“The countdown to the saturation of the IPv4 address supply is now down to a matter of months: and along with the vast address space of the next-generation IPv6 architecture comes more built-in network security as well as some new potential security threats. …its adoption also poses new security issues, everything from distributed denial-of-service (DDoS) attacks to new vulnerabilities in IPv6 to misconfigurations that expose security holes.”
Read full story: Dark Reading
Tags: CircleID · IPv6 · internet
Eric Vyncke reporting in the NetworkWorld: “IPv6 exists for more than 15 years and it is rumored to be deployed extensively in Asia and especially in Japan and China with Africa being the last continent to deploy IPv6. Another place where there should be a lot of deployments is of course in the USA with the US Government IPv6 mandates. But, when it comes to measure where web sites are actually deployed over IPv6, the rumor proves to be just a myth…”
Tags: CircleID · IPv6 · internet
Verizon Business has a message to companies still reluctant to migrate their networks to IPv6: You’re better off doing it now than later. William Schmidlapp, Verizon Business’s product manager for Internet dedicated access services, says that the advent of 4G LTE and WiMAX-based devices will only increase the need to switch over to IPv6, since each of those devices will require its own IP address…
Read full story: Network World
Tags: CircleID · IPv6 · internet
We are at the height of vacation season here in the Netherlands, and the RIPE NCC headquarters in Amsterdam are quieter than usual. The downtime has given me a chance to reflect on how the recent economic downturn has affected our membership growth.
The good news is that it hasn’t.
Our membership, made up of Local Internet Registries (LIRs) from our service region in Europe, the Middle East and parts of Central Asia, is creeping very close to 7,000. Overall, we’ve had a stable increase in growth from 1994, when the RIPE NCC first started operations, to present day.
If we take a more detailed look at accumulative membership growth per 12-month period, you can see a definite lull in 2001-2002. This, of course, was when the dotcom bubble burst. Our membership still grew during this time, albeit at a snail’s pace.
But the recent economic downturn, even amid speculation of a double-dip recession, has not had a negative impact on our membership. One can only assume that the reason for this is that while the manufacturing and financial industries took the brunt of this economic blow, the Internet industry continues to grow at an astonishing pace.
Other factors that may impact our membership growth include IPv4 depletion, though we haven’t seen evidence of the impact of this to date.
Now back to vacation time…
Note: The RIPE NCC is an association and only its members can receive the full RIPE NCC service portfolio. Organisations become members mainly to request Internet Number Resources – IPv4 and IPv6 addresses and Autonomous System (AS) numbers.
Written by Daniel Karrenberg, Chief Scientist at the RIPE NCC
Tags: CircleID · IPv6 · internet
The Internet Service Provider (ISP) community is carefully watching the impending depletion of the unassigned IPv4 address pool. Most estimates place the depletion of the central pool of unassigned IPv4 addresses by mid-2011. After that, each Regional Internet Registry (RIR) will continue to satisfy requests for additional IPv4 space for a limited time (depending on the rate of incoming requests and the amount of address space on hand in the RIR at the time of central pool depletion).
To continue growing, ISPs require access to a steady stream of IP addresses to connect new customers. In ARIN’s service region (Canada, the United States, and parts of the Caribbean), allocation policies have resulted in growing ISPs requesting additional IP addresses every 6 to 12 months. These policies emphasize that addresses are available based on documented need per community-developed criteria; similar policies exist in the four RIRs serving the other regions of the globe.
As the available supply of IPv4 address space dwindles, ISPs are encouraged to deploy IP version 6 (IPv6), which is the successor protocol to IPv4 developed by the Internet Engineering Task Force (IETF). All of the application protocols that make the Internet a great success (e.g. HTTP for the world wide web, SMTP for email, etc.) work over IPv6, so it is predominantly a network change resulting in a new Internet that still looks to the end-user just like the IPv4 Internet today.
However, organizations looking to deploy IPv6 may be undertaking their most significant network change to date. While IPv6 has similar routing and performance properties when it comes to connecting new customers, the need to interoperate with the existing IPv4 Internet requires that ISPs must also provide IPv6/IPv4 address translation of customers’ traffic. This interoperability requirement creates a number of engineering and capital challenges that are of great concern to ISPs across the globe.
Because of these challenges, ISPs are also interested in alternatives to deploying IPv6, or ways to defer their IPv6 initiatives until a time they deem most appropriate. This is reasonable, as ISPs are businesses that must manage their resources as efficiently as possible to stay competitive, and each faces unique issues regarding the optimal time for additional infrastructure investment and deployment.
ISPs wishing to use IPv4 to continue connecting new customers for a short time post-depletion do have an option: to get usable IPv4 address space via a third-party. This approach may temporarily allow deferring the technical and capital challenges associated with introducing IPv6 infrastructure, but substitutes other potential costs and risks that may be manageable from the ISP’s perspective.
