From IPv6 testbeds to large scale deployments

Transcription

1 From IPv6 testbeds to large scale deployments Graça Carvalho, Cisco Bernard Tuy, Renater Contributors G. van der Velde, Cisco A. Romero, Dante J. Durand & S. Muyal, Renater M. Potts, Martel T. Liakopoulos, GRnet B. Tuy, Renater Bernard.Tuy RIPE 50, Stockholm -SE, 05/

2 Agenda 6NET : 3 year experience european BB GEANT IPv6 services Applications Managing IPv6 networks M6bone : world wide IPv6 multicast BB GSN: Greek Schools Network and IPv6 deployment 6DISS: IPv6 dissemination and training Bernard.Tuy RIPE 50, Stockholm -SE, 05/ NET a pan european research IPv6 network 2

3 Project Overview One of the largest Internet research projects from the European Commission 18.4 MEuro A 3 year project (started ) Extended to June partners from 15 EU countries + Korea An international native IPv6 testbed Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Partnership - Industry Bernard.Tuy RIPE 50, Stockholm -SE, 05/

4 Partnership - NRENs Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Partnership - Academic Research Academic Computer Technology Institute Bernard.Tuy RIPE 50, Stockholm -SE, 05/

5 6Net core Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Network evolution Internet2 SE Internet2 Japan UK NL DE PL Internet2 Korea FR CH CZ AT HU IT Euro6IX Peering Colt GR Deutsche Telekom Telia Tunnel Nordic Planned native Bernard.Tuy RIPE 50, Stockholm -SE, 05/2005 STM1 links 12 5

6 The 6Net Layout 24/06/2004 Bernard.Tuy RIPE 50, Stockholm -SE, 05/ IPv6 Addressing 3 bits 13 bits 13 bits 6 bits 5 bits 8 bits 16 bits FP TLA stla Slow Start Reserved POP's SLA /3 /16 /29 /35 /40 /48 /64 (1) FP, TLA, stla, Slow-start: Defined by the prefix 2001:0798::/35 given by RIPE to Dante (2) The reserved part is all 0 for 6NET (3) POPS hierarchy: POPS (8 bit) (sequencial number per pop) (4) SLA: Where for <SLA>: Range: 0000 till 00FF: Loopback addresses Range: 0100 till 01FF: Intra-pop point-to-points Range: 0200 till 02FF: connections to NREN-pop's Range: 0300 till 03FF: external 6NET connectivity Range: 0400 till 04FF: POP Local Ethernets Note: Using this convention there is room for 256 prefixes with /64 address-space for each point-to-point link or broadcast media, with /128 prefix-lenght for loopback Bernard.Tuy RIPE 50, Stockholm -SE, 05/

7 Routing ISIS L2 ISIS neighborship non-default Cisco ISIS parameters have been enabled: <Ignore-lsp-errors> <Log-adjacency-changes> <No-hello-padding> IIH and ISH password authentication Passive interfaces: loopback interfaces and NRENs access BGP (i+e) md5 Authentication for ebgp and ibgp peering sessions Bernard.Tuy RIPE 50, Stockholm -SE, 05/ BGP Routing Details Peer-groups : Two peer-groups have been implemented: (i) one group will be used for ibgp peers: 6NET_INTERNAL_6NET_PEER (ii) another group will be used for initial ebgp peers: 6NET_EXTERNAL_NREN_POP Bernard.Tuy RIPE 50, Stockholm -SE, 05/

8 BGP Routing Details ebgp: (1) no use of next-hop-self (2) peering directly over the POS interface (3) no use of ebgp multihop (4) no initial use of route-dampening (5) no initial route-filtering Bernard.Tuy RIPE 50, Stockholm -SE, 05/ NET QoS Test included: 1 * EF/ 2 * AF Class Policing Classification QoS was enabled for > 8 months!! concorde Fast Ethernet rtr2 JANET POS rtr1 JANET POS 6NET JANET POS United Kingdom GSR 155Mbps The Netherla nds GSR 6NET 155Mbps Germany GSR 155Mbps ATHENS GSR Gigabit Ethernet 2001:648:0:1002:20c:6eff:fec7:9160 Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Premium traffic 8

