protocol or the DNSSEC extension to DNS. L. IETF Work on transitioning techniques for multicast traffic (Tom Taylor, PT Taylor Consulting) The IETF has produced a number of tools for transition from IPv4 to IPv6, but most of them have not been specifically applicable to multicast. One tool that is specifically applicable is Automatic Multicast Tunneling (AMT, draft-ietf-mboned-64-multicast-address-format-04), which is in production in the AT&T network. RFC 6145 applies to stateless translation of multicast as well as unicast, but there is as yet no multicast equivalent to RFC 6052. Several existing drafts provide additional tools for dealing with various multicast transition scenarios. Even though they have operator support, most of them are gated on receiving evidence of more widespread support before they can proceed. The purpose of this presentation is to provoke a discussion of which if any transition scenarios will be common enough to be worth the effort of standardizing tools to deal with them. The results will be used to feed back into draft-ietf-mboned-v4v6-mcast-ps-00 in the MBONED Working Group. M. Why NAT64 must win (Andy Davidson) 5 to 10 year view of IPv6 transitional technology N. Results of the 2012 Global IPv6 Survey (Maarten Botterman, GNKS Consult) As in previous years, the Number Resource Organization (NRO) conducted a survey on the current and future use of IPv6. The purpose of the survey is to better understand where the community is moving, and what can be done to ensure the Internet community is ready and moving toward widespread adoption of IPv6. As it is mostly the same as the survey carried out globally in 2010 and 2011, comparison of progress will be possible. O. Wrap up and discussion on future work P. Closing

1 0

Invitation to 7th Slo IPv6 summit and ISOC ION meeting
by Jan Zorz ＠ go6.si 20 Sep '12

20 Sep '12

[posted with WG chairs permission] Dear RIPE IPv6 WG The Go6 Institute and the Internet Society invite you to the 7th Slovenian IPv6 Summit and the Internet Society ION Conference on 18-19 October at the Brdo Technology Park in Ljubljana, Slovenia. The event is free and open to all. Experts from leading technology companies and organizations around the globe including Yahoo!, 6connect, Comcast, Checkpoint, Google, Fortinet and Cisco Systems will share their knowledge and experience on IPv6 and DNSSEC during this two-day event. About the event: http://go6.si/en/7-slo-ipv6-summit/ More about speakers: http://go6.si/en/7-slo-ipv6-summit/predavatelji/ Key Sessions Include: • Keynote by mr. Bob Hinden, one of the “fathers” of IPv6 • Deploying IPv6 in US Navy by Ron Broersma, Internet pioneer • IPv6 in the Enterprise: Real-world Deployment Experiences • Skip the transitions, jump straight into IPv6 waters, Ivan Pepelnjak • How can IPAM make IPv6 designing and deployment easier, Aaron Hughes • Deploying DNSSEC: From End-customer to Content • World IPv6 Launch Results ...and many more :) Agenda 1st day: http://go6.si/en/7-slo-ipv6-summit/program-1-dan/ Agenda 2nd day: http://go6.si/en/7-slo-ipv6-summit/program-2-dan/ The event is of regional nature and will be held in English language only. There is no attendance fee, participation is free but anyone needs to register in order to attend. Today we opened the registration and as only 150 seats are available we expect them to run out fairly quickly. Registration: http://v6summit.eventbrite.com/ See you in Ljubljana in October ;) Jan Zorz Go6 Institute, CEO P.S: Please, register only if you are really coming, as space is extremely limited.

1 0

Re: [ipv6-wg] ipv6-wg Digest, Vol 13, Issue 4
by Thorsten.Trottier＠t-systems.com 19 Sep '12

19 Sep '12

Dear Madams, Sirs, since I am new to the RIPE mailing group and activities please allow for one question. Is everybody invited to attend the working group meeting or is it a closed group event? With best regards Thorsten Trottier -----Original Message----- From: ipv6-wg-bounces(a)ripe.net [mailto:ipv6-wg-bounces@ripe.net] On Behalf Of ipv6-wg-request(a)ripe.net Sent: Mittwoch, 19. September 2012 12:00 To: ipv6-wg(a)ripe.net Subject: ipv6-wg Digest, Vol 13, Issue 4 Send ipv6-wg mailing list submissions to ipv6-wg(a)ripe.net To subscribe or unsubscribe via the World Wide Web, visit https://www.ripe.net/mailman/listinfo/ipv6-wg or, via email, send a message with subject or body 'help' to ipv6-wg-request(a)ripe.net You can reach the person managing the list at ipv6-wg-owner(a)ripe.net When replying, please edit your Subject line so it is more specific than "Re: Contents of ipv6-wg digest..." Today's Topics: 1. Draft Agenda for IPv6 working group during RIPE65 (v2) (Marco Hogewoning) 2. Re: Draft Agenda for IPv6 working group during RIPE65 (v3) (Marco Hogewoning) ---------------------------------------------------------------------- Message: 1 Date: Wed, 19 Sep 2012 11:02:57 +0200 From: Marco Hogewoning <marcoh(a)marcoh.net> Subject: [ipv6-wg] Draft Agenda for IPv6 working group during RIPE65 (v2) To: ipv6-wg(a)ripe.net Message-ID: <622AF49A-FB24-45FD-BDA7-07660FAA4B6E(a)marcoh.net> Content-Type: text/plain; charset=us-ascii Hello all, This is an update to the agenda previously posted by David. We are still scheduled to meet on Wednesday, 14:00 to 15:30. As we don't want to purposely use up the coffee break, I think we are very likely to also use the optional slot, which is on Thursday from 09:00 to 10:30. If you have other items to discuss or projects to show to the world, please tell us. With the additional 90 minutes we still have some time left. Thanks, Marco, David and Shane Draft Agenda for the IPv6 Working Group Meeting RIPE65 (v2) When: - Wed, Sep 26, 2012, 14:00 - 15:30 - Thu, Sep 27, 2012, 09:00 - 10:30 Where: Okura Hotel in Amsterdam This agenda is still a draft. The order of the agenda topics and whether they will be in the first or second agenda slot will be determined later. A. Administrative stuff - appointment of scribe - agenda bashing (David, Marco, Shane) B. Developments/initiatives regarding IPv6 in the RIPE region and beyond - IETF v6ops interim working group meeting (input from the audience) C. KATR - Catalogue of (IPv6) routers (Ondrej Filip, CZ.NIC) D. Implementing IPv6 in RCS & RDS Network" More then 1 million RCS & RDS residential customers can now use native IPv6 on a dual stack PPPoE connection and 20% already do. Our presentation is about this achievement, more specific about history of IPv6 in our network, success factors and obstacles that we encountered. (Liviu Pislaru, Chief Architect for IPv6, RCS & RDS, Romania) E. Why NAT64 must win 5 to 10 year view of IPv6 transitional technology (Andy Davidson) F. World IPv6 Launch An overview of OTE's preparation for World IPv6 Lauch and a discussion of things that went wrong (expected or unexpected) and what was done to remedy the situation for the short and long term. (Yannis Nikolopoulos, OTE, Greece) G. L2 issues and solutions (Eric Vynke) H. An Update on IPv6 RIPEness: More Stars? Measuring IPv6 in production at LIRs. (Emile Aben, RIPE NCC) I. Multicast Transition Scenarios Introduction to work done in the IETF (Tom Taylor) J. IPv6 deployment in Forthnet Presentation The deployment of IPv6 Dual-Stack in Forthnet, also including our latest tests on DS-Lite and radius based semi-dynamic IPv6 assignment. (Tassos Chatzithomaoglou) K. The new RIPE NCC IPv6 CPE Survey Introduction of the new matrix/website (Marco Hogewoning) L. Results of the 2013 Global IPv6 Survey - Pending (Maarten Botterman) ... Y. Input for the RIPE NCC Activity Plan (input from the audience) Z. AOB ------------------------------ Message: 2 Date: Wed, 19 Sep 2012 11:09:52 +0200 From: Marco Hogewoning <marcoh(a)marcoh.net> Subject: Re: [ipv6-wg] Draft Agenda for IPv6 working group during RIPE65 (v3) To: ipv6-wg(a)ripe.net Message-ID: <345903A8-32B5-4D0A-8AE8-33D474B5CD59(a)marcoh.net> Content-Type: text/plain; charset=us-ascii Things are moving fast, actually forgot to list one item. Sorry Merike. Marco > Draft Agenda for the IPv6 Working Group Meeting RIPE65 (v2) > > When: - Wed, Sep 26, 2012, 14:00 - 15:30 > - Thu, Sep 27, 2012, 09:00 - 10:30 > > Where: Okura Hotel in Amsterdam > > This agenda is still a draft. The order of the agenda topics and > whether they will be in the first or second agenda slot will be determined later. > > A. Administrative stuff > - appointment of scribe > - agenda bashing > (David, Marco, Shane) > > > B. Developments/initiatives regarding IPv6 in the RIPE region and > beyond > - IETF v6ops interim working group meeting (input from the audience) > > > C. KATR - Catalogue of (IPv6) routers > (Ondrej Filip, CZ.NIC) > > > D. Implementing IPv6 in RCS & RDS Network" > > More then 1 million RCS & RDS residential customers can now use > native > IPv6 on a dual stack PPPoE connection and 20% already do. Our > presentation is about this achievement, more specific about history of > IPv6 in our network, success factors and obstacles that we > encountered. > > (Liviu Pislaru, Chief Architect for IPv6, RCS & RDS, Romania) > > > E. Why NAT64 must win > > 5 to 10 year view of IPv6 transitional technology > > (Andy Davidson) > > > F. World IPv6 Launch > > An overview of OTE's preparation for World IPv6 Lauch and a > discussion of things that went wrong (expected or unexpected) and > what was done to remedy the situation for the short and long term. > > (Yannis Nikolopoulos, OTE, Greece) > > > G. L2 issues and solutions > (Eric Vynke) > > > H. An Update on IPv6 RIPEness: More Stars? > > Measuring IPv6 in production at LIRs. > > (Emile Aben, RIPE NCC) > > I. Multicast Transition Scenarios > > Introduction to work done in the IETF > (Tom Taylor) > > J. IPv6 deployment in Forthnet > > Presentation The deployment of IPv6 Dual-Stack in Forthnet, also including our latest tests on DS-Lite and radius > based semi-dynamic IPv6 assignment. > > (Tassos Chatzithomaoglou) > > K. The new RIPE NCC IPv6 CPE Survey > > Introduction of the new matrix/website > (Marco Hogewoning) > > L. Results of the 2013 Global IPv6 Survey - Pending > > (Maarten Botterman) > M. IETF work on operational security for an IPv6 network (Merike Kaeo) > ... > > > Y. Input for the RIPE NCC Activity Plan (input from the audience) > > > Z. AOB End of ipv6-wg Digest, Vol 13, Issue 4 **************************************

