- ipv6-wg - mailman.ripe.net

Agenda for IPv6-wg @ RIPE 60 (v2)
by Shane Kerr 27 Apr '10

27 Apr '10

All, An updated version of the agenda. ------------------------------------------------------------------- The IPv6 working group is scheduled for the same time at RIPE 60 in Prague as it was in RIPE 59 - immediately following the plenary on Tuesday. Here is a proposed agenda: A. Administrative stuff - Introduction - New charter - New chairs - Agenda bashing B. IPv6 at Web Clients and Caching Resolvers by Emile Aben, RIPE NCC C. IETF v6ops activity by Kurt Lindqvist, Netnod D. CPE Overview by Marco Hogewoning, XS4ALL E. IPv6 WorldWide Policy Review by Filiz Yilmaz, RIPE NCC F. Mobile broadband and IPv6 in Slovenia by Jan Zorz, go6.si G. Update on Recent RIPE NCC IPv6 Activity by Christ Buckridge, RIPE NCC H. IPv6-wg brainstorming . . . Y. Input for the RIPE NCC Activity Plan Z. AOB & wrap-up The "brainstorming" session is an attempt to have some discussion about concrete ideas that we can use to reach the goals of the new charter. Marco will lead the session, but hopefully everyone will come with new ideas ready and join in. -- Shane

1 0

Major additions to Team Cymru's Bogon Feed - includes IPv6 prefixes
by Steve Santorelli 19 Apr '10

19 Apr '10

Team Cymru is pleased to announce a significant addition to our bogon reference project which might be of interest to this list as it relates to IPv6 matters. The new portions of the project are offered at no cost to the community, and the original bogon lists and feeds are not being changed or canceled, just augmented. The new "fullbogon" feed includes prefixes allocated to RIRs, but not assigned by the RIRs to end-users, ISPs, etc, providing a more complete view of the unassigned space that should not be seen on the Internet. This new service is therefore more granular than the original feed, including a wide variety of non-routable prefixes as well as unassigned prefixes and it also includes IPv6 prefixes. Simply email bogonrs(a)cymru.com with your ASN, peering IP addresses and whether you use MD5 authentication. See an overview in the 46th episode of Team Cymru's 'The Who and Why Show' at www.youtube.com/teamcymru, as well as a more basic overview in episode 12. For a more detailed explanation, see <http://www.team-cymru.org/Services/Bogons/>. Even more so than the original feed, there are significant changes to the list every day and the feed automatically recalculates the prefixes as they are allocated from the regional registries, so make sure you are able to regularly update your lists. Internet security is all about "the other guy." If one sizeable network is insecure, it WILL be used to abuse other networks. We look forward to continuing to help our community to secure the edge. Why is this important? Bogons are defined as Martians (private and reserved addresses defined by RFC 1918 and RFC 5735) and netblocks that have not been allocated to a regional internet registry (RIR) by the Internet Assigned Numbers Authority. A bogon prefix is a route that should never appear in the Internet routing table on a Router. A packet routed over the public Internet (obviously, not including over VPNs or other tunnels) should never have a source address in a bogon range. These are commonly found as the source addresses of DDoS attacks and our research has previously shown that, in some cases, up to 60% of DDoS packets were obvious bogons (e.g. 127.1.2.3, 0.5.4.3, etc.). This new service comprises a larger set which also includes IP space that has been allocated to an RIR, but not by that RIR to an actual ISP or other end-user. While not all DDoS attacks use bogons, every little bit helps. Note additionally that bogon filtering is a component of anti-spoofing filtering, which is also very important. Internet security is all about "the other guy." If one sizeable network is insecure, it WILL be used to abuse other networks. We look forward to continuing to help our community to secure the edge. warm regards, Steve. -- Steve Santorelli,Team Cymru, Inc.|www.team-cymru.org steve(a)cymru.com|[moderated] Also, please note that there are many way to keep up with what Team Cymru are doing, see the lower part of: http://www.team-cymru.org/About/contact.html plus: * join our announce list via cymru-announce-subscribe(a)cymru.com * see what we see, www.team-cymru.org/Monitoring/Graphs * probably the best news feed in the world, www.team-cymru.org/News * cool stuff you can use, www.team-cymru.org/Services/ * see our Twitter feed at http://twitter.com/teamcymru

1 0

The end of IPv4 and the arrival of IPv6 in spanish newspaper
by García Fernández, Fernando 10 Apr '10

10 Apr '10

It seems that it's finally getting to the mass media. A spanish newspaper (Publico, one of the top ten if you can say clasify them), publish an article called "Internet runs out of address" with the subtitle "The OCDE tells that we must speed up the deployment of the new protocol IPv6". I think this is a good start. For those who understand spanish (or who dare to believe to Google translation) here is the URL: http://www.publico.es/ciencias/305214/internet/quedasin/direcciones Regards, Fernando -- Tecnocom Fernando García Fernández D.G. Integración de Redes y Sistemas Josefa Valcarcel, 26 Edificio Merrimack III Madrid - 28027 Tel. Fijo: 901900900 ext 40383 Fax: (+34) 914313240 Tel. Móvil: (+34) 649428591 E-mail: fernando.garcia(a)tecnocom.es http://www.tecnocom.es