9 GEANT A pan european backbone for Research communities GEANT topology (10/2004) Multi-Gigabit pan-european Research Network Connecting : 33 european countries and 30 NRENs Backbone capacity : 155Mb/s-10Gb/s Routers : Juniper M-series Bernard.Tuy RIPE 50, Stockholm -SE, 05/

10 IPv6 implementation on GEANT Implementation of dual stack in GEANT Feb 2003 First NRENs v6 connected in April 2003 Renater (Fr) and RedIRIS (Es) GEANT IPv6 service operational since Oct 2003 Bernard.Tuy RIPE 50, Stockholm -SE, 05/ IPv6 connectivity to NRENs (02/2005) 27 out of 30 NRENs connected 23 out of 27 are native connections ~500 routes announced to NRENs Only 2001::/19-/35 and 2002::/16 allowed No 6bone routes are allowed from EU NRENs Bernard.Tuy RIPE 50, Stockholm -SE, 05/

11 IPv6 connectivity to non-eu Research Networks (I) Native connections from the 3 Regions : ARIN Region: DoD (22), VBNS (145), Univ.Wiscosin (2381), Univ.Indiana (22398) LACNIC Region: RNP (1916), Retina (3597) APNIC Region: Taiwan RN(7539),WIDE (2500), Australian NREN (7570), Singapore NREN (7610), Thailand Ministry (4621), Chinese Uni.of Hong Kong (3662) Bernard.Tuy RIPE 50, Stockholm -SE, 05/ IPv6 connectivity to non-eu Research Networks (II) ESnet (US) => Native link Ca-net (CA) => Native in three links SINET (JP) => Tunnel in New York APAN (KR) via RENATER (FR) Bernard.Tuy RIPE 50, Stockholm -SE, 05/

12 Géant IPv6 connectivity service Géant is providing free interconnection for European NRNs to the whole Internet-v6 Tunnel connections to ISPs Encouraging ISP to develop their networks in IPv6 Access to Euro6IX and Eurov6 partners IST projects Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Géant : IPv6 transit traffic Bernard.Tuy RIPE 50, Stockholm -SE, 05/

13 IPv6 vs IPv4 Traffic volume GÉANT v6 traffic volume: IPv6 traffic = 2% of the total IP traffic (V4+v6) IPv6 daily traffic stats for SWITCH access to GÉANT Daily total traffic stats for SWITCH access into GÉANT Daily statistics from one of the most IPv6 users in GÉANT: SWITCH with 5% IPv6 traffic volume of the total traffic in the access Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Applications! 13

14 Agenda Usual apps DNS, HTTP, SMTP, FTP, SSH, 6NET experiences Tested, ported and trialed apps Management apps Other apps & services Conclusion Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Applications 6NET : 50+ applications tested / ported for IPv6 and documented : P5Apps/Applications.html Bernard.Tuy RIPE 50, Stockholm -SE, 05/

15 Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Gnome meeting Bernard.Tuy RIPE 50, Stockholm -SE, 05/

16 OpenMCU - IPv6 Open Source (MPL) Based on OpenH323- Library Allows 4-way+ H.323 unicast video conference Simultaneously IPv4 & IPv6 compatible => connects both IP worlds Regularly used by 6NET partners for multipoint video conferences Capable of multipoint video Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Liberouter - Cesnet Liberouter is a research project to design and develop an IPv6 and IPv4 router based on the standard PC architecture and reliable operating systems - NetBSD, FreeBSD and Linux Bernard.Tuy RIPE 50, Stockholm -SE, 05/

17 SIP Express Router Focus SIP Express Router (ser) is a high-performance, configurable, free SIP ( RFC3261 ) server. Some Features: application-server interface SMS gateway Presence messaging RADIUS/syslog accounting and authorization Web-based user provisioning more features to be found on the above URL Bernard.Tuy RIPE 50, Stockholm -SE, 05/ SIP Express Router Use cases Bernard.Tuy RIPE 50, Stockholm -SE, 05/