2 1

Draft Agenda for IPv6 working group during RIPE65 (v2)
by Marco Hogewoning 19 Sep '12

19 Sep '12

Hello all, This is an update to the agenda previously posted by David. We are still scheduled to meet on Wednesday, 14:00 to 15:30. As we don't want to purposely use up the coffee break, I think we are very likely to also use the optional slot, which is on Thursday from 09:00 to 10:30. If you have other items to discuss or projects to show to the world, please tell us. With the additional 90 minutes we still have some time left. Thanks, Marco, David and Shane Draft Agenda for the IPv6 Working Group Meeting RIPE65 (v2) When: - Wed, Sep 26, 2012, 14:00 - 15:30 - Thu, Sep 27, 2012, 09:00 - 10:30 Where: Okura Hotel in Amsterdam This agenda is still a draft. The order of the agenda topics and whether they will be in the first or second agenda slot will be determined later. A. Administrative stuff - appointment of scribe - agenda bashing (David, Marco, Shane) B. Developments/initiatives regarding IPv6 in the RIPE region and beyond - IETF v6ops interim working group meeting (input from the audience) C. KATR - Catalogue of (IPv6) routers (Ondrej Filip, CZ.NIC) D. Implementing IPv6 in RCS & RDS Network" More then 1 million RCS & RDS residential customers can now use native IPv6 on a dual stack PPPoE connection and 20% already do. Our presentation is about this achievement, more specific about history of IPv6 in our network, success factors and obstacles that we encountered. (Liviu Pislaru, Chief Architect for IPv6, RCS & RDS, Romania) E. Why NAT64 must win 5 to 10 year view of IPv6 transitional technology (Andy Davidson) F. World IPv6 Launch An overview of OTE's preparation for World IPv6 Lauch and a discussion of things that went wrong (expected or unexpected) and what was done to remedy the situation for the short and long term. (Yannis Nikolopoulos, OTE, Greece) G. L2 issues and solutions (Eric Vynke) H. An Update on IPv6 RIPEness: More Stars? Measuring IPv6 in production at LIRs. (Emile Aben, RIPE NCC) I. Multicast Transition Scenarios Introduction to work done in the IETF (Tom Taylor) J. IPv6 deployment in Forthnet Presentation The deployment of IPv6 Dual-Stack in Forthnet, also including our latest tests on DS-Lite and radius based semi-dynamic IPv6 assignment. (Tassos Chatzithomaoglou) K. The new RIPE NCC IPv6 CPE Survey Introduction of the new matrix/website (Marco Hogewoning) L. Results of the 2013 Global IPv6 Survey - Pending (Maarten Botterman) ... Y. Input for the RIPE NCC Activity Plan (input from the audience) Z. AOB

1 1

Fwd: [ncc-services-wg] RIPE NCC Begins to Allocate IPv4 Address Space From the Last /8
by Marco Hogewoning 14 Sep '12

14 Sep '12

For those of you who missed the original posting: From: Axel Pawlik <ncc(a)ripe.net> > Date: September 14, 2012 3:40:08 PM GMT+02:00 > To: ncc-services-wg(a)ripe.net > Subject: [ncc-services-wg] RIPE NCC Begins to Allocate IPv4 Address Space From the Last /8 > Reply-To: ncc(a)ripe.net > > Dear colleagues, > > On Friday, 14 September 2012, the RIPE NCC, the Regional Internet Registry (RIR) for Europe, the Middle East and parts of Central Asia, distributed the last blocks of IPv4 address space from the available pool. > > This means that we are now distributing IPv4 address space to Local Internet Registries (LIRs) from the last /8 according to section 5.6 of "IPv4 Address Allocation and Assignment Policies for the RIPE NCC Service Region". > > This section states that an LIR may receive one /22 allocation (1,024 IPv4 addresses), even if they can justify a larger allocation. This /22 allocation will only be made to LIRs if they have already received an IPv6 allocation from an upstream LIR or the RIPE NCC. No new IPv4 Provider Independent (PI) space will be assigned. > > This policy can be found online at: > https://www.ripe.net/ripe/docs/ripe-553 > > Those members with open requests for IPv4 address space will shortly receive an email regarding the status of their requests. > > It is now imperative that all stakeholders deploy IPv6 on their networks to ensure the continuity of their online operations and the future growth of the Internet. > > > Regards, > > Axel Pawlik > > Managing Director > RIPE NCC > > > More Information > ----------------- > > For more information on IPv6 and its deployment, advice from experts and > where to get training, please see: > http://www.ipv6actnow.org/ > > For more information on reaching the last /8, please see: > https://www.ripe.net/internet-coordination/ipv4-exhaustion >