1 0

Question on Challenges of IPv6 deployment
by Edu Abume 05 Apr '10

05 Apr '10

Hi, This site has been very educative and helpful to me. Can anyone tell me: The challenges organizations face with IPv6 deployment, The organizational settings (types) that really needs to deploy quickly and Probably the deployment methodologies they prefer to use. Thanks. Edu

1 0

IPv6 brokenness in Norway, March 2010 (fwd)
by Tore Anderson 01 Apr '10

01 Apr '10

Hi, I've been posting these reports to the ipv6-ops list for some time now. Shane Kerr asked if I could post them here too, something which I don't mind doing at all, so here comes the one for March: -------- Opprinnelig melding -------- Emne: IPv6 brokenness in Norway, March 2010 Dato: Thu, 01 Apr 2010 01:35:01 +0200 Fra: Tore Anderson <tore.anderson(a)redpill-linpro.com> Organisasjon: Redpill Linpro AS Til: ipv6-ops(a)lists.cluenet.de Hi list, I'm happy to announce that the client loss is at an all-time low: 0.074% over the whole month, and it's been steadily decreasing. Buggy versions of Opera as well as Mac OS X appears to be responsible for about 95% of all measured client loss. Some noteworthy dates and events: 20100302: Opera 10.50 released, using getaddrinfo() on Windows. Gets an initial boost thanks to the Microsoft browser ballot. 20100322: Opera pushes 10.51 to their auto-update function. 20100324: A-Pressen Interaktiv re-joins the experiment. 20100327: First day of (extended) Easter holiday for many Norwegians. 20100331: The Gathering, a large data-party, kicks off. Provides native IPv6 connectivity to all participants. The numbers show that the release of Opera has helped quite a lot. Before the release of 10.50, the overall client loss was above 0.090%, but already right before Easter holiday it's below 0.065%. Easter holiday shows an interesting effect - both the measured amount of native IPv6 _and_ client loss drop sharply. The reason for this is that there's one particular network here in Norway that is the by far largest deployment of native IPv6 (about 80-85% of all requests over native IPv6 comes from it), but it is at the same time one of the largest causes of client loss, because it aggravates the Mac OS X/Opera problems significantly by filtering 6to4 traffic on ingress for a large number of end users (that have no native IPv6 service). The typical user on this network is also much more likely to take an extended Easter holiday than the the rest of Norway's population, I believe. I've been measuring the uptake of Opera 10.50+ on Windows Vista/7 in the whole period, and it has been steadily increasing even during the extended Easter holiday. About 72.5% of the Win Vista/7 Opera users were using 10.50+ at the end of the month. So while I do expect the client loss number to rebound somewhat when Easter holiday is over (on the 6th of April), I will be very surprised if it stabilises higher than 0.06-0.07%. The Mac OS X problem appears to occur when a client station has internet service using NAT/RFC 1918 numbering for IPv4, and 6to4 for IPv6. The Apple Airport Extreme SOHO router can operate in this way, and did so by default up until recently. In this case, OS X, or more precisely its getaddinfo() implementation, will prioritise 6to4 over IPv4. In addition, GNU libc (therefore all major Linux distributions) behave in the same way, but I'm not able to measure any impact, probably because there's so few Linux users to begin with. The issue is not actually a bug, but a shortcoming of RFC 3484. I've elaborated on it in reports to Apple and the glibc developers here: http://lists.apple.com/archives/Ipv6-dev/2010/Mar/msg00003.html http://sourceware.org/bugzilla/show_bug.cgi?id=11438 As an aside it's a bit fun to see how a relatively small deployment of IPv6 eyeballs like the data party (around 5000 participants I think) can dramatically change the amount of hits coming in from hosts with native IPv6. It more than doubled overnight. There's two reports attached, one generated from the readers of VG Multimedia - the online edition of Norways largest newspaper, and also Norway's largest web site, and the other from the readers of A-Pressen Interaktiv - an umbrella organisation that publishes the online editions of about 70 regional newspapers. When put together, they constitute Norway's fourth largest web site. In addition to the overall calculation, I've done five other calculations so you can see the individual impact of the different problems I've identified: - One that excludes hits from buggy versions of Opera on Windows Vista/7 (which auto-configures 6to4 and Teredo by default) excluded, - one that excludes hits from buggy versions of Opera on other versions of Windows (where a user must explicitly enable 6to4/Teredo), - one that excludes all hits from Mac OS X, - one that excludes all of the above, and - one that excludes all hits from the two significant end-user networks in Norway that filter 6to4 ingress traffic (one of them is the one I discussed above). This calculation does _not_ exclude Opera/OS X; when Opera and OS X are excluded, the two networks have about the same levels of client loss as rest of the internet. The seventh column shows approximately how much of the total client loss would have been avoided (in percentage points and percent), if the software in question didn't prefer 6to4 over IPv4, or, in the last case, if the two end-user networks mentioned didn't filter 6to4 on ingress. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54 41 27

