IPv 6 Transition Technologies Yasuo Kashimura Senior Manager

  • Slides: 43
Download presentation
IPv 6 Transition Technologies Yasuo Kashimura Senior Manager, Japan, APAC IPCC Alcatel-lucent

IPv 6 Transition Technologies Yasuo Kashimura Senior Manager, Japan, APAC IPCC Alcatel-lucent

Agenda 1. 1. Current status of IPv 4 / IPv 6 internet 2. 2.

Agenda 1. 1. Current status of IPv 4 / IPv 6 internet 2. 2. IPv 4 continuity 3. 3. IPv 4 continuity over IPv 6 network 4. 4. IPv 6 rapid deployment 5. 6. Wider IPv 6 deployment 6. 6. Solution comparison 7. Appendix. Multi-Service. Provider Issuue in IPv 6 2 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

1 Current status of IPv 4 / IPv 6 internet 3 | Apricot 2011

1 Current status of IPv 4 / IPv 6 internet 3 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

IANA IPv 4 address pool has been sold out !! http: //www. icann. org/en/news/release-03

IANA IPv 4 address pool has been sold out !! http: //www. icann. org/en/news/release-03 feb 11 -en. pdf IPv 4 address exhaustion has become REAL. . People needs go to IPv 6 anyway. . 4 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

IPv 4 Address Exhaust and IPv 6 Deployment IPv 6 transition (dual-stack) Internet growth

IPv 4 Address Exhaust and IPv 6 Deployment IPv 6 transition (dual-stack) Internet growth Original Expectation IPv 6 deployment IPv 4 Pool Size IPv 6 transition t IPv 4 Pool Size Rapid migration to IPv 6 th w Internet gro IPv 6 deployment 2010 2012 t IPv 6 Transition (dual-stack, NAT, tunneling) IPv 4 Pool Size Internet growth IPv 6 deployment 2010 5 | Apricot 2011 | IPv 6 transition t IPv 4 continuity until IPv 6 migration Geoff Huston http: //www. potaroo. net/ispcol/2009 -09/v 6 trans. html © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

Transition to IPv 6 : Two Approaches we need to consider. . 1. IPv

Transition to IPv 6 : Two Approaches we need to consider. . 1. IPv 4 continuity/Address sharing § Extend the life of IPv 4 until all the internet become IPv 6 § Global address sharing between the users, with using NAPT § IPv 6 connectivity can be provided by dual-stack, some tunneling technologies, or protocol translation. 2. IPv 6 migration focus § Rapid/Gradual introduction of IPv 6 capabilities (CPE, Access, BNG) § Progressive steps to native IPv 6 service § IPv 4 connectivity through dual-stack or protocol translation or tunneling 6 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

Transition to IPv 6 : applicable technologies Translation IPv 4<->IPv 4 Translation IPv 4<->IPv

Transition to IPv 6 : applicable technologies Translation IPv 4<->IPv 4 Translation IPv 4<->IPv 6 Translation LSN NAT 64 IVI DS-Lite, A+P 6 to 4 6 RD SAM, 4 RD IPv 6 -over-IPv 4 Tunneling IPv 4 -over-IPv 6 Tunneling 7 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

Methods Home device Access network Destination Solutions IPv 4 Internet Large Scale NAT IPv

Methods Home device Access network Destination Solutions IPv 4 Internet Large Scale NAT IPv 4 IPv 6 IPv 4 Internet Dual-Stack Lite SAM, 4 RD IPv 4 Internet NAT 64 Stateful NAT 64 Stateless IVI IPv 6 IPv 4 IPv 6 Internet IPv 6 Internet 8 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only 6 to 4 6 RD Dual-Stack