1 0

ipv6mon v1.0 released! (IPv6 address monitoring daemon)
by Fernando Gont 13 Sep '12

13 Sep '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Folks, We are pleased to announce the release of ipv6mon v1.0! ** Description ** ipv6mon (<http://www.si6networks.com/tools/ipv6mon>) is a tool for monitoring IPv6 address usage on a local network. It is meant to be particularly useful in networks that employ IPv6 Stateless Address Auto-Configuration (as opposed to DHCPv6), where address assignment is decentralized and there is no central server that records which IPv6 addresses have been assigned to which nodes during which period of time. ipv6mon employs active probing to discover IPv6 addresses in use, and determine whether such addresses remain active. ** Latest release ** The latest release of ipv6mon is v1.0, and is available at: <http://www.si6networks.com/tools/ipv6mon/ipv6mon-v1.0.tar.gz> ** Documentation ** PDF versions of the ipv6mon manuals are available on-line at: <http:://www.si6networks.com/tools/ipv6mon> ** GIT repository ** The GIT repository for the ipv6mon is: <https://github.com/fgont/ipv6-toolkit.git> ** IPv6 security trainings ** Development of ipv6mon is partially supported through our IPv6 security trainings. Please consider attending one of our upcoming trainings <http://www.hackingipv6networks.com/upcoming-t> Follow us on twitter: @SI6Networks Best regards, - -- Fernando Gont SI6 Networks e-mail: fgont(a)si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 - -- Fernando Gont e-mail: fernando(a)gont.com.ar || fgont(a)si6networks.com PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEcBAEBAgAGBQJQUdI6AAoJEJbuqe/Qdv/xFIUH/1HTwIKS4fuxmEKmf5BdTV+Y lGlJ4zWiyqqxvj1ee2dMnctUvmTZrUPek8vVUsVqondAY/tv0VUhjpBPdJCZnX09 8gG8rqTVfc/mC3vSbfdCOspFviBE646Fpf/Wb5FH9TWJhXEYqRfy2BCiW2TpZCA2 KyvB66S8EuBayihzCCK6lecHKme9y1q2f/wh1xvFkwO0Za+ftYBJvfl1oY4RtJdb MkZsGIxVbh1ODAyw+8aOR6sfJB7s0pM5xrQLqcc3YMHzwtqpn5fWMqsJ9utOtDLu 6lbpt1RudenuBKsPB553Yo3LoO7ET6uISN+A1Xh8UCdsVDCK1Hi6+Y9eega/TC8= =2X3w -----END PGP SIGNATURE-----

1 0

Draft Agenda for IPv6 wg RIPE65 (v1) and call for agenda topics
by David Kessens 07 Sep '12

07 Sep '12

Hi, Our working group is scheduled to meet on: Wed, Sep 26, 2012, 14:00 - 15:30 in the Okura Hotel in Amsterdam. We have prepared a first draft of our agenda. We do have an extra optional timeslot available on Thu, Sep 27, 9:00 - 10:30. Our current agenda topics already pretty much fill up this timeslot and we anticipate that we need the second optional timeslot if we receive more proposals for discussions and talks. Therefore, we would like to ask you whether you have any other topics that you would like to discuss during our next working group session. We don't require you to have slides, or that the topic needs to be very long: the more important thing is that it is pertinent and useful for our participants in helping to continue the ongoing deployment of IPv6 in the RIPE service region and beyond. Finally, as a reminder, the IETF will hold an interim meeting for the v6ops (as well as sidr & opsec) working group on the Saturday after the RIPE meeting (see: http://www.ietf.org/meeting/interim/v6ops-2012-09-29.txt). Thanks! David, Marco & Shane --- Draft Agenda for the IPv6 Working Group Meeting RIPE65 (v1) When: - Wed, Sep 26, 2012, 14:00 - 15:30 - Thu, Sep 27, 2012, 09:00 - 10:30 (optional) Where: Okura Hotel in Amsterdam This agenda is still a draft. The order of the agenda topics and whether they will be in the first or second agenda slot will be determined later. A. Administrative stuff - appointment of scribe - agenda bashing (David, Marco, Shane) B. Developments/initiatives regarding IPv6 in the RIPE region and beyond - IETF v6ops interim working group meeting (input from the audience) C.- Wed, Sep 26, 2012, 14:00 - 15:30 - Thu, Sep 27, 9:00 - 10:301) KATR - Catalogue of (IPv6) routers (Ondrej Filip, CZ.NIC) D. Implementing IPv6 in RCS & RDS Network" More then 1 million RCS & RDS residential customers can now use native IPv6 on a dual stack PPPoE connection and 20% already do. Our presentation is about this achievement, more specific about history of IPv6 in our network, success factors and obstacles that we encountered. (Liviu Pislaru, Chief Architect for IPv6, RCS & RDS, Romania) E. Why NAT64 must win 5 to 10 year view of IPv6 transitional technology (Andy Davidson) F. World IPv6 Launch An overview of OTE's preparation for World IPv6 Lauch and a discussion of things that went wrong (expected or unexpected) and what was done to remedy the situation for the short and long term. (Yannis Nikolopoulos, OTE, Greece) G. L2 issues and solutions (Eric Vynke) H. An Update on IPv6 RIPEness: More Stars? Measuring IPv6 in production at LIRs. (Emile Aben, RIPE NCC) ... Y. Input for the RIPE NCC Activity Plan (input from the audience) Z. AOB ---

1 0

FYI: [v6ops] v6ops interim meeting as part of the Sept 29th LIM Amsterdam Netherlands.
by David Kessens 23 Aug '12

23 Aug '12

For your information, you might want to take this into consideration for your travel plans: ----- Forwarded message from joel jaeggli <joelja(a)bogus.com> ----- Date: Wed, 22 Aug 2012 15:56:32 -0700 From: joel jaeggli <joelja(a)bogus.com> To: IPv6 Ops WG <v6ops(a)ietf.org>, V6ops Chairs <v6ops-chairs(a)tools.ietf.org>, iesg-secretary(a)ietf.org, "ops-ads(a)tools.ietf.org" <ops-ads(a)tools.ietf.org> Subject: [v6ops] v6ops interim meeting as part of the Sept 29th LIM Amsterdam Netherlands. Greetings folks, The commentary on our proposal was appreciated. The slot that IAD has allocated to us is: 1330 - 1630 CEST on the 29th of Sept 2012 I am aware so far, that opsec is planning to meet in the same location from 0900-1200 and the SIDR has an interim scheduled for the entire day that Saturday. While there are some details still to be worked out it's time to get the framework in place for the interim to coincide with the end of RIPE 65, Amsterdam, 24 - 28 September 2012. <http://ripe65.ripe.net/> Location is: Hotel Okura <http://www.okura.nl/> Ferdinand Bolstraat 333 1072 LH Amsterdam +31 (0) 20 678 7493 I think we should plan to maintain an interim document submission deadline two weeks out from the meeting itself. Too be considered for inclusion in the interim agenda new or revised documented should be submitted to the IETF document system by 23:59 UTC on Sept 14th. Documents currently being hashed out on the list are certainly fair game for inclusion in the interim. I have attached the ical for the document-submission deadline to the meeting. Thanks Joel ---

