APRICOT-APAN 2011, Hong Kong IPv6 Transition Conference 22 February C. K. Ng

Transcription

1 APRICOT-APAN 2011, Hong Kong IPv6 Transition Conference 22 February 2011 The Government of the Hong Kong Special Administrative Region C. K. Ng Programme Manager, Government Office of the Government Chief Information Officer

2 Agenda Support of IPv6 Deployment Government Central IT Infrastructure and Services IPv6 Implementation Experience Sharing Benefits 2

3 Support of IPv6 Deployment Specification Facilitation Strategy Lead by example 3

4 2008 Digital 21 Strategy Promoting Advanced Technology and Innovation Next-generation Internet Address capacity of will soon be exhausted IPv6 will generate a new horizon of business opportunities for ICT and other sectors The Government will take the lead in migrating to IPv6 4

5 Communications and Procurement Specifications Inclusion of both and IPv6 as recommended specifications for network communications in the Interoperability Framework Requirement of IPv6 support in centrally organised contracts for providing network equipment to Government departments 5

6 Industry and Government Internal Facilitation Industry and Public IPv6 Forum Hong Kong Chapter OGCIO website IPv6 Deployment 6

7 Industry and Government Internal Facilitation Industry and Public IPv6 Forum Hong Kong Chapter OGCIO website IPv6 Deployment Government Departments OGCIO IT Information Station IPv6 Transition Preparation 7

8 Industry and Government Internal Facilitation Industry and Public IPv6 Forum Hong Kong Chapter OGCIO website IPv6 Deployment Government Departments OGCIO IT Information Station IPv6 Transition Preparation Knowledge Management Training, experience sharing Blog, discussion forum 8

9 Lead by Example Government Central IT Infrastructure 9

10 Government Central Internet Services Domain Name Service > web domains > 200 mail domains Web Hosting Service > 240 websites > 160 million page views per month Internet Mail Service > users > 4 million s per month Internet Access Service > users > million web page requests per month 10

11 Technical Study for IPv6 Implementation Review of existing network infrastructure and application architecture Design of new network infrastructure, application architecture, network security, administration, operation and support Implementation approach and roadmap Best practices for implementation and on-going network management 11

12 Multi phased Implementation Strategy High-level Design and Proof of Concept Phase Low-level Design Phase Test new features and interoperability Develop addressing schema, naming convention, physical connectivity and logical topology Preparation Phase Prepare new segments, core routers and systems Pilot Phase Configure and verify Deployment Phase Operation and Optimisation Phase Deploy to production Continuously monitor, trouble-shoot and optimise 12

13 Implementation Approach Procure IPv6 ready equipment during natural technology replacement and capacity enhancement Adopt dual stack approach as far as possible Activate IPv6 by actual user demand Focus on external service provision instead of internal infrastructure adoption Implement by services, phases, and data centres 13

14 Implementation Roadmap Supporting Infrastructure Internet connection Computer Centre External Services Domain Name System Web Hosting System Internet Mail System Internet Access System Internal Services Government Backbone Government Intranet System 14

15 Implementation Internet Infrastructure ISP Department Border Gateway /6 IPv6 HKIX IPv6 ISP Internet HK DNR 15

16 Implementation Infrastructure Government Backbone Department /6 Internet 16 Central Computer Centre Central Computer Centre /6 /6 ISP Border Gateway IPv6 HKIX IPv6 ISP HK DNR

17 Implementation Government Backbone Department Domain Name Service DNS /6 /6 Internet 17 Central Computer Centre Central Computer Centre /6 /6 IPv6 ISP HKIX IPv6 ISP HK DNR Border Gateway

18 Implementation Web Hosting Service DNS /6 File Government Backbone Department /6 Central Computer Centre DB App. Web /6 Central Computer Centre /6 Border Gateway /6 IPv6 ISP HKIX IPv6 ISP Internet HK DNR 18

19 Implementation Internet Mail Service DNS /6 File Government Backbone Department /6 Central Computer Centre DB Mail Web /6 App. In MTA IPv6 In MTA Out MTA IPv6 /6 Central Computer Centre /6 Border Gateway /6 IPv6 ISP HKIX IPv6 ISP Internet HK DNR 19

20 Implementation Internet Access Service DNS /6 File Government Backbone Department /6 Central Computer Centre DB Mail Web /6 App. In MTA IPv6 In MTA Out MTA IPv6 /6 Central Computer Centre /6 Border Gateway /6 IPv6 ISP HKIX IPv6 ISP Internet HK DNR /6 Internet Access Proxy /6 20

21 Implementation Future Optimisation DNS /6 File Government Backbone Department /6 Central Computer Centre DB Mail Web /6 App. In MTA Out MTA /6 /6 Central Computer Centre /6 Border Gateway /6 /6 ISP HKIX Internet HK DNR /6 Internet Access Proxy /6 21

22 Experience Sharing Project Management and System Management Server Application System Schedule Scope Strategy Assessment Training plan early for IPv6 deployment focus on external service provision, then internal start simple, grow incrementally review IPv6 support of current infrastructure empower implementation and support staff 22

23 Experience Sharing Project Management and System Management Server Application System Security considerations Readiness of system / network management tools Extra efforts on administration and trouble-shooting for both and IPv6 configurations 23

24 Experience Sharing Project Management and System Management Server Application System Ready IPv6 support for backbone network equipment and infrastructure with first priority Aware of the scarcity and nature of currently available ISPs with IPv6 support 24

25 Experience Sharing Project Management and System Management Server Application System Aware of the product functions supported for and IPv6 may be different Whether statistics and reporting functions can accurately interpret IPv6 access logs Testing of IPv6 support through different perspectives 25

26 Experience Sharing Project Management and System Management Server Application System Whether applications are making use of IP address or assuming the IP address format IP address independence 26

27 Benefits onnecting government services and users to the Next-generation Internet pportunities for future types of government applications and services uccessful example and experience gained for reference ransparent to government users and the public 27

28 Benefits onnecting government services and users to the Next-generation Internet pportunities for future types of government applications and services uccessful example and experience gained for reference ransparent to government users and the public 28

29 Reference URLs: OGCIO Digital 21 Strategy Interoperability Framework IPv6 Deployment (supporting both and IPv6)