2 IPv 4 continuity 9 | Apricot 2011 | IPv 6 transition © 2010

2 IPv 4 continuity 9 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

IPv 4 Continuity Large Scale NAT(LSN) Private IPv 4 network 1/2 stack BNG 7750

IPv 4 Continuity Large Scale NAT(LSN) Private IPv 4 network 1/2 stack BNG 7750 -SR Private IPv 4 Network Private IPv 4 network IPv 6 Migration IPv 6 7750 -SR 1/2 stack BNG 7750 -SR Priv. IPv 4 Internet Server IPv 6 Network Private IPv 4 network IPv 4 Continuity LSN NAT 44 2 stack Router Priv. IPv 4 ROUTED IPv 6 ROUTED Border Router IPv 6 Internet NAT 44 Route Public IPv 4 ROUTED IPv 6 ROUTED LSN Dual-Stack § CGN (aka. large scale NAT or NAT 444) is the most traditional approach to IPv 4 continuity § Use of RFC 1918 may collide with the addresses used within the subscriber LAN § IPv 6 services can be offered in parallel to the NATed IPv 4 service through dual-stack BNGs. § No new feature required on CPE. 10 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

IPv 4 Continuity L 2 -aware NAT Private IPv 4 Network IPo. E PPPo.

IPv 4 Continuity L 2 -aware NAT Private IPv 4 Network IPo. E PPPo. E Private IPv 4 Network IPv 4 Continuity Priv. IPv 4 NAT 44 L 2 TP IPv 4 Internet BNG+ NAT 44 7750 -SR Server IPv 4 Shared Priv. IPv 4 NAT 44 Public IPv 4 ROUTED L 2 -aware NAT § L 2 -aware NAT offers subscriber-aware NAT by using L 2 delimiter information (S-/C-VLAN, PPPo. E, MAC, DHCP Option 82, etc. ) § Based on the Radius user record, subscriber traffic is subject to NAT on the BNG § Unique subscriber-id is used to create NAT mapping to allow duplicate inside-IP addresses § No new feature required on CPE 11 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

L 2 -aware NAT (cont’d) BNG Session 1 NAT 169. 168. 1. 1 IPv

L 2 -aware NAT (cont’d) BNG Session 1 NAT 169. 168. 1. 1 IPv 4 Internet Customer Gateway 169. 168. 1. 1 Customer Gateway Private TCP UDP IP Ethernet Session 2 Subscriber is identified by “Session”. Ethernet IPo. E RFC 2684 PPP ATM L 2 TP NAT Function UDP TCP © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only TCP UDP IP 802. 1 ad Ethernet 802. 3 PHY DSL 12 | Apricot 2011 | IPv 6 transition Public Demux on Service/MAC NAT Function UDP Any Subscriber’s private IPv 4 address can be allowed. Minor change in BNG

3 IPv 4 continuity over IPv 6 Network 13 | Apricot 2011 | IPv

3 IPv 4 continuity over IPv 6 Network 13 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

IPv 4 Continuity DS-Lite ( Dual stack Lite) IPv 6 Migration draft-ietf-softwire-dual-stack-lite Dual-Stack Lite

IPv 4 Continuity DS-Lite ( Dual stack Lite) IPv 6 Migration draft-ietf-softwire-dual-stack-lite Dual-Stack Lite Broadband Deployments Following IPv 4 Exhaustion l Carry IPv 4 packet over IPv 6 tunnel(IPv 4 -in-IPv 6), on “IPv 6 ONLY” Access Network => Reduce Management/Operational cost l Provide IPv 4 -to-IPv 4 NAPT on AFTR(Concentrator) => Global IPv 4 address saving by sharing the address in multiple users. l CPE needs update for feature adding IPv 4 Continuity IPv 4 global IPv 4 private IPv 4 -in-IPv 6 Dual Stack Network IPv 6 -only BNG DS-Lite Concentrator (AFTR) IPv 4 Internet Dual Stack Network NAT 44 Dual Stack Network IPv 6 Migration 14 | Apricot 2011 | IPv 6 transition IPv 6 only Access Dual-stack Core IPv 6 © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only IPv 6 Internet

DS-Lite Control plane sequence example AFTR CG-NAT /64 pd prefixes from 2010: cafe/48 pool