1 0

RIPE NCC Training Courses April-June 2012 - IL, BE, IS, PL, RU, FI, NL, DE, ES, HR
by Training Mailbox 23 Aug '12

23 Aug '12

Dear Colleagues, Our training team travels the RIPE NCC service region to deliver training courses to our members without any additional cost. Over the next few months, we'll be in Tel Aviv, Brussels, Reykjavik, Belfast, Gdansk, Yekaterinburg, Helsinki, Amsterdam, Munich, Seville and Croatia. Visit the following page to register and to check which training courses we are giving in your area: https://lirportal.ripe.net/training/courses The RIPE NCC delivers the following training courses: - LIR Training Course - IPv6 for LIRs Training Course - Routing Registry Training Course For more information visit: http://www.ripe.net/lir-services/training/courses With kind regards, Rumy Spratley-Kanis Training Services Manager

1 2

New article on RIPE Labs: Results from HTTP Measurements During World IPv6 Launch
by Mirjam Kuehne 23 Aug '12

23 Aug '12

Dear colleagues, In addition to other measurements we did during and after World IPv6 Launch, in this new article we present the DNS and HTTP measurement results from a 4-day period as a 3 minute movie. It shows some interesting results: https://labs.ripe.net/Members/wilhelm/world-ipv6-launch-http-measurements Kind Regards, Mirjam Kuehne RIPE NCC

1 0

IPv6 Toolkit v1.2.3 released
by Fernando Gont 13 Aug '12

13 Aug '12

Folks, We've released IPv6 toolkit v1.2.3. It is available at: <http://www.si6networks.com/tools> (tarball and git repository). The IPv6 toolkit contains a number of IPv6 security/troubleshooting tools, such as: * An IPv6 local network scanner (scan6) * An IPv6 fragmentation assessment tool (frag6) * A tool to craft arbitrary TCP/IPv6 segments (tcp6) * A tool to craft arbitrary Router Advertisements (ra6) .... and many, many others This version of the toolkit has been fully-ported to Mac OS (the list of supported systems now including, at the very least, FreeBSD, NetBSD, OpenBSD, Linux, and Mac OS), and also incorporates a number of patches sent by the community. Any feedback on the tools will be welcome (either unicast to me, or to the ipv6hackers mailing-list <http://lists.si6networks.com/listinfo/ipv6hackers/>). Follow us on Twitter to get the latest news about the IPv6 Toolkit and IPv6 security: @SI6Networks Thanks! Best regards, -- Fernando Gont SI6 Networks e-mail: fgont(a)si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

1 0

New on RIPE Labs: RIPE NCC Active Measurements of World IPv6 Launch Dataset
by Mirjam Kuehne 27 Jul '12

27 Jul '12

Dear colleagues, Please find a new article on RIPE Labs: "RIPE NCC Active Measurements of World IPv6 Launch Dataset" https://labs.ripe.net/datarepository/data-sets/ripe-ncc-active-measurements… Kind Regards, Mirjam Kuehne RIPE NCC

1 0

New on RIPE Labs: Test your IPv6 Reachability by Using RIPE Atlas (now visualised)
by Mirjam Kuehne 17 Jul '12

17 Jul '12

[apologies for duplicate mails] Dear colleagues, As announced in earlier, it is possible for RIPE NCC members to do IPv6-traceroutes from all RIPE Atlas probes to IPv6 destinations. In this new article on RIPE Labs we present a first experimental analysis and a prototype visualisation of the traceroute results: https://labs.ripe.net/Members/emileaben/visualise-your-ipv6-connectivity-us… Kind Regards, Mirjam Kuehne RIPE NCC

1 0

New on RIPE Labs: Measuring IPv6 - Country by Country
by Mirjam Kuehne 27 Jun '12

27 Jun '12

Dear colleagues, Following on from earlier articles on RIPE Labs that showed IPv6 deployment on a country and network level, we published a new article contributed by Geoff Huston on RIPE Labs: Measuring IPv6 - Country by Country https://labs.ripe.net/Members/gih/measuring-ipv6-country-by-country Kind Regards, Mirjam Kuehne RIPE NCC

1 0

New on RIPE Labs: Measuring IPv6 Launch - Comparing IPv4 and IPv6 Performance
by Mirjam Kuehne 21 Jun '12

21 Jun '12

Dear colleagues, Please find a new article on RIPE Labs: Measuring World IPv6 Launch - Comparing IPv4 and IPv6 Performance https://labs.ripe.net/Members/emileaben/measuring-world-ipv6-launch-compari… Kind regards, Mirjam Kuehne RIPE NCC

1 0

New on RIPE Labs: IPv6 Launch Measurements
by Mirjam Kuehne 11 Jun '12

11 Jun '12

Dear colleagues, Like last year during World IPv6 Day, the RIPE NCC has been doing various measurements during World IPv6 Launch on 6 June. We will publish the results in a series of articles on RIPE Labs. The first one can be found here: https://labs.ripe.net/Members/mirjam/first-results-from-ipv6-launch Kind regards, Mirjam Kuehne RIPE NCC

1 0

World IPv6 Launch: RIPE NCC Activities
by Paul Rendek 06 Jun '12

06 Jun '12

[Apologies for duplicate emails] Dear Colleagues, World IPv6 Launch takes place today, 6 June 2012, marking a key milestone in the development of the Internet. Major Internet service providers (ISPs), manufacturers and content providers around the world are coming together to permanently enable IPv6 for their products and services. RIPE NCC is heavily involved in both the local and global events surrounding the Launch. Measurements ------------- We will monitor and analyse many of the participating websites from a number of vantage points before, during and after the Launch: http://v6launch.ripe.net/cgi-bin/index.cgi Local Event ----------- We've joined forces with several Dutch organisations to organise the World IPv6 Launch NL event at Science Park Amsterdam. The local technical community and future Internet leaders are attending the RIPE NCC's IPv6 tutorial, various IPv6-related presentations, hands-on workshops and plenary sessions. We'll be tracking the global Launch with live statistics throughout the day and Daniel Karrenberg, Chief Scientist, will give the keynote speech: http://ipv6launch.nl/ Global Activities ----------------- Find out more about our other IPv6 Launch activities, including the RIPEstat World IPv6 Launch Widget, how to test IPv6 reachability using RIPE Atlas and using the IPv6 Eye Chart to find out if you will have problems accessing websites, at: http://www.ripe.net/internet-coordination/ipv6/world-ipv6-launch Regards, Axel Pawlik Managing Director RIPE NCC

1 0

New Document ripe-554 "Requirements for IPv6 in ICT Equipment" published
by Marco Hogewoning 05 Jun '12

05 Jun '12

Dear Colleagues, It is our pleasure to announce we just published a new RIPE Document, called "Requirements for IPv6 in ICT Equipment". This document serves as a replacement of the ripe-501 document, which is now obsoleted. The full text is available via https://www.ripe.net/ripe/docs/current-ripe-documents/ripe-554 If you reference the ripe-501 somewhere, please update your links and refer to this new document. Many thanks to the authors, Jan, Sander, Merike and everybody else in the community who contributed to this new text. We would also like to say thanks to the RIPE NCC staff for their support in text editing and publication. The IPv6 Working Group Chairs, Marco, David and Shane

