Challenges and Opportunities in Deploying IPv6, DNSSEC, and Other Key Technologies (ION Toronto...

12

Click here to load reader

description

At the Internet ON (ION) Conference in Toronto on November 14, 2011, Paul Andersen, President of EGATE Networks Inc. and Board member of CIRA and ARIN, led a panel discussion into deployment and operations issues with IPv6 and DNSSEC. The panelists all had actual deployment experience and brought a number of different viewpoints to this discussion. In this introductory slide set, Paul Andersen set the scene for the discussion and provided some basic info about IPv6 deployment, particularly in Canada.A video recording of the session will be available for viewing. Details will be posted at http://www.isoc.org/do/blog/ when the video is available.More information about the global series of ION conferences can be found at http://www.isoc.org/ion/

Transcript of Challenges and Opportunities in Deploying IPv6, DNSSEC, and Other Key Technologies (ION Toronto...

Page 1: Challenges and Opportunities in Deploying IPv6, DNSSEC, and Other Key Technologies (ION Toronto 2011)

www.internetsociety.org

Panel Discussion: Challenges and Opportunities in Deploying IPv6, DNSSEC, and Other Key Technologies October 5, 2011

Moderator: Paul Andersen, P. Eng

President EGATE Networks Inc. Chair, Board of Directors – Canadian Internet Registration Authority Treasurer, Board of Trustees – American Registry for Internet Numbers

Page 2: Challenges and Opportunities in Deploying IPv6, DNSSEC, and Other Key Technologies (ION Toronto 2011)

The Internet Society

Agenda

Agenda and Introduction to Panel You Are Here!

Quick Scene setting [moderator]

Initial panelist remarks

Discussion and Audience Q&A

10/5/11 2

Page 3: Challenges and Opportunities in Deploying IPv6, DNSSEC, and Other Key Technologies (ION Toronto 2011)

The Internet Society

Panelists

Joe Abley: Director of DNS Operations, ICANN

Bill St. Arnaud: Green IT Consultant at St. Arnaud-Walker and Associates Inc.

Jacques Latour: Director Information Technology, Canadian Internet Registration Authority

John Sweeting: Director of Network Engineering, Time Warner Cable

Nov 14, 2011 3

Page 4: Challenges and Opportunities in Deploying IPv6, DNSSEC, and Other Key Technologies (ION Toronto 2011)

www.internetsociety.org

Scene-setting

Page 5: Challenges and Opportunities in Deploying IPv6, DNSSEC, and Other Key Technologies (ION Toronto 2011)

The Internet Society

Where does new technology come from…

Engineering / Open Stds

Research

Policy Operations

Business

Nov 14, 2011 5

Page 6: Challenges and Opportunities in Deploying IPv6, DNSSEC, and Other Key Technologies (ION Toronto 2011)

The Internet Society

DNSSEC: Rebuilding The Plane While In Flight…

• Serious flaws identified as far back as 1990

• Flaws publicized in 1995

• 1st Attempt at IETF (RFC 2065) started in 1997

• Attempts to implement lead to (RFC 2535) in 1999

• Scaling issues cause us back to drawing board to

develop DNSSEC-bis (RFC 4033) taking us to 2005

• Critical piece NSEC3 not formally defined until 2008

• Some TLD’s start to sign zones (.se, .cz, .org)

• Root Signed July 15th, 2010

• Comcast Deploys DNSSEC in October 18th, 2010

10/5/11 6

Page 7: Challenges and Opportunities in Deploying IPv6, DNSSEC, and Other Key Technologies (ION Toronto 2011)

The Internet Society

IPv6: Two Railway Tracks – Different Rail Gauge

• 1990: Community sees there is a problem

• 1993: Design starts at IETF

• 1995: IPv6 First Defined by RFC 1883

• 1998: IPv6 Updated by RFC 2460

• 1999: Regional Internet Registries start allocating IPv6

• Feb 2011: IANA Hands Out Last Address Space

• April 2011: APNIC free pool reaches final /8

• June 2011: Happy World IPv6 Day!

10/5/11 7

Page 8: Challenges and Opportunities in Deploying IPv6, DNSSEC, and Other Key Technologies (ION Toronto 2011)

The Internet Society

IPv6: Two Railway Tracks – Different Rail Gauge

Number of Major ISP’s in Canada

offering IPv6 Today on Broadband

?

10/5/11 8

Page 9: Challenges and Opportunities in Deploying IPv6, DNSSEC, and Other Key Technologies (ION Toronto 2011)

The Internet Society

IPv6: Two Railway Tracks – Different Rail Gauge

Number of Major ISP’s in Canada

offering IPv6 Today on Broadband

1* - TekSavvy (in beta)

* Source: What Paul has heard – if there are others you should probably be a bit more public about it…

10/5/11 9

Page 10: Challenges and Opportunities in Deploying IPv6, DNSSEC, and Other Key Technologies (ION Toronto 2011)

The Internet Society

Opportunities

Nov 14, 2011 10

There is no central control of the Internet

No need for “permission” to innovate.

– E.g., to create and deploy the World Wide Web!

The landscape can change dramatically when actors see and seize opportunities

Does anyone remember “AltaVista”?

Page 11: Challenges and Opportunities in Deploying IPv6, DNSSEC, and Other Key Technologies (ION Toronto 2011)

The Internet Society

Challenges

Nov 14, 2011

11

There is no central control of the Internet

No “master upgrade plan”

Individual actors (operators, content providers, users, etc) move at their own pace

If an access provider has “no business case”, why invest in a new technology?

So, the Internet needs IPv6 and DNSSEC, but getting all the actors to move is a challenge.

Page 12: Challenges and Opportunities in Deploying IPv6, DNSSEC, and Other Key Technologies (ION Toronto 2011)

www.internetsociety.org

Panel discussion

10/5/11 12