DS-Lite Control plane sequence example AFTR CG-NAT /64 pd prefixes from 2010: cafe/48 pool B 4 PE 1 2000: : 460: : 0: 0: 0: 1 RS RA (default-gw only / No SLAAC) SOLICIT IA-PD | DNS DHCPv 6 SERVER 2000: 1: : 1 2000: 1: : 40 DHCPv 6 Relay-forw SOLICIT IA-PD | DNS Relay-reply ADVERTISE IA-PD /64 | DNS 2000: 1: : 40 /|OPTION-99 REQUEST IA-PD/64 | DNS 2000: 1: : 40 | OPTION-99 Relay-forw REQUEST Relay-reply REPLY IA-PD /64 | DNS 2000: 1: : 40 /|OPTION-99 Option-99 contains Tunnel-End-Point 2001: 688: 1 f 94: a: : 1 15 | Apricot 2011 | IPv 6 transition PE 2 © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only Configured Tunnel-End-Point 2001: 688: 1 f 94: a: : 1

DS-Lite Packet Flow Priv. IPv 4 RFC 1918, 192. 0. 0. 0/29 Tunnel IPv

DS-Lite Packet Flow Priv. IPv 4 RFC 1918, 192. 0. 0. 0/29 Tunnel IPv 4 -in-IPv 6 tunneled Routing IPV 4 Global NAT 44 DS-Lite AFTR IPv 4 Server Decap IPv 4 IPv 6 IPv 4 v 4 NAPT Dst-IPv 4=198. 51. 100. 1 Dst-IPv 6=2001: db 8: 20: : 2 Dst-IPv 4=198. 51. 100. 0 Src-IPv 4=192. 168. 0. 2 Src-IPv 6=2001: db 8: 10: : 2 Src-IPv 4=192. 0. 2. 1 Dst-port=80 Dst-IPv 4=198. 51. 100. 0 Dst-port=80 Src-port=10000 Src-IPv 4=192. 168. 0. 2 Src-port=20000 Dst-port=80 Src-port=10000 Softwire-ID Inside IP Prot Inside Src Port Outside IP Prot Outside Src. Port 2001: db 8: 10: : 2 192. 168. 0. 2 TCP 10000 192. 0. 2. 1 TCP 20000 16 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

IPv 4 Continuity DS-Lite + A+P IPv 6 Migration draft-ietf-softwire-dual-stack-lite draft-ymbk-aplusp The A+P Approach

IPv 4 Continuity DS-Lite + A+P IPv 6 Migration draft-ietf-softwire-dual-stack-lite draft-ymbk-aplusp The A+P Approach to the IPv 4 Address Shortage l Carry IPv 4 packet over IPv 6 tunnel(IPv 4 -in-IPv 6), on “IPv 6 ONLY” Access Network l CPE learns Global address/port-range, and CPE perform IPv 4 -IPv 4 NAPT. l NAPT function can be distributed to CPE side, more scalable than DS-Lite. Minimal state core. l More Flexible, more close to End-to-End transparency (but still limited) IPv 4 Continuity IPv 4 private Dual Stack IPv 6 Migration 17 | Apricot 2011 | IPv 6 transition IPv 4 global A+P NAT IPv 4 -in-IPv 6 -only BNG AFTR/ A+P router A+P NAT IPv 6 only Access Dual-stack Core IPv 6 © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only IPv 4 Internet IPv 6 Internet

DS-Lite + A+P Packet Flow Tunnel Priv. IPv 4 RFC 1918, 192. 0. 0.

DS-Lite + A+P Packet Flow Tunnel Priv. IPv 4 RFC 1918, 192. 0. 0. 0/29 NAT 44 Tunnel IPv 4 -in-IPv 6 tunneled Routing IPV 4 Global DS-Lite A+P Assigned port-range IPv 4 Server IP=12. 0. 0. 3 Port=10000 -11000 Decap IPv 4 IPv 6 IPv 4 Dst-IPv 4=128. 0. 0. 1 Dst-IPv 6= a: : 1 Dst-IPv 4=128. 0. 0. 1 Src-IPv 4=10. 0. 0. 2 Src-IPv 6= a: : 2 Src-IPv 4=12. 0. 0. 3 Dst-port=80 Dst-IPv 4=128. 0. 0. 1 Dst-port=80 Src-port=8000 Src-IPv 4=12. 0. 0. 3 Src-port=10000 Dst-port=80 Src-port=10000 Inside IP Prot Inside Src Port 10. 0. 0. 2 18 | Apricot 2011 | IPv 6 TCP transition 8000 Outside IP Prot Outside Src. Port 12. 0. 0. 3 TCP 10000 © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