4 3

RIPE 65 call for content and agenda items
by Marco Hogewoning 04 Jun '12

04 Jun '12

Dear Colleagues, With World IPv6 Launch around the corner we would like to draw your attention to the upcoming RIPE Meeting, which will be held 24 - 28 September in Amsterdam. During this meeting we would love to hear from you about your experiences with the World IPv6 Launch or other IPv6 deployment projects. What did you do and did it work? Or even maybe tell us about the things you didn't do and why you made that decision. The IPv6 Working Group is chartered to exchange all operationally relevant bits of deploying IPv6. So if you are doing something for W6L please consider sharing your results and experiences with the community. Please drop a note to ipv6-wg-chair <at> ripe <dot> net with a short summary of your project and an abstract of your talk. Of course you can also submit your talk for the plenary using the online system. But we kindly request you to only use one of these methods to prevent any double work. Thank you, The IPv6 WG chairs, Marco, David and Shane

1 0

2012 Global IPv6 Deployment Monitoring Survey - Open Now Until 30 June
by Axel Pawlik 01 Jun '12

01 Jun '12

[Apologies for duplicate emails] Dear colleagues, The Number Resource Organization (NRO), on behalf of all the Regional Internet Registries, invites you to participate in the 3rd consecutive Global IPv6 Deployment Monitoring Survey on the current and future use of IPv6. The purpose of the survey is to better understand where the community is moving, and what can be done to ensure that the Internet community is ready and moving toward widespread adoption of IPv6. As it is mostly the same as the survey carried out globally in 2010 and 2011, comparison of progress will be possible. The IPv6 Deployment Monitoring Survey is now online, and we encourage all members of our community to participate: https://www.surveymonkey.com/s/GlobalIPv6survey2012 The survey will be open for a month and will close on 30 June 2012. We anticipate a good response rate as 94% of last year's over 1600 respondents from around the globe indicated that they were interested in participating again. We encourage all organisations to participate in order for the results to establish a comprehensive view of present IPv6 penetration and future plans for IPv6 deployment. The survey is composed of 23 questions and can be completed in about 15 minutes. For those without IPv6 allocations or assignments, or who have not yet deployed IPv6, the questions will be fewer in number. For those interested, the results of last year's survey are available: http://www.nro.net/wp-content/uploads/ipv6_deployment_survey.pdf. Results of this year's survey will be presented and discussed widely. Please provide your name and contact information on the survey form if you wish to receive the draft survey analysis when available. Please also indicate whether you are willing to share additional data with the TNO and GNKS Consult IPv6 Deployment Monitoring team. We appreciate your time and interest in completing this survey. If you have any questions concerning the survey, please send an email to info(a)gnksconsult.com. Regards, Axel Pawlik Managing Director RIPE NCC

1 0

New on RIPE Labs: Measuring World IPv6 Launch
by Mirjam Kuehne 29 May '12

29 May '12

Dear colleagues, Similar to last years World IPv6 Day, this year we're measuring selected World IPv6 Launch participants from over 50 vantage points all over the world. We're measuring DNS, ping, traceroute and HTTP and show results at http://v6launch.ripe.net/ . For more information, please read on RIPE Labs: https://labs.ripe.net/Members/emileaben/measuring-world-ipv6-launch-partici… Kind Regards, Mirjam Kuehne RIPE NCC

1 0

IPv6 security: New IETF I-Ds, slideware and videos of recent presentations, trainings, etc...
by Fernando Gont 28 May '12

28 May '12

Folks, * We've published a new IETF I-D entitled "DHCPv6-Shield: Protecting Against Rogue DHCPv6 Servers", which is meant to provide RA-Guard-like protection against rogue DHCPv6 servers. The I-D is available at: <http://tools.ietf.org/id/draft-gont-opsec-dhcpv6-shield-00.txt> Other IPv6 security I-Ds (such as, draft-ietf-v6ops-ra-guard-implementation) have been revised. Please check them out at: <http://www.si6networks.com/publications/ietf.html> * The slideware (and some videos!) of some of our recent presentations about IPv6 security are now available online. You can find them at: <http://www.si6networks.com/presentations/index.html> * We have also scheduled IPv6 hacking trainings in Paris (France) and Ghent (Belgium). You can find more details at: <http://www.si6networks.com/index.html#conferences> Our Twitter: @SI6Networks Thanks, - -- Fernando Gont SI6 Networks e-mail: fgont(a)si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

1 0

Status update replacing ripe-501
by Marco Hogewoning 23 May '12

23 May '12

Dear working group, In case anybody is wondering what happened to this. The working group chairs and authors are pretty confident that all issues have been addressed and the document in its current form is the one that will published. At the moment we are in the process of doing a final review for spelling and grammar, after which we will ask the RIPE NCC to assign a number and publish the document. Grtx, Marco

1 0

New article on RIPE Labs: Measuring IPv6 at Network and Customer Level
by Mirjam Kuehne 16 May '12

16 May '12

Dear all, Please find a new article "Measuring IPv6 at the Network and the Customer Level" on RIPE Labs. It has been contributed by George Michaelson from APNIC: https://labs.ripe.net/Members/ggm/measuring-ipv6-at-the-network-and-the-cus… Kind regards, Mirjam Kuehne RIPE Labs

1 0

6to4 and teredo pingables?
by Aleksi Suhonen 13 May '12

13 May '12

Hi, We run 6to4 and Teredo relay routers and in order to monitor the service our network monitoring system has been pinging a handful of 6to4 and Teredo addresses elsewhere. If more than one of those addresses fail to answer pings, an alarm is raised. Now I'm looking for a few more addresses I could ping, so I could raise the alert threshold a bit. Any volunteers? And in case anyone else wants to ping some of our hosts, here's a couple of candidates: (sorry, no Teredo hosts) ns.trex.fi. IN AAAA 2002:c38c:c38c:15::35 mail.trex.fi. IN AAAA 2002:c38c:c38c:14:203:baff:fe0f:d68b Yours sincerely, -- Aleksi Suhonen / TREX

1 0

New on RIPE Labs: Test your IPv6 Reachability by Using RIPE Atlas
by Mirjam Kuehne 09 May '12

09 May '12

[apologies for duplicate mails] Dear colleagues, You can now use RIPE Atlas to test your IPv6 reachability. This also works if you do not host a RIPE Atlas probe yourself. However, please note that this is only available to RIPE NCC members. Please find the details on RIPE Labs: https://labs.ripe.net/Members/becha/test-your-ipv6-reachability-using-ripe-… If you have any comments or questions, please let us know. Kind Regards, Mirjam Kuehne RIPE NCC

1 0

IETF I-D: Security Implications of IPv6 on IPv4 Networks
by Fernando Gont 02 May '12

02 May '12

Folks, A couple of weeks ago we published a new IETF I-D entitled "Security Implications of IPv6 on IPv4 networks". The I-D is available at: <http://tools.ietf.org/html/draft-gont-opsec-ipv6-implications-on-ipv4-nets> The Abstract of the I-D is: ---- cut here ---- This document discusses the security implications of native IPv6 support and IPv6 transition/co-existence technologies on "IPv4-only" networks, and describes possible mitigations for the aforementioned issues. ---- cut here ---- We're currently working on a revision of the document, so any comments will be really appreciated. Thanks! Best regards, -- Fernando Gont SI6 Networks e-mail: fgont(a)si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

1 0

New on RIPE Labs: Update on IPv6 Address Distribution
by Mirjam Kuehne 02 May '12

02 May '12

Dear colleagues, At the recent RIPE Meeting we presented some IPv6 address distribution statistics. In this RIPE Labs article, you can find statistics on IPv6 allocations and assignments. In particular, the article details what affect the removal of the requirement to be multihomed had on the number of assignments and the relationship between the age of an LIR and the number of IPv6 addresses they have received. https://labs.ripe.net/Members/mirjam/update-on-ipv6-address-distribution Kind regards, Mirjam Kuehne RIPE NCC

