Deploying IPv6 in days: Tore Anderson

Slides:



Advertisements
Similar presentations
Measuring IPv6 Geoff Huston APNIC Labs, February 2014.
Advertisements

DNS Issues Within Native IPv6 GEANT GEANT-TF, Amsterdam, 06/06/2003.
Lecture 2 Page 1 CS 236, Spring 2008 Security Principles and Policies CS 236 On-Line MS Program Networks and Systems Security Peter Reiher Spring, 2008.
| Copyright © 2009 Juniper Networks, Inc. | 1 SURVEY OF IPV6 ENABLED SERVICES Mark Prior, Liaison APAC R&E Community APAN 27, 4 March 2009.
By: Eng. Kais A. Al-Essa Operations & Technical Services Manager Sahara Net’s Road to IPv6 Readiness.
IPv6 experience in NITC Ghalib Kharabsheh
Installing a New Windows Server 2008 Domain Controller in a New Windows Server 2008 R2.
LEARN THE QUICK AND EASY WAY! VISUAL QUICKSTART GUIDE HTML and CSS 8th Edition Chapter 21: Publishing Your Pages on the Web.
Ch 8-3 Working with domains and Active Directory.
ADO Connect Y.-H. Chen International College Ming-Chuan University Fall, 2004.
NATIONAL NODES OF THE BIOSAFETY CLEARING- HOUSE CANADIAN SYSTEM OVERVIEW Caribbean Islands Workshop December 2005 Bridgetown, Barbados.
Ideas to Improve SharePoint Usage 4. What are these 4 Ideas? 1. 7 Steps to check SharePoint Health 2. Avoid common Deployment Mistakes 3. Analyze SharePoint.
October 8, 2015 University of Tulsa - Center for Information Security Microsoft Windows 2000 DNS October 8, 2015.
Deploying a Web Application Presented By: Muhammad Naveed Date:
1 Kyung Hee University Chapter 18 Domain Name System.
(ITI310) By Eng. BASSEM ALSAID SESSIONS 9: Dynamic Host Configuration Protocol (DHCP)
IPv6 Matrix Project - Page 1 IPv6 Matrix Project Tracking IPv6 connectivity Worldwide Dr. Olivier MJ.
Harness Your Internet Activity. AAAA Deep Dive DNS-OARC, Buenos Aires March 2016 Ralf Weber.
Microsoft Exam
Basic Web Design UVICELL Week 4 Templates and site management Week 4 Templates and site management.
PRODUCTS CONSULTING APPLICATION MANAGEMENT IT OPERATIONS SUPPORT TRAINING Norway: IPv6 World Leader? Tore Anderson CG Security and Networking Redpill Linpro.
SIIT-DC: IPv4 Service Continuity for IPv6 Data Centres
1 Distributed DNS best practices to build redundant, reliable & scalable DNS architecture By Ladislav Vobr SE/SOP/I&eS Etisalat, UAE.
Single-stack IPv6-only data center deployments
Understand Names Resolution
Chapter 7. Identifying Assets and Activities to Be Protected
Chapter 25 Domain Name System.
Domain Name Registration, ICANN, Registrars & Hosting Options
A quick introduction to: DNS64, NAT64, 464XLAT, SIIT-DC, SIIT-DC-2XLAT
Database backed DNS.
Physical Fitness Sarah Klotz.
1 VO User Team Alarm Total ALICE ATLAS CMS
SIIT-DC: IPv4 Service Continuity for IPv6 Data Centres
SIIT-DC: IPv4 Service Continuity for IPv6 Data Centres
Novell BorderManager®: Advanced Packet Filtering
SIIT-DC: IPv4 Service Continuity for IPv6 Data Centres
SIIT-DC: IPv4 Service Continuity for IPv6 Data Centres
Lab 10 Overview DNS.
Data centre transformation
Days of the Week Les docs d’Estelle –
Welcome To : Group 1 VC Presentation
How do You attend the meetings?
DAYS OF THE WEEK.
The Very Hungry Caterpillar
Time management School of Rock.
Sunday Monday Tuesday Wednesday Sunday Monday Tuesday Wednesday
We don’t need IPv6.
Ad-Supported TV Accounted For Nearly 8 Of The Top 10 Trending Twitter Topics Throughout Primetime Hours Even though this analysis was done during the mid-October.
Third Grade Newsletter
Ip addressing: dhcp & dns
Days of the Week Monday Tuesday Wednesday Friday Thursday Saturday
IPv6 Allocation Service in JPNIC
Get Ready for the New Internet: IPv.6
Time 1.
Contact
Positive Behavior Interventions & Supports
The Boy in the Striped pajamas gr. 02
NOVEMBER READING LOG Student: When you have read, record your minutes and have your parent initial the proper box (each day). At the end of the month,
7th Grade Math Warm-ups Week of September 12-16, 2016.
Office 365 – How NOT to do it UKNOF43.
7th Grade Math Warm-ups Week of October 3-7, 2016.
7th Grade Math Warm-ups Week of October 24-28, 2016.
Security Principles and Policies CS 236 On-Line MS Program Networks and Systems Security Peter Reiher.
DECEMBER READING LOG Student: When you have read, record your minutes and have your parent initial the proper box (each day). At the end of the month,
WEEK 1 Monday Tuesday Wednesday Thursday Friday Saturday Sunday
2011年 5月 2011年 6月 2011年 7月 2011年 8月 Sunday Monday Tuesday Wednesday
Year 11 Friday, 26 July 2019.