IPv 6 Migration Stateless Address Mapping (SAM) - Mesh Softwires without e-BGP IPv 4

IPv 6 Migration Stateless Address Mapping (SAM) - Mesh Softwires without e-BGP IPv 4 Residual Deployment across IPv 6 -Service networks (4 rd) IPv 4 Continuity draft-despres-softwire-mesh-sam-01 draft-despres-softwire-4 rd Dual Stack IPv 4 Internet SAM CE IPv 6 network IPv 4 over IPv 6 IPv 4 IPv 6 NAT 44 IPv 6 Tunnel SAM Border Relay Server IPv 6 Internet Route § Addresses IPv 4 continuity and IPv 6 deployment in stateless tunneling by using address sharing model. Public 4 Private 4 § Use Stateless IPv 6 address to IPv 4 address/port mapping to reduce complexity. § IPv 4 address/port-range is embedded into IPv 6 address. CPE can know allocated IPv 4 Global Address and port-range from allocated IPv 6 address, and other SAM related parameters. § CPE can perform NAPT based on leaned IPv 4 GA/port-range, and also perform IPv 4 over IPv 6 tunneling. § 4 RD extends applicability to IPv. X o/ IPv. Y, and NAT less solution. 19 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

SAM Address mapping format common prefix Subnet ID(s) s may be 0 SAM tag

SAM Address mapping format common prefix Subnet ID(s) s may be 0 SAM tag s 8 C Format ID f may be 0 64 XXXXX 0 0 x. FF C F Parameters: F, C, s, h XXXXXX F SAM interior ID IPv 4 C F constant prefix 20 | Apricot 2011 | IPv 6 transition h F 64 IPv 6 host ID XXXXX 0 XXXXXX 32 © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only 0 XXXXXX

SAM Address mapping format example 2001: a: 5000: 0: ff 00: 0: 0: 22

SAM Address mapping format example 2001: a: 5000: 0: ff 00: 0: 0: 22 2001: a: : /32 | s=4, h=8 198. 0. 0/20 4 s C 8 64 64 IPv 6 5 2001: a: XXXXX 0 0 x. FF C Parameters: F, C, s, h 0 F SAM interior ID IPv 4 5 F 0 x 22 XXXXXX 198. 0. 0 0 C 0 F 5. 0 x 22 XXXXX 0 XXXXXX 32 198. 0. 5. 34(0 x 22) 21 | Apricot 2011 | IPv 6 transition h F © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only 0 0 x 22 XXXXXX

RFC 5747 4 over 6 Transit Solution Using IP Encapsulation and MP-BGP Extensions 4

RFC 5747 4 over 6 Transit Solution Using IP Encapsulation and MP-BGP Extensions 4 o 6 CE Public IPv 4 Network IPv 4 Internet IPv 6 network IPv 4 over IPv 6 BGP SAFI - IPv 4 prefix - IPv 6 address 4 over 6 GW Server IPv 6 Internet IPv 4 IPv 6 Route IPv 6 Tunnel Route 4 § Not Addressing IPv 4 continuity. Just for IPv 6 Public deployment in stateless tunnelling § User’s IPv 4 prefix and IPv 6 address(tunnel destination address for that IPv 4 prefix) information are advertised via BGP as newly defined SAFI. § 4 over 6 GW router must cache IPv 4 -prefix=IPv 6 -address mapping, and IPv 4 traffic is encapsulated by IPv 6 header. § IPv 4: IPv 6 mapping advertiser(BGP speaker) can be another BGP router/server, not CPE. 22 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

