Measuring IPv6 some more - CAIDA · Measuring IPv6 some more [email protected] ... Emile Aben,...

22
Measuring IPv6 some more [email protected] 2010-02 Thursday, 10 February 2011

Transcript of Measuring IPv6 some more - CAIDA · Measuring IPv6 some more [email protected] ... Emile Aben,...

Measuring IPv6 some [email protected]

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

IPv6 - why should you care?

• IPv4 address pool empty soon

2

Source: potaroo.net

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

IPv6 - why should you care?

• IPv4 address pool empty soon

2

Source: potaroo.net

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

IPv6 - alternatives?

• After IPv4 depletion:– Stop connecting devices to the Internet?

– Carrier Grade NAT (aka. LSN, double NAT, NAT444)?

– $$$ for ISPs

– Opaque Edge, barrier for:

– LEA

– app developers

– researchers

– <your idea here>

3

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

IPv6 - where are we?

• We want to provide more insight into IPv6 deployment

• Explain differences:– Routing table: 8.5% of ASes (http://v6asns.ripe.net)

– Web traffic: 0.3%-2% of clients

• Measure IPv6 connectivity of end-users combined with ISP infrastructure

4

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

Measurement start

5

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

HTTP measurement

6

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

DNS measurement

7

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

HTTP measurement - details

8

Authoritative DNS server determines IP protocol choices for HTTP request

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

DNS measurement - details

9

Delegating DNS server determines IP protocol choices for DNS request from resolver to authoritative DNS server

Thursday, 10 February 2011

Measurement results

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

Measurements from www.ripe.net

11

% Web clients with v6 capable DNS resolvers

% Web clientsv6 preference(dual stack)

% Web clientsv6 capable(dual stack + transition tech)

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

Measurements from www.ripe.net

11

% Web clients with v6 capable DNS resolvers

% Web clientsv6 preference(dual stack)

% Web clientsv6 capable(dual stack + transition tech)RIPE meetings

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

Compare to other hosting sites

12

0 %

2 %

4 %

6 %

8 %

10 %

12 %

14 %

ripencc

caidanordic_regulator

IPv6 deployment indicators per site(average over the last 7 days)

client IPv6 preferenceclient IPv6 capability

clients with IPv6capable resolvers

Compare to Google 0.2% client IPv6 preference

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

Conclusions from measurements

• Measuring specific populations

• Strong Weekday-weekend pattern in preference

• DNS infrastructure far more IPv6 capable then the clients using it

– Indicates deployment problems near the edge

• Significant fraction of end-hosts don’t have native IPv6 but can use transition technologies

13

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

Transition Technologies

• Make IPv4 <-> IPv6 communication possible

• Most used IPv4 -> IPv6:– 6to4

– Teredo

• Rumor: 6to4 quite often broken– why not measure?

14

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

Anycast 6to4

15

1.1.1.1

2001:db8::1

IPv4: 1.1.1.1 -> 192.88.99.1

IPv6: 2002:101:101::1 -> 2001:db8::1TCP

IPv4: 192.88.99.1 -> 1.1.1.1

IPv6: 2001:db1::1 -> 2002:101:101::1TCP

192.88.99.0/242002::/16

192.88.99.0/242002::/16

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

6to4 failing connections

• Capture TCP/IP headers to 2002::/16 (6to4)– combined active/passive measurement

• Look for any traffic after SYN+ACK => success

16

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

Why 6to4 fails

• Depending on the kindness of strangers– 6to4 relay overload

• Firewalls– Blocking IPv6-in-IPv4 (IP proto 41)

– unknowingly even, with bad failure mode

17

allow outbound (tcp|udp|icmp) keep-stateallow inbound established

deny inboundallow outbound (implicit)

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

Final thoughts

• Keep the Internet measurable:– IPv6 the only viable alternative to a murky edge

• IPv6 deployment is happening– slowly but surely

• Transition is going to be interesting– Problematic transition technologies

– Measurement opportunities

– World IPv6 day (June 8 2011)

18

Thursday, 10 February 2011

Emile Aben, 2011-02, AIMS3

Further reading - RIPE Labs• https://labs.ripe.net/Members/emileaben/6to4-how-bad-is-it-really

• https://labs.ripe.net/Members/emileaben/interesting-graph-ipv6-performance

• https://labs.ripe.net/Members/emileaben/content-measuring-ipv6-web-clients-and-caching-resolvers-part-1

• https://labs.ripe.net/Members/emileaben/content-measuring-ipv6-web-clients-and-caching-resolvers-part-2-country-level-and-other-statistics

• http://labs.ripe.net/content/measuring-ipv6-web-clients-and-caching-resolvers-part-3-methodology

19

Thursday, 10 February 2011

Questions?

Thursday, 10 February 2011