IPv6 and.hk Jonathan Shea HKIRC 23 November 2009
Hong Kong Internet Registration Corporation Limited (HKIRC) 香 港 互 聯 網 註 冊 管 理 有 限 公 司 HKIRC is a non-profit member-based organisation set up in December 2001 and endorsed by the Government of the HKSAR to oversee the administration and assignment of the country code top level Internet domain names ending with.hk and its equivalents. HKIRC has the mandate to represent Hong Kong in international Internet forum and promote Hong Kong s Internet businesses
Milestones Jun 2000 - Public consultation by HKSAR government on administration of Internet domain names and IP addresses in Hong Kong Dec 2001 - Establishment of HKIRC Feb 2003 - Jan 2004 - Jan 2006 - Mar 2007 - Launch of.idv.hk domain name Launch of.hk domain name (2 nd level) 100,000.hk registrations Launch of.hk Chinese Domain Name May 2007 - Public consultation on institutional governance of HKIRC Dec 2008 Formation of New Board
.hk Domain Categories English Domain.com.hk.net.hk.org.hk.edu.hk.gov.hk.idv.hk.hk Chinese Domain. 公 司.hk. 網 絡.hk. 組 織.hk. 教 育.hk. 政 府.hk. 個 人.hk.hk Requirement Businesses / companies registered in HK Entities managing network infrastructure, machines and services with a license (IVANS / ISP) from OFTA of HK Not-for-Profit organisations registered in HK Registered schools, tertiary institutions and other approved educational institutions in HK Government Bureaux / Departments of HK HK Residents (for. 個 人.hk, domain shall be the legal name of registrant) Local and overseas individuals and entities. No documentary proof is required
.hk now accepts IPv6 glue records Add or Modify DN Host (Panel: Registrant, Reseller, Registry, Registrar and API ) 7
.hk now accepts IPv6 glue records Allow input of IPv4 or IPv6 addresses IPv4 IPv6 8
.hk DNS with IPv6 >dig @a.root-servers.net. any hk. snip ;; ADDITIONAL SECTION: B.DNS.TW. 172800 IN A 210.201.138.58 NS1.HKIRC.NET.hk. 172800 IN A 203.119.2.18 NS2.CUHK.EDU.hk. 172800 IN A 137.189.6.21 NS2.CUHK.EDU.hk. 172800 IN AAAA 2405:3000:3:60::21 NS2.HKIRC.NET.hk. 172800 IN A 203.119.2.19 NS3.CUHK.EDU.hk. 172800 IN A 202.45.188.39 SEC3.APNIC.NET. 172800 IN A 202.12.28.140 SEC3.APNIC.NET. 172800 IN AAAA 2001:dc0:1:0:4777::140 ADNS1.BERKELEY.EDU. 172800 IN A 128.32.136.3 ADNS2.BERKELEY.EDU. 172800 IN A 128.32.136.14 HK-NS.PCH.NET. 172800 IN A 204.61.216.46 ;; Query time: 390 msec ;; SERVER: 198.41.0.4#53(a.root-servers.net.) ;; WHEN: Fri Nov 06 18:16:57 2009 ;; MSG SIZE rcvd: 437 9
.hk IPv6 glue AAAA record sample >dig @ns1.hkirc.hk. any NS2.CUHK.EDU.HK. snip ;; AUTHORITY SECTION: CUHK.EDU.HK. 28800 IN NS NS3.CUHK.EDU.HK. CUHK.EDU.HK. 28800 IN NS NS2.CUHK.EDU.HK. CUHK.EDU.HK. 28800 IN NS NS1.CUHK.EDU.HK. ;; ADDITIONAL SECTION: NS1.CUHK.EDU.HK. 28800 IN A 137.189.6.1 NS1.CUHK.EDU.HK. 28800 IN AAAA 2405:3000:3:60::1 NS2.CUHK.EDU.HK. 28800 IN A 137.189.6.21 NS2.CUHK.EDU.HK. 28800 IN AAAA 2405:3000:3:60::21 NS3.CUHK.EDU.HK. 28800 IN A 202.45.188.39 ;; Query time: 15 msec ;; SERVER: 203.119.2.18#53(ns1.hkirc.hk.) ;; WHEN: Mon Nov 09 12:08:50 2009 ;; MSG SIZE rcvd: 187 10
.hk IPv6 reverse PTR record sample >dig @ns1.cuhk.edu.hk. -x 2405:3000:3:60::21 snip ;; ANSWER SECTION: 1.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.6.0.0.3.0.0.0.0.0.0.3.5.0.4.2.ip6.arpa. 86400 IN PTR barnowl-v6.itsc.cuhk.edu.hk. ;; AUTHORITY SECTION: 0.0.0.3.5.0.4.2.ip6.arpa. 86400 IN NS ns2.cuhk.edu.hk. 0.0.0.3.5.0.4.2.ip6.arpa. 86400 IN NS ns3.cuhk.edu.hk. 0.0.0.3.5.0.4.2.ip6.arpa. 86400 IN NS ns1.cuhk.edu.hk. ;; ADDITIONAL SECTION: ns1.cuhk.edu.hk. 172800 IN A 137.189.6.1 ns1.cuhk.edu.hk. 172800 IN AAAA 2405:3000:3:60::1 ns2.cuhk.edu.hk. 172800 IN A 137.189.6.21 ns2.cuhk.edu.hk. 172800 IN AAAA 2405:3000:3:60::21 ns3.cuhk.edu.hk. 1800 IN A 202.45.188.39 ;; Query time: 46 msec ;; SERVER: 137.189.6.1#53(ns1.cuhk.edu.hk.) ;; WHEN: Mon Nov 09 12:29:16 2009 ;; MSG SIZE rcvd: 289 11
BIND IPv6 capable DNS software Resolver & Server BIND 9 - http://www.isc.org/products/bind/ NSD Authoritative server only http://www.nlnetlabs.nl/nsd/ Microsoft Windows Resolver & Server Windows Server 2008 R2, 2008, 2003 Windows 7, Vista, XP SP2 12
DNS IPv6 Operational Guidelines Defined in RFC3901 All recursive name servers should be IPv4 only or dual stack hosts All zones should be served by at least one authoritative IPv4 capable host 13
Transition - How to get there? The target today IS NOT the transition from an IPv4-only to an IPv6-only environment Start a small IPv6 testing network, with client, server, software supports v6, to test DNS IPv6. Conclude the DNS IPv6 works and is harmless (both functionality and capacity) Deploy DNS IPv6 in an incremental fashion on existing networks test and confirm nothing that already works fine (the production IPv4 DNS!) is broken 14
17
18
Disclaimer This document carries no legal authority. The arrangement mentioned in this document is subject to change at any time by HKDNR and shall not be deemed to be the final arrangement. Hong Kong Domain Name Registration Company Limited shall not be held responsible for any consequences caused by any omissions, inaccuracies or future changes of the arrangement. 19