4 Rapid IPv 6 deployment 23 | Apricot 2011 | IPv 6 transition ©

4 Rapid IPv 6 deployment 23 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

RFC 5969 - IPv 6 Rapid Deployment on IPv 4 Infrastructures (6 rd) 6

RFC 5969 - IPv 6 Rapid Deployment on IPv 4 Infrastructures (6 rd) 6 rd CE IPv 6 Network IPv 4 Network IPv 6 Internet Server 6 rd Border Relay CGN IPv 6 IPv 4 6 Private 4 Route NAT 6 to 4 tunnel Priv 4 Route NAT 44 6 RD IPv 6 address format: SP’s IPv 6 prefix IPv 4 GA 6 Public 4 Subnet. ID Interface. ID § Addresses operators who want to quickly offer an IPv 6 service over a non-IPv 6 capable network § Use 6 to 4 tunnel technique with specifying ISP’s IPv 6 prefix. Stateless Tunneling § 6 rd border relay decapsulates IPv 6 packet and routes in natively towards IPv 6 Internet § 6 rd prefix and BR address can be obtained by DHCP option § IPv 4 address required for 6 to 4 tunnel, CGN is optional. 24 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

6 RD Packet Flow example Tunnel IPv 6 Routing IPv 6 -in-IPv 4 tunneled

6 RD Packet Flow example Tunnel IPv 6 Routing IPv 6 -in-IPv 4 tunneled Tunnel IPV 6 Global Routing 192. 0. 2. 1 6 RD Border DHCP option: 6 rd 6 RD prefix: 2001: db 8: : /32 6 RD Border: 192. 0. 2. 254 IPv 6 IPv 4 IPv 6 Server Decap IPv 6 Dst-IPv 6=v 6 Globalx Dst-IPv 4=192. 0. 2. 254 Dst-IPv 6=v 6 Globalx Src-IPv 6=192. 0. 2. 1 Src-IPv 6= 2001: db 8: c 000: 0201: : xxxx Dst-IPv 6=v 6 Global 2001: db 8: c 000: 0201: : xxxx Src-IPv 6= 2001: db 8: c 000: 0201: : xxxx 6 RD Border can know destination IPv 4 address for the packet from IPv 6 internet to user, by IPv 6 destination address of the packet because user’s IPv 4 address is embedded into it. 25 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

5 Wider IPv 6 deployment 26 | Apricot 2011 | IPv 6 transition ©

5 Wider IPv 6 deployment 26 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

NAT 64 (+ DNS 64) IPv 6 Migration (draft-ietf-behave-v 6 v 4 -xlate-stateful/RFC 6146)

NAT 64 (+ DNS 64) IPv 6 Migration (draft-ietf-behave-v 6 v 4 -xlate-stateful/RFC 6146) DNS response www. att. net AAAA Pref 64: 1. 2. 3. 4 www. att. net A 1. 2. 3. 4 Large Scale NAT IPv 6 network IPv 4 Internet IPv 6 network Server IPv 6 Internet IPv 6 network 6 DNS response DNS 64 Route 6 NAT 64 4 § Addresses IPv 6 -only hosts communicating with IPv 4 -only servers § Does not support IPv 4 -only hosts (e. g. , Windows 98/XP, or non-enabled IPv 6 hosts) § Requires a complementary DNS function (DNS 64); see draft-ietf-behave-dns 64(RFC 6147) § Not suited for IPv 4 continuity (connections must be v 6 -initiated to create state in NAT 64) § Will be required to provide interworking between IPv 6 -only hosts and IPv 4 -only servers 27 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

NAT 64 (+ DNS 64) (draft-ietf-behave-v 6 v 4 -xlate-stateful) IPv 6 host DNS

NAT 64 (+ DNS 64) (draft-ietf-behave-v 6 v 4 -xlate-stateful) IPv 6 host DNS 64 Auth. DNS NAT 64 IPv 4 server DNS Query AAAA example. com Pref 64=2001: db 8: 8000: : /64 AAAA example. com DNS Response NXDOMAIN DNS Query A example. com DNS Response A 203. 0. 113. 1 AAAA 2001: db 8: 8000: : 203. 0. 113. 1 IPv 6 Dest. : [2001: db 8: 8000: : 203. 0. 113. 1]: 80 Src. : [2001: db 8: : xyz]: abc IPv 6 28 | Apricot 2011 | IPv 6 transition Allocate NAT-binding IPv 4 Dest. : 203. 0. 113. 1: 80 Src. : 192. 0. 2. 45: 6853 IPv 4 © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

IVI Translation draft-xli-behave-ivi-07 IVI DNS IPv 6 network IPv 4 network IVI Xlate IVI