1 0

Last Call for publication of RIPE-501bis (reply by 20120426)
by David Kessens 02 May '12

02 May '12

In the IPv6 working session at the RIPE meeting in Slovenia, we discussed: http://go6.si/docs/Requirements-for-IPv6-in-ICT-equipment-v.9.pdf The meeting participants felt that the document is now ready for publication. Therefore, I would like to give everybody a final chance to bring up major issues that must be resolved before publication. Please comment by Thu 20120426 if you have major issues that require a delay in publication. We will ask the RIPE NCC to publish the document after the Last Call ends if no serious issues are uncovered by that date. The RIPE NCC will do an editorial pass for spelling, grammar and minor issues before it will publish the document. Feel free to contact the working group chairs directly <ipv6-wg-chairs(a)ripe.net> if you find anything minor that doesn't need working group review and we will make sure that it gets fixed in the final document. Thanks, David, Shane & Marco ---

3 3

RIPE 64 Working Group session
by Marco Hogewoning 18 Apr '12

18 Apr '12

Hi all, This is to remind you that the IPv6 Working Group will meet here in Ljubljana, tomorrow Thursday the 19th. We have 2 sessions, starting at 11:00 after the first coffee break in the main room. With a lunch break in between we continue at 14:00 in the same room for the second half. The agenda is posted to the website and available via https://ripe64.ripe.net/programme/meeting-plan/ipv6-wg/ We hope to see you all there. In case you couldn't make it to Slovenia, as always these sessions will be broadcasted and recorded for the archives. For remote participants feedback channels using IRC/Jabber will be available. More information can be found on the RIPE 64 meeting website, the stream is available via https://ripe64.ripe.net/live/ (Grant Union Hall). In case you want to join remote, Slovenian local time is UTC +0200. See you tomorrow, Marco, David and Shane

1 0

Fw: WG Review: sunset4 (sunset4)
by Shane Kerr 18 Apr '12

18 Apr '12

All, FYI, the IETF may be starting some (more) work of interest to IPv6 folks. Perhaps this will inspire us to change the IPv6 working group to the IPv4 CGN/NAT working group. ;) Cheers, -- Shane Begin forwarded message: Date: Tue, 17 Apr 2012 09:41:57 -0700 From: IESG Secretary <iesg-secretary(a)ietf.org> To: IETF Announcement List <ietf-announce(a)ietf.org> Subject: WG Review: sunset4 (sunset4) A new IETF working group has been proposed in the Internet Area. The IESG has not made any determination as yet. The following draft charter was submitted, and is provided for informational purposes only. Please send your comments to the IESG mailing list (iesg(a)ietf.org) by Tuesday, April 24, 2012. sunset4 (sunset4) ----------------------------------------- Status: Proposed Working Group Last Updated: 2012-04-13 Chairs: TBD Internet Area Directors: Ralph Droms <rdroms.ietf(a)gmail.com> Brian Haberman <brian(a)innovationslab.net> <TBD> Internet Area Advisor: <TBD> Area Advisors: OPS: <TBD> TSV: <TBD> RTG: <TBD> Mailing Lists: <TBD, pending final WG name> Description of Working Group: The IETF is committed to the deployment of IPv6 to ensure the evolution of the Internet. However, the IPv4-only components of the Internet must continue to operate as much as possible during the transition from IPv4 to IPv6. The Working Group will standardize technologies that facilitate the graceful sunsetting of the IPv4 Internet in the context of the exhaustion of IPv4 address space while IPv6 is deployed. These technologies will likely be less optimal than equivalent technologies for IPv6-only and dual-stack networks. The Working Group works only on IPv4 protocols to facilitate IPv4 sunsetting. The Working Group may work on fixing security bugs in existing IPv4-specific protocols but is not chartered to add new security functionality to those protocols. The working group will provide a single venue for the consideration of IPv4 sunsetting, while ensuring that any such technologies do not impede the deployment of IPv6 and do not duplicate functions and capabilities already available in existing technologies. Therefore, along the lines of draft-george-ipv6-support, before the working group adopts any technology, it must: 1) describe the problem to be solved and show that there is widespread demand for a solution 2) demonstrate that the problem can not be solved with existing technologies 3) provide a description of the proposed solution along with the impact on current IPv4-only use and its ability to promote the deployment of IPv6 These steps will likely be described in the form of a use case and requirements document. Only after the above mentioned steps have been completed and the results accepted by the community will the IETF consider adding new work items to the Working Group charter. This new work may include protocol specifications. The work spans over multiple IETF areas including as Internet, Operations, Transport and Routing. Therefore, cross-area coordination and support is essential and required. Any work on IPv4 to IPv6 transition methods is out of scope. The initial work items are: * Review current CGN documents, including requirements for standardization, and determine is CGN is a suitable sunsetting technology to become a work item * Gap analysis of IPv4 features to facilitate IPv4 sunsetting Milestones 2012-09 Complete review of CGN and, if necessary, propose CGN work items 2013-06 Send gap analysis on IPv4 sunsetting to IESG

1 0

Slides for "Recent Advances in IPv6 Security" at Hackito Ergo Sum 2012
by Fernando Gont 16 Apr '12

16 Apr '12

Folks, The slides for my presentation entitled "Recent Advances in IPv6 Security" at Hackito Ergo Sum 2012 (http://2012.hackitoergosum.org/) are available at: <http://www.si6networks.com/presentations/HES2012/fgont-hes2012-recent-advan…> The same slides are available in other formats at: <http://www.si6networks.com/presentations/index.html> Thanks! Best regards, -- Fernando Gont SI6 Networks e-mail: fgont(a)si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

1 0

Slovenian IPv6 study for government - now available in English language
by Jan Zorz ＠ go6.si 11 Apr '12

11 Apr '12

Dear @IPv6 WG Long time promised Slo IPv6 study, done for our government in 2010 is now available in English language. The authors did a revision and added few changes just in order to make document more "current". All in all, many things that we wrote is 2010 still holds. You can download the PDF from following page: http://go6.si/en/2012/04/slovenian-ipv6-study-english-version/ In the doc there are 11 key questions from governmental point of view and many answers to them. Hope that this work can help some governments in their way towards IPv6. See you all in few days, Jan Zorz Go6 Institute.

1 0

Preview of the final RIPE-501bis.
by Jan Zorz ＠ go6.si 10 Apr '12

10 Apr '12

Dear IPv6 WG. After long and exhausting IETF week, where we met with some great experts from the industry and did some sanity checks and corrected some mistakes and misunderstandings in the RIPE-501-replacement document, we are issuing next (9th) version of the draft, that is in our opinion really final one. I mean it. Last one. There was lot's of time, efforts and work put into this document and I think we are done. This replacement document is also meant as a some kind of input or initial template for EU IPv6 profile, so we wanted it to be very solid and accurate. Thanks to all of you involved, you know who you are (you are all in Acknowledgements section ;) ) and thnx to this WG and their co-chairs for support, help and all good comments. We already set the last version to RIPE-NCC for grammar checks and conversion into HTML in order to appear in RIPE Documents section as a draft, but meantime, we are publishing the last version also in PDF in order for you, community, to read it prior to RIPE64 meeting. http://go6.si/docs/Requirements-for-IPv6-in-ICT-equipment-v.9.pdf Please, those of you who are interested and have time, read it and express you r opinions and possible comments. Rumor has it, that we'll have "review" period over the RIPE64 meeting and Last call shortly after that. As this is not an official PDP, we can also propose chairs to change the procedure, if there is any need for that. Track of the progress and different versions of the draft can be found at: http://go6.si/ripe501bis/ Cheers from co-authors: Merike, Sander and Jan