1 0

ipv6 multicast
by Kristoff Bonne 01 Apr '10

01 Apr '10

Hi, As multicast is part of standard ipv6-stack, I was wondering how many ISPs who have ipv6 enabled have (or plan to have) ipv6 enabled on their backbone. Are there any statistics on this? Cheerio! Kr. Bonne.

1 0

IPv6 Pilot in NL: seeking customers
by Marco Hogewoning 30 Mar '10

30 Mar '10

(wearing my XS4ALL hat) We just announced to the media we are expanding our current trials to support native IPv6 over DSL to 1000 lines. These 1000 places are given away on a first come first serve basis. To give everybody a fair chance people can subscribe to this pilot starting Friday April 2nd, 12:00 CEST. In this pilot we ask for people to supply their own DSL cpe which is IPv6 capable or even hack around with linux images where possible. This pilot will serve 3 main goals: - Test interoperability between our gear and setup and the solitions currently on the market - Test those CPE solutions in the wild, we tested some of them in our own lab but it's hardly the same as everyday use in a random residential environement. - Fine tune our support procedures and figure out what training is needed. Next to that We'd love to see what problems will arise when IPv6 is switched on in a regular residential networking environment. Now obviously, since this is a DSL pilot there are some geographical boundaries on who can enter. If you happen to live in the Netherlands and are an XS4ALL customer please do subscribe. We already posted a list with some of the CPE we have tested and are known to work, these include some AVM FRITZ!Box models, some cisco SOHO boxes (8xx serie) and the latest release of Draytek Vigor. If you happen to know some others or happen to built DSL modems yourself, please contact me of list. Basic requirements are ADSL2+ with PPPoA, IPCP and IPv6CP using DHCPv6-PD to get the addresses. As a first result, the press release was picked up by a lot of media and the comments are mostly positive. Hopefully in a few weeks time we have some more data to report on. The original annoucement (in Dutch): http://www.xs4all.nl/klant/ipv6/ MarcoH

1 0

Internet Society IPv6 Workshop
by Phil Roberts 30 Mar '10

30 Mar '10

The Internet Society is hosting an IPv6 Deployment Day on April 22 in Seattle, Washington. The meeting is intended for operators who have deployed, are deploying, or are planning to deploy IPv6 in their networks. The proposed topics include business related issues for IPv6 deployment, discussion of pitfalls in IPv6 deployment, and specific technical issues due to IPv6 deployment that potentially affect the whole Internet. This is an open meeting and all are welcome, but space is limited so you will need to register: https://www.isoc.org/isoc/conferences/registration/?id=7ce20e4c88b7e328. If you have any questions please feel free to contact me, Phil Roberts (roberts(a)isoc.org), or Mat Ford (ford(a)isoc.org).

1 0

Spam sent over IPv6 - See results on RIPE Labs
by Mirjam Kuehne 30 Mar '10

30 Mar '10

[apologies for duplicates] Dear colleagues, We were curious to see how much spam is sent over IPv6 these days. Find the results on RIPE Labs: http://labs.ripe.net/content/spam-over-ipv6 We will continue to measure this. If you have any comments or suggestions, please let us know. Kind Regards, Mirjam Kühne

1 0

Measuring IPv6 at Web Clients and Caching Resolvers
by Mirjam Kuehne 25 Mar '10

25 Mar '10

[apologies for duplicates] Dear colleagues, As the remaining IPv4 space continues to shrink, it’s important to keep an eye on how the IPv6 Internet develops. We prototyped a method to measure the IPv6 capabilities of caching DNS resolvers that end-users use when browsing the web. The results of these measurements are now published on RIPE Labs: 1. A summary of the measurements and results can be found here: http://labs.ripe.net/content/measuring-ipv6-web-clients-and-caching-resolve… 2. Some more detailed analysis (including a breakdown of IPv6 usage per country and city) are here: http://labs.ripe.net/content/measuring-ipv6-web-clients-and-caching-resolve… 3. The methodology we use for these measurements are described here: http://labs.ripe.net/content/measuring-ipv6-web-clients-and-caching-resolve… All articles can be accessed from the RIPE Labs home page at http://labs.ripe.net If you have any comments or suggestions, please do not hesitate to submit them to the RIPE Labs forum or send them directly to me. Kind Regards, Mirjam Kuehne RIPE NCC

1 0