18 SIP Communicator - ULP Bernard.Tuy RIPE 50, Stockholm -SE, 05/ VideoLAN 1. User uses a web browser to connect to the VideoLAN Portal Server (over IPv6); 2. The portal shows a set of videoassets on servers connected to the 6NET network; 3. User selects a video-assets from the portal; 4. VideoLAN Portal Server starts the stream on Content-server Y or Z and gives as result of the choice, a mine-type that triggers VideoLAN Client to start and connect to the server or to join on the IPv6 Multicast group Bernard.Tuy RIPE 50, Stockholm -SE, 05/

19 Demonstrators VoIP with SIP (SIP Express Router) + voice user agent (eg. Kphone IPv6) + PSTN gateway + MCU + VPN functionality Flute Streaming between mobile hosts, including Mobile IP functionality AccessGrid Globus (GT3) Open H323 + Open VPN Home Networking Greek School Network Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Monitoring IPv6 Networks 19

20 Managing the network 6NET activity : Network management architecture Network monitoring tools, applications, platforms 40+ «tools» : tested, ported Tools implemented in NRENs and 6Net core network Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Bernard.Tuy RIPE 50, Stockholm -SE, 05/

21 Managing IPv6 networks MIBs standardization & implementation SNMPv6 NetFlow v9 and IPFIX conformance Tools for network segments : LAN, MAN,WAN Trials with commercial platforms : Cisco Campus Manager Cisco NetFlow collector v5 HP Openview Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Nagios Bernard.Tuy RIPE 50, Stockholm -SE, 05/

22 ASpath-Tree Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Looking Glass Bernard.Tuy RIPE 50, Stockholm -SE, 05/

23 Inventory: Interfaces Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Inventory: BGP Peerings Bernard.Tuy RIPE 50, Stockholm -SE, 05/

24 IPv6 traffic on Cisco routers Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Connected Regionals and sites Reg. Nets: 14 Sites: 52 Allocations: 75 Bernard.Tuy RIPE 50, Stockholm -SE, 05/

25 M6Bone An IPv6 worldwide Multicast testbed What is M6Bone? An IPv6 Multicast test network M6Bone started in July 2001 (Aristote association, G6 and RENATER) 28 networks & 50 sites Goals To offer IPv6 Multicast connectivity to interested parties Test and develop soft and equipments related to IPv6 Multicast technologies Be active in IPv6 multicast standardization and provide deployment recommandation (e.g. interdomain multicast) Bernard.Tuy RIPE 50, Stockholm -SE, 05/

26 M6Bone Bernard.Tuy RIPE 50, Stockholm -SE, 05/ M6Bone Bernard.Tuy RIPE 50, Stockholm -SE, 05/

27 How to connect How to connect... Setup an IPv6 multicast router Set up connectivity to the M6bone Configure Routing (MBGP, static...) Configure PIM Multicast topology Run Applications and services Monitoring! Bernard.Tuy RIPE 50, Stockholm -SE, 05/

28 1. Setup an IPv6 multicast router MRIB implemented (static + MBGP) 6WIND CISCO IOS 12.3(7)T, 12.0(26)S JUNIPER JUNOS ? No MRIB PC BSD + Kame pim6sd daemon Linux + pim6sd PC BSD + Xorp Hitachi...? Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Connectivity IPv6 multicast starts to be deployed natively in some networks: GEANT NORDUNET UNINETT Need to bypass the routers not supporting IPv6 multicast IPv6 over IPv6 tunnels IPv6 over IPv4 tunnels IPv6 over GRE over IPvX tunnels Dedicated ATM PVC MPLS LSPs... Connection to an M6Bone POP Bernard.Tuy RIPE 50, Stockholm -SE, 05/

29 3. Routing MBGP (IPv6 multicast address family) Static IPv6 multicast routes Unicast routing table If unicast and multicast topologies are the same. Can be used for example inside a site. If unicast and multicast topologies are different, dedicated equipments for multicast must be used (M6Bone deployment started with RIPng) Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Routing policy Few ISPs provide IPv6 multicast service No possible to do the same aggregation for unicast and multicast Transit networks must allow up to /48 prefixes Sites must aggregate to /48 prefixes BGP peerings No private AS advertised in M6Bone Bernard.Tuy RIPE 50, Stockholm -SE, 05/

