人口和計劃生育工作簡報Title

IPv6:

IsYourNetworkReadyForIt?育兒知識http://www.pangbaba.ccIPv4anditslimitationTheinitialdesignofIPv4didnotanticipate:GrowthoftheInternetandExhaustionoftheIPv4addressspaceLargeroutingtablesinbackboneroutersFlatandhierarchicalroutingNeedforsimpleraddressconfigurationManualDHCPNonativeIPlevelsecurityIPSecProprietarysecuritysolutionsNeedforbetterQoSTOSfieldinIPv4UDPorTCPports2ABCsofIPv6NewversionoftheInternetProtocolDevelopedtoalleviateIPv4addressexhaustionImproveuponIPprotocolbasedonoperationalexperienceofIPv4intheGlobalInternet128bitaddressingSimplifiedheadermakesforwardingalgorithmsmoreefficientNewextensionsandoptionsNeighborDiscoverysubsystemreplacesARPRequiresPathMTUDiscovery–eliminatesfragmentationintransitNomoreARP:NeighborDiscoveryhelpsdiscoveradjacenciesRouteradvertisementfunctionsfor“l(fā)asthop”configurationDynamicprovisioningcomponentsaswellasDHCPv63IPv4andIPv6FeatureComparisonFeatureIPv4IPv6AddressLength32bits128bitsFragmentHostsandRoutersHostsonlyChecksuminHeaderYesNoOptionsinHeaderYesNoLink-layerAddressResolutionARP(broadcast)NeighborDiscovery(multicast)MulticastmembershipIGMPMLDRouterDiscoveryOptionalYesUsesbroadcastsYesNoAddressAssignmentManualorDHCPAuto-ConfigurationIPSecSupportOptionalYesQoSSupportSomeBetterDNSNamequeriesDNSReverseLookupsArecordsIN-ADDR.ARPAAAAAandA6RecordsIP6.INT4IPv6TrendsFlexibilityisthekeytrendinIPv6todayBasicdata-planehandlingisstandardizedBut,transitiontechnologies(tunneling,interworkingandmigration)arestillinrelativefluxImportanceofflexibilityindataplaneImportanceofWirespeedIPv6supportDataplane,networklayerIPv6forwardingWirespeedTransitionprotocols5IPv6Drivers3Gservices–multimediaandtriple-playconvergencesPeer-to-PeerNetworkingandComputingFilesharingandInstantMessagingHome-networkingNetworked-domesticappliancesVoIPHomeEntertainmentsystemsManufacturersOnlinegamingsoftwaredevelopersOrEssentiallyanyserviceswithsignificantIPaddressingrequirementwillbenefitsfromadoptingIPv6.Thebenefitsareuniqueaddressing,autoconfiguration,renumberingandgloballyroutable.6WhoisaskingforIPv6Today?NorthAmericaDepartmentofDefenseFederalGovernmentUniversitiesApplicationandOSvendorsEuropeEUgovernmentsInterestfrom3Gcommunity–telecommunications(mobile)sectorGettingsomeinitialinterestfromtheISPcommunityJapan,KoreaandChina(FastGrowing….)EducationalmarketServiceProvidersGovernmentInternetAppliancevendors(IPv6-enableddevices)AsiaEveryone(Singapore,Thailand,etc)WorldwideTrendsStartedoffprimarilyinAsiaandEurope,butUSispickingupdramatically7ArecentIPv6surveyresults:

(with200GovernmentITManagers)About43percentofrespondentssaidthey'dinventoriedtheirexistingdevicesforIPv6-readiness.Interestingly,51percentsaidthey'dimplementIPv6allthewaytothedesktop(thecurrentmandateappliesonlytonetworkbackbonesbyJune2008).Just14percentsaidimplementationisunderwayattheiragency(butwithtwoyearstogo,that'snotshocking)Lessthan8percentsaidtheiragencieshadfinishedtheirtransitionplans(notshockingeither).4percentactuallysaidtheyweredone.Infact,whatthesurveyactuallysays:IPv6isseenasanITissue,notabusinessissueSecurityisthetopreasontomovetoIPv6MosthadnoideawhattheiragenciesweredoingwithIPv6/blogs/tech/41168.html8IPv6isoutthere–areyouready?IPv6isreadilyavailableforWindows2000/XP/2003,MAC-OS,LinuxAsIPv6trafficmayenterthenetwork,theinfrastructureneedstobemadereadyforittoprotectyouACLsecurityIPAddressSecurity(equivalentstoARP,ICMPandDHCPsecurityandmonitoring)DoStestingoftheinfrastructureToturnonIPv6,controlplaneneedstobesupportedL2+:ICMPv6,MLDSnooping,…L3:staticroutes,RIPng,OSPFv3,…IPv6enabledapplications(Telnet,SSH,traceroute,pingv6,…)ThereisnoD-Day–you’llneedInterworking/Migrationtechnologies(6to4,conftunnels,...)9IPv6TransitionMechanismsIPv4andIPv6willcoexistandmigrationwilltakeyearsDual-Stack,TunnellingandTranslation10ExtremeNetwork’sVisiononIPv6Massiveproliferationof

devicesNewandmoredemandingapplicationsonagloballevelThechangingroleofnetworksinconductingbusinessComputingSystemsNon-ComputingDevicesBroadeningdeploymentofwireless(802.11b/a/g,UWB)PowerOverEthernetGrowthOptimizationSurvival11ExtremeSolutionExtremeTechnologyRevolutionWireSpeedGigabitEthernetASICsNativeQoSandSecurityFeaturesEnhancedTrafficShapingConsistentSoftware&ManagementFullStandardsBasedLayer3FeaturesSimplerManagementApplications“EthernetandIPEverywhere”Extremeintroducedafamilyofsimple,fast,highlyintelligent,hardware-basedswitches

toreplacecomplexsoftware-basedrouters12ExtremeHistorywithIPv6ExtremeNetworkswasoneofthefirstvendorstoreleaseIPv6software,ExtremebeganIPv6developmentasearlyasyear2000withateamthathasover18combinedperson-yearsofIPv6experience,withmembersoftheteamthatimplementedtheworldsfirstIPv6implementationin1995atNavalResearchLab.ParticipatinginIPv6DemonstrationCollaborativeInitiativeinconjunctionwiththeUniversityofNewHampshireInteroperabilityLabs(Moonv6)ThetestswilldemonstratethefunctionalityofIPv6includingproperbasespecification,routingandmobilityfunctionswiththenetworkinfrastructuresupportingDNSforIPv6,NFS,streamingmedia,commonbusinessapplicationsandWebbrowsing.Successcustomer:TelecomItaliaLab(TILAB)13Multi-TerabitArchitecture

LPMRoutingforIPv4,IPv6,MPLST-FlextoAccommodateEvolvingStandards

Programmablepacketparser

ProgrammablepacketeditorAdvancedMetroEthernetCapabilities

Tunneling,translation,framestacking

ScalingformassiveaddressspacesVirtuallyInfiniteCapacities

ExtensiveAccessControlLists

T-Statstatistics–programmablecountersPreparedforProliferationofDevices

1Million+devices

Abilitytotrack,monitor,accountfor1M+devices

Control,restrict,rewrite,redirect1M+devicesExtremeHardwareBlackDiamond10K/12K14ExtremeSoftware-XOSHighlyAvailableModularOSMemoryprotectionProcessMonitoringandRestartHitlessfailover/upgradeDoSProtectionOpen-ness-AddNewfeaturesfasterPOSIXAPIsgivesagreatstartingpointfornewcodeXMLdatarepresentationandAPIsena