1 OpenStack Summit 2015, Vancouver18 May 2015 IPv6 Breakout Session Bin Hu, Moderator IPv6 Project Lead, OPNFV

2 OpenStack Summit 2015, Vancouver18 May 2015 Agenda Moving from IPv4 to IPv6 – Jonne Soininen IPv6 Status in OPNFV and OpenStack – Kilo and Beyond – Bin Hu and Ian Wells IPv6 VM Design as vRouter – Prakash Ramchandran Multinode OpenStack Setup on an IPv6 Infrastructure – Sridhar Gaddam Multisite IPv6 Community Lab and Test Cases – Iben Rodriguez Open Discussion and Next Steps

3 OpenStack Summit 2015, Vancouver18 May 2015 IPv6 Status in OPNFV and OpenStack Key Project Facts Goals and Deliverables What Have Been Achieved Next Steps

4 OpenStack Summit 2015, Vancouver18 May 2015 Key Project Facts Project Creation Date: November 25 th, 2014 Lifecycle State: Incubation Gerrit Repo: ipv6 Project Wiki: Project Lead: Bin Hu Primary Contact: Bin Hu Active contributors from AT&T, Brocade, Cisco, ClearPath, Huawei, Nokia and Redhat

5 OpenStack Summit 2015, Vancouver18 May 2015 Goals and Deliverables Goals – A meta distribution of IPv6-enabled OPNFV platform – A methodology of evolving IPv6 OPNFV Deliverables – An integrated package consisting of basic upstream components – Auto configuration script to automate the configuration and provisioning of IPv6 features (for those that can be automated) – An Installation Guide and/or User Guide with step-by-step instructions of manual configuration of IPv6 features (for those that cannot be automated) – Test cases adapted to IPv6 specific use cases – Gap analysis and Recommendation for next steps

6 OpenStack Summit 2015, Vancouver18 May 2015 What Have Been Achieved (1 of 2) Requirement and Gap Analysis – OpenStack Kilo has addressed most of the gaps – No floating IPv6 because NAT is not appropriate for IPv6 – No additional coding is needed for SR-IOV if that works with non-SR- IOV – IPv6 Router Support and code review IPv6 Router Supportcode review – Multiple IPv6 Prefixes and code review Multiple IPv6 Prefixescode review – Port Security Extension will allow you to disable anti-spoofing rules on per port basis Port Security Extension Anycast will not run foul of anti-spoofing rules VM can be designed as a vRouter IPv6 Prefix Delegation in Liberty-1 IPv6 Prefix Delegation – Support routable IPv6 address per VM from upstream router – Integrated with Neutron IPAM

7 OpenStack Summit 2015, Vancouver18 May 2015 What Have Been Achieved (2 of 2) Outstanding Gaps – The ability to support non-DHCP statically assigned IPv6 addresses in the same fashion as is supported for IPv4 – Additional IPv6 extensions such as IPSec, Multicast etc. are not supported L2 multicast should work, but not efficient because OVS doesn’t do IGMP snooping, the same as v4 L3 multicast is not supported in Neutron, the same as v4 – Router attached to provider network can act as M/C G/W – Access to metadata server still requires IPv4 No assigned metadata server address in IPv6 Consider to use :: Meanwhile, config drives work fine – GRE / VXLAN tunneling still requires IPv4

8 OpenStack Summit 2015, Vancouver18 May 2015 Next Steps A PoC design and implementation to explore auto configuration and provisioning of IPv6 – Based on Kilo – Including multinode setup on IPv6 infrastructure Test case development Multisite IPv6 community lab, test case and test infrastructure Complete easy installation package – Automated script – Installation Guide – ISO image Verify gap analysis through PoC and Test – Recommendation of filling the gap

9 OpenStack Summit 2015, Vancouver18 May 2015 IPv6 Breakout Session Thank you