World IPv6 Day in Indonesia APAN32,, New Delhi Affan Basalamah ITB/INHERENT, Indonesia

Outline • • • •

Activities in ITB Activities in INHERENT Activities in Indonesia IPv6 Forum Recommendation

BACKGROUND

World IPv6 Day • June 8, 2011 • Content provider open their services via IPv6 – basically, they provide AAAA record to popular website – Allow IPv6 client to access their content via IPv6

• So provider will know: – how many client has successfully to access IPv6 – how many client has failed to access IPv6

DNS Record at that day

ACTIVITIES IN

ITB

Activities in ITB • Work together with SOI-ASIA ( p // p (http://ipv6day.soi.asia) y ) • IPv6-only video-on-demand streaming – Adobe Ad b Fl Flash hM Media di St Streaming i SServer on Li Linux – 2 video of Indonesia cultural show

• IPv6-only website, embedding video content – http://ipv6day.itb.ac.id http://ipv6day itb ac id Apache on FreeBSD

Evaluate Brocade ADX1000 IPv6 SLB • Provide IPv6 SLB for v6 client to v4 server • IPv6 SLB that can translate: – v6 client – v6 server – v6 6 client li – v6/v4 6/ 4 server – v6 client – v4 server

Why IPv6 Load Balancer? • Hoping to solve questions: – Which is comes first,, network or application? pp – What is IPv6 killer apps?

• How H it’s it’ going i to t solve: l – IPv4 killer apps can directly migrated to IPv6 – No apps rewrite or migration

• At least in the theory – Evaluation in the real world will tell you

Experience with IPv6 SLB (1) • Basic services works just fine • Translate IPv4 web server to IPv6 client • Translate IPv4 cache server to IPv6 client – real server(s) TCP4/8080 translated to virtual IP on TCP6/8080 – virtual server client TCP6 server IPv6 client

Experience with IPv6 SLB (2) • At first we would like to use regular IPv4 web g server to hosts & streaming http://ipv6day.itb.ac.id , and SLB will translate IPv6 client to IPv4 server for us • It turns out that our admin has natively enabled bl d IPv6 ffor web b & streaming, so we put our server behind SLB don’t p

Screenshot

Simple script to identify IPv6 client

Video Stream from streaming server

Website Statistics (1)

Website Statistics (2)

User statistics • Viewer observed from ITB campus – Most of ITB campus p network is IPv6 dual-stack

• Viewer also observed from Indonesia ISP • Also l observed b d ffrom WIDE Project Japan • No reverse address for IPv6 – It’s hard to see which ISP has IPv6 address – Had H d to t manually ll doing d i WHOIS on address dd

ACTIVITIES IN INHERENT

Activities in INHERENT • INHERENT currently is not deploying IPv6 • Most INHERENT partner (and most Indonesia ISP) deploy IPv6 network through tunnel to Hurricane Electric • INHERENT get IPv6 prefix from TEIN3-POP in ITB

IPv6 tunnel broker for INHERENT • Deployed on ITB router (Juniper SRX650) – Ask INHERENT communityy to jjoin

• Cleanup IPv6 prefix-list in TEIN3 ID-POP to advertise new IPv6 prefix form ITB/INHERENT

IPv6 BGP peering in ITB router 2001:470:17:72::1        6939     176059      23178       0      18      1w0d9h Establ 2001:470:17:72::1        6939     176059      23178       0      18      1 0d9h Establ inet6.0: 5917/6690/6690/0 2001:7fa:f::1          7717       2907       2496       0     265    19:07:49 Establ inet6.0: 118/123/123/0 2403 8000 10 2       18007          1          3       0   15950           1 E t bl 2403:8000:10::2       18007          1          3       0   15950           1 Establ inet6.0: 672/672/672/0 inet6.2: 79/79/79/0 2403:8000:666:dead::2       46047       2031     101953       0     149    16:53:49 Establ inet6.0: 1/1/1/0 2403:8000:666:dead::6       55687         35       2699       0     123    20:57:09 Active 2403:8000:666:dead::a       45304          1      30432       0       9      9w4d1h Active 2403:8000:666:dead::18       46052          0          0       0       0     9w5d18h Idle 2403:8000:666:dead::22       55674          0          0       0       0     9w5d18h Active

•Red: IPv6 Tunnel BGP peering (AS6939 above is HE.net) •Blue: IPv6 BGP peering to Indonesia OpenIXP •Green: IPv6 BGP peering to INHERENT router to TEIN3 network

Statistics • At least 5 tunnel registered, 3 of them observed alive, only 1 currently active • Unable to run IPv6 network monitoring, because we haven’t setup p the the infrastructure • Netflow, NFSen

Hurricane Electric Tunnel everywhere • From simple show route protocol bgp, I see most Indonesia ISP has HE.net tunnel • AS6939 everywhere

– Makes BGP p path adjustment j difficult • Path to AS6939 is preferred compared to TEIN3 • e.g., g , ITB needs to advertise //33 instead of //32 to TEIN3

– ITB has some IPv6 BGP peering • Internet commercial IPv6 via HE.net HE net • Indonesia commercial via OpenIXP • REN IPv6 via TEIN3

ACTIVITIES IN INDONESIA IPV6 FORUM

Indonesia IPv6 Forum • Community effort to encourage IPv6 p y in Indonesia deployment • Initiated in IPv6 Summit June 2010, Bali • http://www.ipv6forum.or.id h // i 6f id

Activities in IPv6 Forum • ITB – Mentioned above

• PT Telkom – Celebrating C l b i IP IPv6 6D Day iin T Telkom lk RDC B Bandung d – Presentation from vendor – Setup dual stack website & proxy server – Setup IPv6 tunnel broker for ISP

RECOMMENDATION

Recommendation (1) • As usual, only network admins interested with IPv6 activities ☺ – User don’t see anything differently – Server admins usually intimidated with IPv6 • That’s why IPv6 SLB is necessary

• ISP needs d to create reverse record d ffor their h p y their customers IPv6 address, especially – So human observer can easily see traffic logs

Recommendation (2) • Regular event on IPv6 operation is necessary push everybody y y operating p g live IPv6 network to p – Endpoint OS maker (desktop, mobile, appliances) – Network operator – Content provider

• We should be doing this more often ☺ – Admin can cleanup their “abandoned” abandoned IPv6 configs in their routers and servers

Thank you!