Glen Turner 2007-12-10 AARNet staff meeting AARNet and IPv6 Glen Turner 2007-12-10 AARNet staff meeting aarnet Australia's Academic and Research Network

Bigger addresses Some bug fixes What is IPv6 Bigger addresses Some bug fixes

Why – business Additional service which makes our customers stick with AARNet Image courtesy of Beatrice Murch (Flickr: blmurch)

Why – technical IPv4 address exhaustion predicted for 19 October 2011. IPv6 is one part of our customer's response. Fig 30 of ipv4.potaroo.net by Geoff Huston

Why now? Universities take a long time to turn around IPv4 address exhaustion, an iceberg? Want considered adoption, not Y2K-style crisis management

IPv6 policy Going forward, we seek to support IPv6 to the same extent as we support IPv4. Exceptions require the approval of the CEO. Rationale: Projects should make the extra effort to implement IPv6 now, at our own pace, rather than leave AARNet with a overhang of work to be done in 2010, at the pace of our most demanding customer.

Charging We do not charge for IPv6 traffic But we will eventually

Progress Forwarding  Routing  DNS forwarding  www.aarnet.edu.au  We offer IPv6 as a IP service, but do not do IPv6 well for our strategic value-added services. Forwarding  Routing  DNS forwarding  www.aarnet.edu.au  Staff e-mail  Voice control – H.323  Voice control – SIP ? Video – MCU  Eduroam  AAF 

How hard is it? A Hosts work excellently Windows Xp & Vista, MacOS X, FreeBSD, Linux B Routers work well Core forwarding works well “Features” often don't exist, fewer & different MIBs NetFlow format change C Switches work poorly Link layer bridging obviously works “Features” don't exist, yet F Middleboxes often don't work

Middleboxes are bad news Examples Firewalls Load sharing and traffic distribution SSL offload Rate limiters Encourage customers not to use these where alternatives exist Use DNS or OSPF for load sharing Do SSL offload on PCI cards rather than on an appliance Exclude IPv6 from rate limiting

Activities, 1 of 2 Connecting customers Most just want part of their campus network connected. This is a reasonable strategy, no need to push for the entire campus, all at once Training UQ and AARNet have codeveloped a training course Industry liason Sharing AARNet's experiences

Activities, 2 of 2 Helping developers and encouraging early adopters Tunnels from broker.aarnet.edu.au A cheap way to answer “I need a IPv6 connection” This needs some work, may outsource that Real IPv6 at linux.conf.au We have been approached by major sites to be their IPv6 internet service provider We are not in that business But we are willing to peer And if you are building a link to peer IPv6, then how about IPv4?

Glen Turner glen.turner@aarnet.edu.au AARNet and IPv6 Glen Turner glen.turner@aarnet.edu.au aarnet Australia's Academic and Research Network Copyright © AARNet Pty Ltd, 2007. All rights reserved. Australian Company Number 084 540 518.