30 4. PIM Multicast topology PIMv2 SM / SSM SSM for FF3X::/96 group-range SM for others No MSDPv6 available Will never be as bottleneck in IPv4 world M6Bone is / was a single PIM domain Embedded RP is being deployed Bernard.Tuy RIPE 50, Stockholm -SE, 05/ PIM Multicast topology Hierarchical RPs Global RP managed by RENATER NREN RPs Sites RP in some universities Global RP in RENATER Must be known on all the M6Bone routers Statically configured, the safe way BSR Scoped BSR deployed in 6NET. Some 6NET partners use BSR to receive RP information Old BSR deployed in MRIP Works for a few sites are connected Bernard.Tuy RIPE 50, Stockholm -SE, 05/

31 4. PIM Multicast topology Embedded RP under deployment RFC 3956 A new group-to-rp mapping mechanism RP address embedded in IPv6 multicast address FF7X::/12 address space Changes the model Need to understand consequences for ISPs and customers SSM The M6Bone network is ready for SSM Few applications available / used Bernard.Tuy RIPE 50, Stockholm -SE, 05/ PIM Multicast topology + global embedded-rp RP for an organisation scope embedded-rp managed by an ISP M6Bone MBGP + PIM SM/SSM embedded-rp managed by an ISP + global embedded-rp RP for a site scope Global RP managed by RENATER global embedded-rp Bernard.Tuy RIPE 50, Stockholm -SE, 05/

32 5. Applications and services Every IPv6 stack supports MLD Necessary to run IPv6 multicast applications MLDv2 on Linux, FreeBSD, Solaris No MLDv2 support on Windows Any platform can be used for IPv6 multicast Almost no application supports MLDv2 Is relatively new Implementations will come with the need Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Applications and services Videoconferencing : VIC/RAT, Videolan, Isabel, WM player 9 Radio broadcast : Freeamp Others : NTE, WB, MAD, SDR Reflectors To / from IPv4 multicast To IPv6 unicast Bernard.Tuy RIPE 50, Stockholm -SE, 05/

33 6. Monitoring Connectivity / Traffic Ping6 & SNMP Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Monitoring Routing AS-Path-Tree Bernard.Tuy RIPE 50, Stockholm -SE, 05/

34 6. Monitoring PIM Multicast topology Beacon Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Contacts Web-site : Collaborative web-site Architecture of the network Information about equipment s configuration Subscription form Mailing list : m6bone@ml.renater.fr Around 200 active and experienced people ready to help you Bernard.Tuy RIPE 50, Stockholm -SE, 05/

35 Greek Schools network IPv6 into operation at a large scale Agenda The Greek School Network (GSN) - short description Introduction of IPv6 in GSN Planned Steps Addressing Routing Current Implementation Status Collaboration with 6Net Bernard.Tuy RIPE 50, Stockholm -SE, 05/

36 GSN Backbone: Based on 8 PoPs of GRNET Distribution Network : 52 nodes 9 main 43 secondary 75 routers, 717 servers Current Access Network technology: PSTN, ISDN, Leased Lines, Wireless nodes, VDSL, ADSL 6K Primary and 3.7k Sec. schools already connected GRnet Distribution Network Bernard.Tuy RIPE 50, Stockholm -SE, 05/ IPv6 in GSN Steps Planned Step 1: IPv6 Addressing and Routing Plan, Study and Definition of Transition Strategy Step 2: Deployment of IPv6 in the Distribution Network and Transformation to Dual Stack Step 3: Schools Selection and Preparation Step 4: Enable IPv6 in Basic and Advanced Services Bernard.Tuy RIPE 50, Stockholm -SE, 05/

37 IPv6 Addressing Already have 9 /48 subnets 8 used -one for each main node and one for the backbone Inside /48 Addressing /52 assigned to each secondary node => up to 16 secondary nodes to each main node /62 assigned to each school => 4 LANs per school (Loopback, Student Lab, Administration Office, Servers LAN) 1024 schools per prefecture. Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Readdressing Issues Near Term Get a /40 subnet for all GSN so we can support a larger number of main nodes (New Optical and Wireless Networks). Long Term Get a /32 for the GSN from RIPE to accommodate future student devices inside schools (i.e PDA, mobile phones) Need to set up a Readdressing Plan Review the Readdressing procedures-tools Bernard.Tuy RIPE 50, Stockholm -SE, 05/