In the ARIN region, a transfer of IPv4 address space to a specified recipient is possible due to a relatively new policy that was formulated and endorsed by the community. The “Transfers to Specified Recipients” policy (contained in section 8.3 of the ARIN Number Resource Policy Manual – NRPM) recognizes that some organizations may wish to release IPv4 address space to ARIN for reassignment to a specified party that has documented need.
Since Internet number resource assignments ‘are valid as long as the criteria continues to be met’ (per IETF RFC 2050), address holders who no longer need their IPv4 addresses have always been encouraged to return them to the RIR system so that they can be assigned to those with need. In fact, many organizations (including the US Dept of Defense, BBN, and Stanford University) have returned significant amounts of IPv4 address space for the benefit of the Internet community.
It is relatively straightforward for organizations to return entire address blocks, but years of mergers, reorganizations, and equipment upgrades often result in organizations using addresses that are sparsely allocated out of many address blocks. Those that want to do the right thing and renumber to free up address space for return may face a formidable task, depending on the complexity and scale of their operation. One of the most significant benefits of the transfer policy is that it provides an incentive for the return of address space which otherwise would remain underutilized.
There are several things for organizations to consider before using this policy. First, the Specified Transfer policy provides a way of getting IPv4 address space once your need has been documented and approved by ARIN, per the normal IPv4 address space request process. (From a practical perspective, there’s very little reason for ISPs to use the Specified Transfer policy as long as ARIN has available resources for approved IPv4 requests). Second, any address space to be transferred must be under a registration services agreement with ARIN, as the process of bringing it under agreement allows for address holder verification. Later this year, ARIN will provide a listing service for organizations that have approved requests for address space and for those that may be able to make resources available for transfer.
ISPs considering extending their existing model with this approach have one additional item to consider: while continuing to use IPv4 for customer connections may be expedient in the immediate future, the cost-effectiveness of this approach will quickly diminish with the growth of IPv6-based Internet capabilities. ISPs deferring their transition to IPv6-based services will eventually have to compete with those who faced the challenge and built their IPv6 capabilities from the beginning.
Written by John Curran, President and CEO at American Registry for Internet Numbers (ARIN)
Tags: CircleID · IPv6 · internet
War, famine, pestilence and death.
They fought for the last IPv4 addresses, hoarded and sold them at outrageous prices, traffic and commerce came slowly to a halt… Pestilence invaded the internet…
Bandits roam the lands. A retired general told recently that the internet looks like the North German plains, easy to invade. Cyberwar and Cybersecurity are becoming mainstream subjects and have increasing Government attention.
In France an ultra secure lab was set up in Nancy to handle and find antidotes for the most dangerous of these viruses to avoid a E-bola type pandemic. They manipulate these viruses in a network completely isolated from the rest of the internet. As isolated and sterile as a P4 lab for infectious diseases.
Nasty IPv6 strains? Masquerading as some-one else was supposed to be more difficult with IPv6 as address abundance would result in much less Network Address Manipulation. But the NAT remains a source of possible pestilence. And will privacy options in IPv6 making it easier still for bad guys to hide?
In the meantime the reality of the paucity of IPv4 addresses sinks in. Five percent of the space left and the IANA granaries will be empty in 300 days or so.
The world notices. The Renesys reports which provide the pulse of the internet to all its serious practitioners noted that over the late July 10 day period, 440 new IPv6 prefixes were registered compared to 1449 IPv4 prefixes. 23% of all registrations are now IPv6. This proportion will certainly continue to rise quite rapidly.
The white, red, black and pale stallions will remain in their stables.
Written by Yves Poppe, Director, Business Development IP Strategy
Tags: CircleID · IPv6 · internet
This graph illustrates the three phases that have defined the RIPE community’s journey to IPv6 deployment since 1999. (Click to Enlarge)In the previous graph and article published here two weeks ago, we showed that many ISPs in the RIPE NCC service region (Europe, the Middle East and parts of Central Asia) have not yet obtained IPv6 addresses from the RIPE NCC. Our latest graph demonstrates just how quickly this is changing.
In this graph you can see the number of IPv6 allocations made by the RIPE NCC to its members since 1999. Three phases are clearly visible:
Experimental Phase (1999 – 2002)
During the experimental phase allocations were made sporadically.
Early Adopters (2002 – 2007)
During this phase there was a steady flow of requests from early adopters.
Deployment (2007 – Now)
Since 2007 we have witnessed a growing number of IPv6 allocation requests.
More and more ISPs are obtaining IPv6 addresses at present, which is very encouraging. It is essential that all organisations worldwide will deploy IPv6 quickly enough to ensure the sustainable growth of the Internet.
Read more about this graph on the RIPE Labs site.