IVI Translation draft-xli-behave-ivi-07 IVI DNS IPv 6 network IPv 4 network IVI Xlate IVI address format: SP’s IPv 6 prefix FF IPV 4 address Suffix v 4 keeping connectivity to existing v 6 § More focusing on single-stack IPv 6 network, with IPv 4 network. § IVI translator provides IPv 4 to IPv 6/IPv 6 to IPv 4 translation to interconnect v 4/v 6 network. § IPv 4 address is embedded into IPv 6 address. § Working with IVI DNS, and stateless translation on IVI translator, it provides more seamless translation between IPv 4 and IPv 6. 29 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

5 Solution Comparison 30 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent.

5 Solution Comparison 30 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

Summary of IPv 4 continuation/IPv 6 transition technologies CPE LSN L 2 -NAT DS-Lite

Summary of IPv 4 continuation/IPv 6 transition technologies CPE LSN L 2 -NAT DS-Lite + A+P SAM, 4 RD 4 over 6 6 RD NAT 64 No CPE CPE change Only change required IPv 6 ○ ○ Address continuity × LSN Optional - ○ Still ○ ○ Sharing IPv 6 can transition be ○ - hosts required IPv 4 IVI ○ Still requires IPv 4 address. requires deployed IPv 4 in parallel address. Access NW IPv 4/v 6 IPv 6 IPv 4 IPv 6 Stateful Stateless Stateful Stateless Limited Not Not Limited in Limited /Stateless transparency 31 | Apricot 2011 | IPv 6 transition 1: 1 map © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only Limited

Consideration for technology implementation § What is your focus ? Rapid IPv 6 deployment,

Consideration for technology implementation § What is your focus ? Rapid IPv 6 deployment, or IPv 4 address exhaustion ? Access network is IPv 6 only or IPv 4 only, or can be dual-stack ? § Does it requires CPE change/feature adding ? § How can you define NAT policy ? § How can you define port-range allocation policy ? § Max # of ports per user § Allocation algorithm: Fixed, Random § Port-block allocation, or session based allocation § How can you define logging policy for abuse traceability? § Session based logging(large amout of log), or port-block based logging 32 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

Consideration for technology implementation How can you perform per-sub control ? § How much

Consideration for technology implementation How can you perform per-sub control ? § How much you provide end-end transparency ? § Up. NP treatment draft-bpw-softwire-upnp-pcp-interworking § Where you put GW/Concentrator/NAT function ? § Distributed to edge ? Or Centralized to core ? § Stateless or Stateful mapping/translation ? § How you can define scalability parameters ? § # of tunnels, # of NAT session, performance, etc § How much you need HA function ? ( vs Cost ) 33 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

Appendix: Multi-Service. Provider Issue in IPv 6 34 | Apricot 2011 | IPv 6

Appendix: Multi-Service. Provider Issue in IPv 6 34 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

IPv 6 Multi-SP Issues x. SP 1’s dns server BNG Prefix from DHCPv 6

IPv 6 Multi-SP Issues x. SP 1’s dns server BNG Prefix from DHCPv 6 -PD via x. SP 1/tunnel 2001: ac 00: 1234: : /64 LAN switch x. SP 1 Session x. SP 1’s prefix Gateway WAN 1 Router WAN 2 2001: db 8: 0: 1234: : /64 Prefix from DHCPv 6 -PD via x. SP 2/tunnel § What mechanism should be used for route updates? x. SP 2’s prefix x. SP 2 Session x § Should the RG request delegated prefixes from all connections? § How should DNS servers be configured? § What about host source address selection? 35 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only x. SP 2’s dns server BNG x. SP 2

Problem: Source Address Selection § Multiple prefixes on one physical interface § Wrong ISP

Problem: Source Address Selection § Multiple prefixes on one physical interface § Wrong ISP 2001: db 8: 1000: : /36 ISP-A Internet 2001: db 8: 1000: 1: : 100 2001: db 8: 8000: 1: : 100 ISP-B 2001: db 8: 8000: : /36 Dropped by ingress filter (RFC 2827) 36 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

Problem: Source Address Selection § Multiple prefixes on one physical interface § Disconnected network