Securing web applications Externally
BOOKINGS – Monday, 2nd July BAYWAVE
Presentation transcript:

Deploying IPv6 in 10 11 days: Tore Anderson tore@redpill-linpro.com Redpill Linpro AS RIPE67, Greece, October 2013

Day 0: Thursday, October 3rd, 2013 RIPE67 attendance confirmed, everything booked, woho! It's customary to bring a nice suprise for the hosts...but what? 24 Media is Greece's largest digital publishing group Their server infrastructure is hosted in my data centres and their CMS and other applications are managed by my colleagues But they do not have IPv6! Fixing that ought to be a nice surprise... I aired the idea for 24 Media late in the afternoon Early Friday came the response: «Fantastic idea, let's do it!» 10 days to go – including two weekends! – would we make it?

Provision an IPv6 prefix Day 1: Friday, October 4rd, 2013 Step 1: Provision an IPv6 prefix to the frontend LAN Frontend node 1 Frontend LAN (DMZ) Backend LAN (web servers, database servers, etc. etc. etc.) [IPv4-only] RL core net (and Internet) Frontend node 2

Day 1: Friday, October 4rd, 2013 Step 2: Add an IPv6 service address to the Heartbeat configuration (1 additional line of config) Step 1: Provision an IPv6 prefix to the frontend LAN Frontend node 1 Frontend LAN (DMZ) Backend LAN (web servers, database servers, etc. etc. etc.) [IPv4-only] RL core net (and Internet) Frontend node 2

Day 1: Friday, October 4rd, 2013 Step 2: Step 3: Add an IPv6 service address to the Heartbeat configuration (1 additional line of config) Step 3: Make HAProxy listen for IPv6 connections (replace «bind :80» with «bind :::80» in config file) Step 1: Provision an IPv6 prefix to the frontend LAN Frontend node 1 Frontend LAN (DMZ) Backend LAN (web servers, database servers, etc. etc. etc.) [IPv4-only] RL core net (and Internet) Frontend node 2

Day 1: Friday, October 4rd, 2013 Got frontend service address 2a02:c0:208::24 up and running Initial testing done by overriding DNS with /etc/hosts entries Everything looks OK -> time to publish the AAAA records 24 Media has two DNS providers: Rapidswitch: Hosts contra.gr, cosmo.gr, oneman.gr, prasinanea.gr, redplanet.gr, sport24.gr Serverloft: Hosts 24media.gr, news247.gr, olapaok.gr This is where the real challenge begun...

Day 1: Friday, October 4rd, 2013 AAAA records for the Rapidswitch sub-domains added AAAAs for «domain.tld» didn't work (but «www.domain.tld» did) Ticket opened asking for fix sport24.gr not yet added because it's the biggest site, and 24 Media wanted to see that there were no problems with the other sites first Serverloft: No support for AAAA records at all

Day 5: Tuesday, October 8th, 2013 Responses from the two DNS providers: Rapidswitch: «That's a bug and we'll get it fixed this week» Serverloft: «We don't support IPv6 and have no plans to do so» We considered ditching Serverloft, but decided against it Not enough time to plan the migration of the zones Maybe later though..!

Day 8: Friday, October 11th, 2013 Day 11: Monday, October 14th, 2013 Rapidswitch fixes their bug! AAAAs added for the subdomain-less hostnames too sport24.gr still being the exception - lots of traffic expected on Sunday Day 11: Monday, October 14th, 2013 AAAAs for sport24.gr and sub-domains added Doors open at RIPE67 AAAAs for sport24.gr and sub-domains added Doors open at RIPE67

X X Summary / results: 7 of 9 main sites got IPv6 in time for RIPE67 Serverloft to blame for the missing 2 >2x IPv6-enabled sites in Greek Top100 Questions? (If there's time...) X X http://www.vyncke.org/ipv6status/plotsite.php?country=gr&metric=w&topn=100