3 3

IPv6 stable privacy addresses
by Fernando Gont 10 Apr '12

10 Apr '12

Folks, We've posted a revision of our IETF Internet-Draft entitled "A method for Generating Stable Privacy-Enhanced Addresses with IPv6 Stateless Address Autoconfiguration (SLAAC)". The document is available at: <http://tools.ietf.org/id/draft-gont-6man-stable-privacy-addresses-01.txt> The abstract of the document is: ---- cut here ---- This document specifies a method for generating IPv6 Interface Identifiers to be used with IPv6 Stateless Address Autoconfiguration (SLAAC), such that addresses configured using this method are stable within each subnet, but the Interface Identifier changes when hosts move from one network to another. The aforementioned method is meant to be an alternative to generating Interface Identifiers based on IEEE identifiers, such that the benefits of stable addresses can be achieved without sacrificing the privacy of users. ---- cut here ---- Interested in IPv6 security? -- Follow us on Twitter: @SI6Networks Interested in discussing IPv6 security topics? -- Join the ipv6hackers@ mailing-list at: <http://www.si6networks.com/community/mailing-lists.html> Thanks! Best regards, -- Fernando Gont SI6 Networks e-mail: fgont(a)si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

1 0

IPv6 SIM cards at RIPE64
by Jan Zorz ＠ go6.si 03 Apr '12

03 Apr '12

Dear IPv6 WG :) For those who are attending RIPE64 meeting in Ljubljana: We just got confirmation from Simobil, one of mobile operators that deployed IPv6 in their mobile network, that they will provide 100 SIM cards for RIPE64 attendees. The cards will be pre-provisioned with IPv6 APN and IPv6 traffic for free. Of course, don't misuse them as they might throttle you if they see any abuse or misuse. For those, who will need also to make phone calls and SMS-es or IPv4 traffic, 5EUR vouchers will be available. Official announcement will go out on a general mailing list, just wante to give you heads-up :) So, fellow IPv6-ers, bring your IPv6 capable devices and enjoy the "IPv6 is in the air" feeling during the RIPE64 meeting in Ljubljana. FYI: Nokia phones works, Android 4 phones usually works, etc... See you in less than two weeks, Jan Zorz, Go6.si

1 0

Re: [ipv6-wg] 2010 IPv4 (and IPv6) Address Use Report
by Silvia Hagen 27 Mar '12

27 Mar '12

Hi Iljitsch Are you updating these for 2011? Thanks Silvia Sunny Connection AG www.sunny.ch +41 (0)44 887 62 10 shagen(a)sunny.ch **************************************************** The new book "Planning for IPv6" has been published with O'Reilly in September 2011. **************************************************** Our website is dual-stack and can be accessed with IPv4 and IPv6 **************************************************** >>> Iljitsch van Beijnum<iljitsch(a)muada.com> 04.01.2011 12:30 >>> [ (Non-cross)posted to NANOG, PPML, RIPE IPv6 wg, Dutch IPv6 TF. ] On the web: IPv4: http://www.bgpexpert.com/addrspace2010.php IPv6: http://www.bgpexpert.com/addrspace-ipv6-2010.php The IPv4 one is included below: 2010 IPv4 Address Use Report As of January 1, 2011, the number of unused IPv4 addresses is 495.66 million. Exactly a year earlier, the number of available addresses was 721.06 million. So we collectively used up 225.4 million addresses in 2010. 35 of the 256 the /8s that make up the IPv4 address space have the status "reserved". 0 and 127 have special meaning and can't be used for normal purposes. 224 - 239 are used for multicast and 240 - 255 are "reserved for future use". With only about two years worth of IPv4 addresses remaining on the shelves, it would seem that that future is here now, but unfortunately, pretty much all operating systems balk at using a "reserved" address. So unreserving those addresses means upgrading EVERY system connected to the Internet. If we're going to do that, we may as well skip those reserved IPv4 addresses and upgrade to IPv6. Last but not least, there's block 10, which is the largest of the three address blocks set aside for private use. The others, 172.16.0.0/12 and 192.168.0.0/16, don't show up as reserved, but are obviously not available for regular use. This makes the total number of usable IPv4 addresses is (256 - 35) * 2^24 - 2^20 - 2^16 = 3706.65 million addresses. The "IANA global pool" consists of 7 /8s (117.44 million) are still unused (unallocated): 39/8, 102/8, 103/8, 104/8, 106/8, 179/8 and 185/8. But there's also a lot of unused space hiding in the "allocated" and "legacy" categories. Each RIR publishes a list of address blocks further delegated to ISPs or end users every day on their FTP servers. If we add up all those blocks, this comes out to 3210.99 million addresses. So the total number of usable-but-unused IPv4 addresses is 3706.65 - 3210.99 = 495.66 million. Going back to the IANA global pool, these are the changes over the past year: Delegated Blocks +/- 2010 to/status AfriNIC 3 +1 APNIC 42 +8 ARIN 35 +4 LACNIC 8 +2 RIPE NCC 34 +4 LEGACY 92 UNALLOCATED 7-19 There is an agreement between IANA and the RIRs that each RIR will get one of the last five /8s. APNIC has been getting two /8s every three months like clockwork in 2010. If this continues, they'll be getting numbers 7 and 6 later this month, and then the final distribution will look like this: Delegated Blocks +/- 2010 to/status AfriNIC 4 APNIC 45 ARIN 36 LACNIC 9 RIPE NCC 35 LEGACY 92 UNALLOCATED - At this point, it becomes very interesting what the status of the legacy space is, exactly. The legacy blocks are each "administered" by one of the RIRs, but does that mean that that RIR is free to further delegate that space to ISPs and end users? There are 146.92 million unused addresses in legacy space, including 16.65 million returned by Interop a few months ago. This is the used versus unused address space administered by each RIR: Legacy Allocated total unused total unused AfriNIC 33.55 24.85 50.33 27.06 APNIC 100.66 22.32 704.64 44.38 ARIN 654.31 60.55 587.20 56.21 LACNIC - - 134.22 37.39 RIPE NCC 67.11 5.77 570.43 67.38 IANA 671.09 16.65 - - AfriNIC used up 8.95 million addresses last year. So their current unused allocated space is good for another three years (if nothing changes) and their final /8 is worth another almost two years. If they get to use their legacy space, that buys them another 2.5 years. So unless IPv4 address use <em>really</em> takes off in Africa, AfriNIC will be handing out addresses for at least three or four years. APNIC is at the opposite end of the spectrum, using up no less than 126.22 million new IPv4 addresses last year. Even if they get to use the legacy space they administer on top of three of the last seven /8s and, it's hard to see how APNIC can avoid having to tell people "no" before the year is out. However, there is a caveat: in the 2010 APNIC records, there is 6.65 million addresses worth of space that isn't in the 2011 records. Part of this is address space returned to APNIC. In other cases, an address block delegated in a previous year expands or shrinks retroactively. Depending on what the underlying reason for these changes is, the actual rate at which APNIC and the other RIRs are giving out address space may be different from what it seems to be at first glance. ARIN, LACNIC, and the RIPE NCC used up 54.55, 17.29, and 75.45 million addresses, respectively, in 2010. However, ARIN saw 27.24 million addresses returned, including the 16.65 million from Interop, which is administered in the ARIN records even though the IANA list doesn't reflect this. For AfriNIC, LACNIC and the RIPE NCC the numbers of addresses that came back were 0.31, 0.22, and 22.62 million, respectively. With respect to running out of addresses, it's important to realize that the Pareto principle (the 80/20 rule) applies: out of the 7686 address blocks given out last year, only 392 (5 percent) were blocks larger than 100,000 addresses, but those were responsible for 82 percent of the address <em>space</em> given out. Even when the RIRs are no longer able to give out those large blocks, they may still be able to fulfill the requests for address blocks smaller than 10,000 addresses. Last year, 6425 such blocks were given out, totaling 14.03 million addresses. It really only takes a single address to be in the content business; it's the ISPs that need a continuous supply of new addresses to connect new customers. So the address shortages looming beyond the summer will hit ISPs and their broadband/mobile customers first and foremost, and the content industry to a much lesser degree. The top 15 IPv4 address holding countries: 2011-01-01 2010-01-01 Increase Country 1 - US 1519.53 M 1495.13 M 1.6% United States 2 - CN 277.64 M 232.45 M 19.4% China 3 - JP 186.82 M 177.15 M 5.5% Japan 4 - EU 151.80 M 149.48 M 1.6% Multi-country in Europe 5 (6) KR 103.50 M 77.77 M 33.1% Korea 6 (5) DE 91.61 M 86.51 M 5.9% Germany 7 (9) GB 82.25 M 74.18 M 10.9% United Kingdom 8 - CA 79.53 M 76.96 M 3.3% Canada 9 - FR 79.29 M 75.54 M 5.0% France 10 - AU 49.10 M 39.77 M 23.5% Australia 11 - BR 40.24 M 33.95 M 18.5% Brazil 12 - IT 37.14 M 33.50 M 10.9% Italy 13 - RU 34.66 M 28.47 M 21.7% Russia 14 - TW 31.93 M 27.10 M 17.8% Taiwan 15 (19) IN 28.70 M 19.42 M 47.8% India Because the US holds so much space, the increase of 25 million addresses seems small, but that's still more than 10% of the address space given out in 2010. China's growth is slowing down a little at 45 million addresses last year compared to 50 million in 2009. But other countries in Asia are picking up the slack and then some: Korea keeps using up large amounts of address space, and India is now also picking up the pace. The US now has 47.3% of the address space in use, down from 50.1% a year ago. The other countries in the top 15 collectively hold 39.7%, up from 38%. That leaves 13% for the rest of the world, up from 12%. Note that I slightly changed the way addresses are counted: previously, all the legacy blocks that didn't have an RIR listed were assumed to be used 100%. But with the return of most of the Interop block this is no longer the case: although ARIN isn't listed as administering the 45/8 block, they actually are and only have 45.0.0.0/15 listed as in use.