Problem: Source Address Selection § Multiple prefixes on one physical interface § Disconnected network 2001: db 8: a 000: : 1 2001: db 8: 1000: : /36 Internet ISP-A 2001: db 8: 1000: 1: : 100 2001: db 8: 8000: 1: : 100 ASP-B 2001: db 8: 8000: : /36 37 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

Problem: Next-Hop Route Selection IPv 6 Internet Corporate network Provide host with routing information

Problem: Next-Hop Route Selection IPv 6 Internet Corporate network Provide host with routing information of Partner network – so that Address Selection (RFC 3484) can choose correct source address. RFC 4191 does that (but there is a problem. . ) 38 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only Partner network

Problem: DNS Server Selection § Different Answers § Public DNS returns empty answer §

Problem: DNS Server Selection § Different Answers § Public DNS returns empty answer § Private DNS returns IP address § Solution: host queries proper DNS server § long-existing industry practice Query: cnn. com Query: myasp. com 39 | Apricot 2011 | IPv 6 transition Internet NSP (Interne t) ASP / VPN (myasp. com) © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

IETF Related I-Ds <IETF> - Source address selection policy - draft-ietf-6 man-addr-select-opt Distributing Address

IETF Related I-Ds <IETF> - Source address selection policy - draft-ietf-6 man-addr-select-opt Distributing Address Selection Policy using DHCPv 6 - Route selection policy - draft-ietf-mif-dhcpv 6 -route-option DHCPv 6 Route Option - DNS selection policy - draft-ietf-mif-dns-server-selection - DNS Server Selection on Multi-Homed Hosts - IPv 6 Multi-NSP solution draft including above I-Ds - draft-troan-ipv 6 -multihoming-without-ipv 6 nat - IPv 6 Multi-homing without Network Address Translation 40 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

Source address selection/Route information/DNS selection distribution RG/Host Behaviour x. SP 2 x. SP 1

Source address selection/Route information/DNS selection distribution RG/Host Behaviour x. SP 2 x. SP 1 RG Host DHCPv 6 SOLICIT IA_PD, OPTION_ROUTE, DNS_SERVER_SELECT, OPTION_DASP DHCPv 6 ADVERTISE IA_PD: 2001: 1: 0: 1: : /64 OPTION_ROUTE: 2001: 1: : /32 -> x. SP 1 DNS_SERVER_SELECT: 2001: 1: : 10 x. SP 1. com OPTION_DASP: 2001: 1: : /32, Label 1, Prec 30 DHCPv 6 SOLICIT IA_PD, OPTION_ROUTE, DNS_SERVER_SELECT, OPTION_DASP OPTION_ROUTE: 2001: 1: : /32 -> x. SP 1 DHCPv 6 ADVERTISE IA_PD: 2001: 2: 0: 1: : /64 OPTION_ROUTE: 2001: 2: : /32 -> x. SP 2 DNS_SERVER_SELECT: 2001: 2: : 10 x. SP 2. com OPTION_DASP: 2001: 2: : /32, Label 2, Prec 10 2001: 2: : /32 -> x. SP 2 DNS_SERVER_SELECT: 2001: 1: : 10 x. SP 1. com 2001: 2: : 10 x. SP 2. com OPTION_DASP: 2001: 1: : /32, Label 1, Prec 30 2001: 2: : /32, Label 2, Prec 10 41 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only

Source address selection/Route information/DNS selection distribution RG/Host Behaviour RG Host RA PIO: 2001: 1:

Source address selection/Route information/DNS selection distribution RG/Host Behaviour RG Host RA PIO: 2001: 1: 0: 1: : /64 Autonomous 2001: 2: 0: 1: : /64 Autonomous Construct IP address DHCPv 6 SOLICIT OPTION_DASP DHCPv 6 ADVERTISE OPTION_DASP: 2001: 1: : /32, Label 1, Prec 30 OPTION_DASP: 2001: 2: : /32, Label 2, Prec 10 OPTION_DASP: 2001: 1: : /32, Label 1, Prec 30 2001: 2: : /32, Label 2, Prec 10 42 | Apricot 2011 | IPv 6 transition © 2010 Alcatel-Lucent. All rights reserved. Internal Use Only x. SP 1 x. SP 2

THANK YOU

THANK YOU