Written by Daniel Karrenberg, Chief Scientist at the RIPE NCC
Tags: CircleID · IPv6 · internet
John Ribeiro from IDG News reports: “India will start using IPv6 (Internet Protocol version 6) from March 2012, according to a new roadmap released by the Indian government. All telecom and ISPs will have to be IPv6-compliant by the end of next year and offer IPv6 services thereafter, the government said in a statement issued on Wednesday by the country’s Press Information Bureau.”
Read full story: PC World
Tags: CircleID · IPv6 · internet
RIPE Labs graph looks at IPv6 ripeness rate of all countries in the RIPE NCC service region as measured in July 2010. (Click to Enlarge)As the unallocated IPv4 address pool runs out, are Internet Service Providers (ISPs) actually deploying IPv6?
This graph, the first in a series from RIPE Labs, looks at the IPv6 “ripeness” of all ISPs registered as RIPE NCC members. We created a rating system that gives ISPs up to four “stars” for IPv6 services that they provide, based on the following criteria:
• The ISP has an IPv6 allocation
• The address prefix is actually routed on the Internet
• A route6 object is registered in the RIPE Database
• Reverse DNS has been set up
The graph illustrates countries in the RIPE NCC service region (Europe, the Middle East and parts of Asia) that have at least five ISPs; each one gets a rating ranging from zero stars to four stars. The graph indicates the level of IPv6 deployment in a specific country and in the region as a whole.
Some key findings show that:
• 27% of all ISPs in the RIPE NCC service region have at least one IPv6 allocation
• 8% have achieved four-star IPv6 ripeness
• Slovenia has the highest IPv6 deployment: 67% of all ISPs in Slovenia have at least one star and nearly 25% have four stars!
Slovenia is doing exceptionally well, undoubtedly due to a very active and persuasive IPv6 community. Of course, in a relative scoring system like this, smaller countries have a slight advantage. However, it’s worth noting that the runners-up include larger economies such as Portugal, the Netherlands and Germany.
The bad news is that nearly 73% of all ISPs have not even requested IPv6 space yet (indicated by the white bars on the graph). It’s surprising that so many ISPs have yet to feel the urgency to deliver their services on IPv6 to enable their business to grow, especially when only a little more than 6% of IPv4 address space remains.
The deployment rate of IPv6 is certainly lagging far behind what technical experts consider desirable, but there is clearly a positive trend. We will bring you more hard numbers on IPv6 deployment in this series.
What next?
We are considering extending our rating with a fifth star based on reachability over IPv6. We have several ideas, but we are curious to hear from you—what do you think is a good way to measure IPv6 reachability?
Read more about the methodology to collate this data on the RIPE Labs site.
Written by Daniel Karrenberg, Chief Scientist at the RIPE NCC
Tags: CircleID · IPv6 · internet
Tuesday June 29th at the Cisco Live Conference Las Vegas, John Chambers announced their newest product, the Cius tablet aimed at the enterprise market and positioned as a mobility product. That very same day a two hour IPv6 deployment panel, moderated by Cisco’s Alain Fiocco, featured Google, Microsoft, Comcast and Tata Communications in front of a room filled to near capacity.
The nature of the audience was interesting. Compared to previous years, when asked about their affiliation, the number of hands raised for the category ‘enterprise’ was significantly higher. ISP’s, Government and Education sector used to dominate but Industry now seems to have finally taken notice.
The session was prefaced by John Chambers’ video, the same one presented at the Google IPv6 Conference some weeks ago, announcing Cisco’s commitment to IPv6 support on all product lines. Top down works in most Corporations, so the various fiefs and divisions will certainly take notice as they will most likely be regularly probed on their progress. Let us assume that their bonuses will also be linked to some IPv6 related deliverables, this always brings quite some focus.
What remains of the increasingly putrid IPv4 address pool seems to dry up even faster under the scorching sun of the Vegas Valley. The exhaustion counters agree that a year from now the IANA pool will be dry while some pundits hypothesize a final run on the remaining IPv4 address blocks. Why not a betting site on the exact IPv4 exhaustion date? after all this is Vegas. Allocation of ever smaller blocks remains a temptation, ignoring the fact that associated table sizes would put possibly unbearable strain on routing and affect service quality. ‘Business continuity’ is becoming the new mantra for a more rapid adoption of IPv6. The perceived issues, not surprisingly are the lack of training and back-office readiness as already voiced at the Google Conference.
In the meantime the tier 1 networks are ready, the active IPv6 BGP table is now well over 3000 and shows a healthy growth, content is increasingly IPv6 accessible, operating systems are ready and IPv6 trickles down all the way to the eyeballs, in other words the end-user. Some end-user customers even switched to Comcast, just to be part of their IPv6 trial.
When I will see ‘IPv6 ready’ written on a Cisco Linksys box at Future Shop, I will buy one. I am also eagerly waiting for Videotron, my cable and internet provider, to follow in Comcast’s steps.
And by the way, we were told that Cius is Android based and IPv6 ready.
IPv6 is doing well under the desert sun and summer heat.
Written by Yves Poppe, Director, Business Development IP Strategy