2 1

RIPE-501bis: Some additional IPsec comments from Tero Kivinen
by Jan Zorz ＠ go6.si 21 Mar '12

21 Mar '12

Dear IPv6 WG... We received some additional comments from Tero Kivinen. Tero is one of THE experts in IPsec and a long-time implementer. He is part of IETF IPsec wg and a key contributor. As he's not on RIPE IPv6 WG mailinglist, I'm adding him to cc: and at the same time encouraging him to subscribe in order to follow and contribute to the discussion: http://www.ripe.net/mailman/listinfo/ipv6-wg So, his comments are listed below. We would like to "measure the heat" in working group and hear some comments, what you think should be implemented and what not. I explained, that we have certification/testing profiles (NIST, USGv6, IPv6 Ready, etc...) and we have RIPE-501 (soon replaced), that is procurement profile, intended solely as a help to procurement people (usually IPv6-clueless) to order equipment, that makes sense. Tero's comments: -------- In section IPsec: mandatory or optional, I would format the end as following: ---------------------------------------------------------------------- Organizations that use IPsec or expect to use it in the future should include the follwoing in the mandatory section when initiating the tender: * IPsec-v3 [RFC4301, RFC4303, RFC4302] * IKE version 2 (IKEv2) [RFC5996 (obsoletes RFC4306 and RFC4718)] and if support for old IPsec is required add following: * IPsec-v2 [RFC2401, RFC2406, RFC2402] * IKE version 1 (IKEv1, ISAKMP) [RFC2407, RFC2408, RFC2409] ---------------------------------------------------------------------- I.e. prefer IKEv2, and move IKEv1 as separate case. Also note that IKEv1 is tied to IPsec-v2 and IKEv2 is tied to IPsec-v3 and you cannot really mix them that well. Note, also that RFC5996 obsoletged both RFC4306 and RFC4718. This same change should also be done for other places. Also I would rather use IKEv1 than ISAKMP for the old obsoleted key management protocol. ISAKMP is the name of framework on which the IKEv1 protocol is based on (and IKEv2 is also based mostly on the same framework, but everything from that framework document got incorporated to the IKEv2 RFC, so thats why it is not referenced anymore). It seems you do not have IPsec-v2 anywhere, even when you do have IKEv1. What is the reason behind that? IKEv1 works with IPsec-v2, and IPsec-v3 do require IKEv2, so am not sure why IKEv1 is included at all... There are multiple cases where you have "if xxx is requested the equipment must support yyy", where that yyy do require IPsec. Should those be spelled out too. For the Requirements for Mobile Devices the optional support list should probably include RFC4555 IKEv2 Mobility and Multihoming Protocol (MOBIKE), as it is something that is really useful in the mobile nodes. Requirements for Load Balancers: Now the mandatory support has only IKEv1 (ISAKMP), and no IPsec-v2/v3 at all. There isn't really that much that can be done using IKEv1 only. IKEv2 + RFC5685 (Redirect Mechanism for the Internet Key Exchange Protocol Version 2 (IKEv2).) would make some sense even without IPsec-v3, but IKEv1 does not even have any such uses. The optional support list should probably have RFC5685 (Redirect Mechanism for the Internet Key Exchange Protocol Version 2 (IKEv2).) and perhaps RFC6311 (Protocol Support for High Availability of IKEv2/IPsec). The optional list has IKEv1 (ISAKMP) again. ----------- (end of Tero's comments) I think we still are in review phase, so we can implement some changes. I hear that Last Call is planned for after RIPE64 meeting, so we still have time for last changes. As usual, comments and suggestions very warmly welcome. Cheers, Jan Zorz (writing for all co-authors) Go6 Institute Slovenia

3 4

New on RIPE Labs: Growth in IPv6 Capable Infrastructure
by Mirjam Kuehne 19 Mar '12

19 Mar '12

Dear colleagues, Please see this new article on RIPE Labs: "Growth in IPv6 Capable DNS Infrastructure: https://labs.ripe.net/Members/emileaben/growth-in-ipv6-capable-dns-infrastr… Kind regards, Mirjam Kuehne RIPE NCC

1 0

New on RIPE Labs: IPv6 Deployment: Trends and Tidbits of 4, 800 Dual-stack ASes
by Mirjam Kuehne 08 Mar '12

08 Mar '12

Dear colleagues, Please find a new article on RIPE Labs, contributed by Matthew Luckie, Amogh Dhamdhere and Brad Huffaker from CAIDA: "IPv6 Deployment: Trends and Tidbits of 4,800 Dual-stack ASes" https://labs.ripe.net/Members/mirjam/ipv6-deployment-trends-and-tidbits Kind Regards, Mirjam Kuehne RIPE NCC

1 0

New on RIPE Labs: ASes Announcing IPv6 - One Year Later
by Mirjam Kuehne 05 Mar '12

05 Mar '12

Dear colleagues, Please find a new article on RIPE Labs showing the percentage of ASes announcing IPv6: https://labs.ripe.net/Members/mirjam/networks-with-ipv6-one-year-later It is interesting to see what has changed since we presented this graph for the first time about one year ago. Kind regards, Mirjam Kuehne RIPE NCC

1 0