38 Routing Scheme OSPFv3 as IGP for IPv6 for distributing the addresses of the backbone links. OSPF instead of IS-IS because familiarity with OSPFv2 increased granularity with area management (i.e nssa) functionality of redistribution and route injection capabilities. ebgp will be used to exchange IPv6 prefixes between the 6GSN core and the GrNet6 Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Current Status Addressing and Routing Scheme ready Distribution Network routers configuration ready We tested the above configuration to some routers Started to work on the IPv6 configuration of the School Lab Next month But Memory and cpu load problems Possible impact to normal IPv4 traffic With current hardware configuration the deployment of the ipv6 will be reduced to a few main nodes (probably 2 or 3) Bernard.Tuy RIPE 50, Stockholm -SE, 05/

39 Collaboration with 6net Action Plan with tight collaboration. i.e. Evaluation of addressing and routing Participation in 6Net training sessions GSN will provide feedback and report of the usage of Deliverables and their adoption and integration in the network Bernard.Tuy RIPE 50, Stockholm -SE, 05/ DISS IPv6 dissemination and training 39

40 6DISS: Agenda 6DISS: IPv6 Dissemination & Exploitation Key Data (partners, duration, cost) Objectives Technical Approach Potential Impact Expected Results Bernard.Tuy RIPE 50, Stockholm -SE, 05/ DISS: Key Data EU IST FP6 project Partners: Martel Cisco, Alcatel RENATER, GRNET, FCCN TERENA University College London, University of Southampton Duration: 1st April 2005, for 30 months EC Funding: EUR 900K Bernard.Tuy RIPE 50, Stockholm -SE, 05/

41 6DISS : Objectives (1) To transfer knowledge and deployment experiences from European IPv6 projects (6NET, Euro6IX, GEANT), TERENA, European NRENs, etc. to research network operators, universities, commercial organisations, governments and regulators in:. Balkan countries (inc. Bulgaria, Rumania, Moldova & Turkey). Mediterranean countries. Newly-Independent States (Central Asia, including Afghanistan). Sub-Saharan Africa. Southern Africa. The Caribbean. Asia-Pacific region. South and Central America Bernard.Tuy RIPE 50, Stockholm -SE, 05/ DISS : Objectives (2) will exchange information and experience with such organisations in India & China To build constituencies, raise awareness, exchange best practices, and engage the organisations in future IST projects. Bernard.Tuy RIPE 50, Stockholm -SE, 05/

42 Conclusion / trends / recommandations Tentative of Observations Just in case Internet v6 is there! But needs to be completed A long way to go And it s not close to be over Testbeds and pilotes are more than useful But not for ever : Some «fools» have already walk the step Bernard.Tuy RIPE 50, Stockholm -SE, 05/

43 Trends Dual stack is the prefered technique but at the end of «the day», a single IP stack will / must remain to do the job Large networks (schools) will boost the IPv6 deployment Before the 3GPP is there ;) Mobile networks begin to be very popular too Large number / spectrum of applications is IPv6 compliant / capable But Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Recommandations Important thing to do yet : Inventory the missing apps / services Understand how to port them Who can / must do it Put the pressure on these folks And keep in mind Addressing / allocating prefixes are the visible part of the iceberg Security policy Transition mechanisms Management and monitoring Bernard.Tuy RIPE 50, Stockholm -SE, 05/

44 Finally here we re I ve still half a hundred of slides But I guess, you re fed up? Then it s time for questions Bernard.Tuy RIPE 50, Stockholm -SE, 05/ Informations 6NET : GEANT : M6bone : Greek School Network : 6DISS : Renater Web site (IPv4 and IPv6): Bernard.Tuy RIPE 50, Stockholm -SE, 05/

45 ?Questions??? Bernard.Tuy RIPE 50, Stockholm -SE, 05/