Network and Addressing Design for IPv6 Transition

Transcription

1 Supported by the 2014 FIA Workshop Network and Addressing Design for IPv6 Transition

2 IPv6 Transition in a data centre network FIA Workshop on IPv6 implementation in governments , Athens/Greece Martin Krengel (Citkomm) Gerold Gruber (Citkomm)

3 municipal data centre goes IPv6 Brief Description Enabling a municipal datacenter's network and infrastructure for IPv6 Corporate network connects municipalities and local authorities with central services hosted in a data centre, users and institutions within the network and offers gateways to networks and services of the federal state NRW and central institutions of the Germany Participants Citkomm Fraunhofer Fokus

4 CITKOMM WHO WE ARE municipal data centre goes IPv6 Over 40 years of company history One of the major municipal IT service providers in North Rhine-Westfalia CITKOMM 195 employees appr. 22 Mio. business volume (2011) Founded as central data centre Evolution to system integrator 4

5 CITKOMM WHERE WE ARE municipal data centre goes IPv6 Dortmund 5

6 municipal data centre goes IPv6 DMZ Internet Application MPLS iwan Customer Network Citkomm LAN DOI stesta

7 Address Structuring, local parts municipal data centre goes IPv6 Citkomm Prefix: 2a02:100e:befc::/48 last network address word interface identifier Basic concept (two nibbles type + two nibbles number = 16 bits) 1 st Word 2 nd Word 3 rd Word 4 th Word 1 st nibble 2 nd nibble 3 rd nibble 4 th nibble Device Class 3 rd Byte IPv4 4 th Byte IPv4 0 Data Centre 1 0 Infrastructure/Transfer Server 0000 Private Address 2 2 Storage 0020 Range Data Centre 2 4 Router Shared 8 Switches a a Management 00a0 b b 00b0 c LAN Site 1 c DMZ Clients 00c0 d d Printer 00d0 e KOM WAN e LAN Phones 00e0 f f 00f0

8 Internet access network municipal data centre goes IPv6 Finally enable the access network of Citkomm (own AS) with IPv6, transferred first parts in production state Nearly 1/2 of the web servers are transferred and therefore are technical ready for being accessible with IPv6 DNS and Mail are accessible via IPv6 DOI access was finally enabled for IPv6 Enabling first backbone access router for IPv6 Set up of monitoring including ipv6 connectivity for the public reachable services of Citkomm Further web servers have been tested using IPv6 successful Identifying stability problems in OSPF, several analyses, problems still not fixed

9 iwan VPN Network municipal data centre goes IPv6 Establish IPv6 tunnel connection with a set of basic services (esp. DNS) between Citkomm and Fraunhofer VPN tunnel start scripts made IPv6 aware Structured plan for an implementation concept for next generation VPN Network appliances for all Citkomm WANrouter Preparing general design for next generation VPN appliance Buying process for next generation server platform for VPN appliance

10 Local Network municipal data centre goes IPv6 Testbed Finalization of test network (Windows) for LAN with IPv6 support Brunnenstadt Structured tests of function and services based on IPv6 connectivity Citkomm internal Strategic stop of Linux LAN. Therefore all Linux test for LAN were aborted Plan for setup of Windows LAN in Citkomm Scheduling of setup in Citkomm LAN Customer network / Windows LAN Project planning with customer municipality government of Brilon Plan was set up. The resulting main activities are Change of hardware in Q4/13 (new systems on IPv4 only initially) Extension to IPv6 in Q1/14 Roll out of new clients with Win7 / IPv6 in Q2/14

11 Business application municipal data centre goes IPv6 Set up of a separated test network named Brunnenreich for application testing Basic service infrastructure similar to production Separated network segment connected to the Citkomm production backbone Interconnection between the testbeds FOKUS, BRUNNENSTADT and BRUNNENREICH with a set of basic services (e.g. DNS) monitor server for all servers in the application testbed Successful tested MYSQL-transfer from an application server to a database server over IPv6 Workaround for not existing support of YAST-GUI for IPv6 Setup successful tested Final implementation of basic infrastructure for Microsoft terminal server based applications Successful setup of business applications MACH, ADVIS and Votemanager in testbed and first confirmation of Ipv6 ability

12 municipal data centre goes IPv6 Internet application (citizen services) Setup of a structured process internal and with customers for web site transition to IPv6 Receiving permissions of some customers for IPv6 transition for web sites Roll Out of test infrastructure for customer approval of IPv6 usability for web sites Start process with first Customers (municipalities) Final transition of first web sites in February

13 municipal data centre goes IPv6 DEMO

14 municipal data centre goes IPv6 DMZ Internet Application MPLS iwan Customer Network Citkomm LAN DOI stesta 15

15 Achievements municipal data centre goes IPv6 address concept introduced firewalls IPv6 aware enable routing: IPv6 in BGP and OSPF production deployment in progress 16

16 municipal data centre goes IPv6 DMZ Internet Application MPLS iwan Customer Network Citkomm LAN DOI stesta 17

17 municipal data centre goes IPv6 18

18 municipal data centre goes IPv6 Achievements design test setup: typical municipal network test bed setup in co-operation with Fraunhofer FOKUS setup a test LAN with IPv6 Windows DC, DNS, DHCP (IPv6 stateful) setup openvpn tunnel with IPv6, connect IPv6 enabled networks iwan Gateway, radvd for route distribution design the network for application testing different server and client systems 19

19 municipal data centre goes IPv6 IPv6 enabled Brunnenreich DMZ Internet Application MPLS iwan Customer Network Citkomm LAN DOI stesta

20 municipal data centre goes IPv6 Questions? 21