On June 6th, World IPv6 Launch Will Change The World Forever
internetsociety.org
internetsociety.org
We now have about 10 million devices happily communicating via IPv6 (mostly using RFC2893s IPv6-in-IPv4 to hop through carrier IPv4 networks) over corporate networks to back office applications - and all the processes we developed for IPv4, such as anycast, and variable-cost route advertisements, carry over just fine to IPv6.
As with any technology - you need to learn some things the hard way (the one that bit us hard was "Do not hard code your IPv6 router the way you did in the IPv4 into your hosts if you use the EUI-64 auto-promotion of router advertisements against the VLAN on your router - either (A) statically assign a 64 bit address to that router interface, or (B) use auto-router detection on your hosts") - but that's probably true of any technology.
My feeling is IPv6 is a pretty straight forward and simple technology, that has been slow to ramp, and won't achieve 100% penetration for quite a while - but has a great, and guaranteed future ahead of it. Looking forward to 6/6!
Can you explain this?
Second, The network portion for most enterprises is going to be a 48 bit super net (which network admins will memorize within a few days of working within a particularly company) followed by a 16 bit network portion. So, in the above example, the 48 bit super net is 2001:1868:209 and the network portion is FFFD.
So - now, when I see an IPv6 address, my eye automatically scans the network portion, much, much more quickly than I did in the IPv4 world, where we had 30 or 40 IPv4 networks, many of them with their own strange /30, /28/ /26 /25, etc.. net masks. I've been doing this for 16 years, and I still can't transparently do the math in my head for all variants of IPv4 - and even 2-3 seconds of translating /27 into 5 bits into 32 addresses into boundaries of 0,32,64,96,128,etc... can break your concentration. That problem no longer exists with IPv6. It's a 48 bit super net + 16 bit network for most enterprises.
Now, for those who aren't using the privacy elements, you also have advantage of embedding the MAC address in the address, so, for those of us who are OUI geeks, we can also identify the equipment in the address so (it's the first 24 bits of the host portion, with a bit of bit twiddling the in 7bit Local/Global spot) - and, we can also see whether proper EUI-64 expansion has taken place (in the above example, it hasn't - the proper EUI-64 expansion would be 0213:50FF:FE12:3456)
So - at a glance, I see the network, sub network, and hardware, skim over the FF:FE filler, and, the actual address - 12:3456 is simple to remember.
Finally - if you have a lot of hosts you are trying to put on a single network, you don't have to play games. We routinely put 25,000 devices on a single routed link, and we aren't concerned about rolling out 2,000 of those 25K device routed links for a particular instance. And we can (and have) rolled out a hundred instances of such configurations, with no overlap in addressing between any of them. Try that without gymnastics in the IPv4 world. In IPv6 it just follows the simple rules of 48 bit supernet + 16 bit network + 64 bit host field.
It takes a couple years (or at least it took me a couple years) - but once the brain's rewired - the additional structure is in _some way_, easier to understand and remember -but obviously this is all within a particular hardware and enterprise context. Clearly a Random 32 Bit IPv4 address is easier to memorize than a random 128 Bit IPv6 address.
Realistically the first 64 bits are going to be very ugly, so I disagree that a v6 will ever be much easier to remember than a v4 address. Especially with the 0 compression being back-ported to v4 stacks, running on the 10. network - You can ping 10.1 as 10.0.0.1 on many stacks now.
I can only hope that Google flipping on AAAA records permanently will change this, but I wonder how fractured the rest of the IPv6 world is.
Also, Google adding AAAAs to their hostnames won't change Cogent wanting to turn peers into customers by shutting off peering connections. This (now removed) news post on ESnet's website when they were depeered by Cogent is pretty telling, especially the bit about Cogent lying to their own customers about the nature of ESnet's unreachability:
http://web.archive.org/web/20110610220320/http://es.net/news...
If you want to see this attitude change, vote with your wallet -- stop purchasing transit from Cogent, and then tell your former Cogent sales rep exactly why you're no longer purchasing transit from them. Until their bottom line is impacted, they have no incentive to change.
Web and email servers that are publicly accessible, and your desktop or laptop that you connect at home or at a Wifi point, will probably still be IPv4.
IPv6 will be used internally by large companies, by large DSL ISPs and Comcast, but the interface the end-user will see, will be IPv4.
I think 99% of the usage will occur in non-visible ways - Comcast will have all their home-subscriber modems put out IPv4 on the side you see, but v6 on the pieces you don't, such as the management interface that lets them remotely configure and manage your modem.
Combined with large 6to4 gateways they will run on their edge (where they connect with non-v6 enabled systems), most people will not really notice anything.
The tipping point will come, but not for another 5 years I think, that is, 2 more hardware upgrade generations.
Mobile of course, will go to v6 first, since no-one cares as to how their phone accesses the web.
I think this will be the tipping point where I start seeing a v6 address as the first class citizen. When I have to start bugging my ISP for a port mapping, I will prefer to just have the entire session occur natively on v6 because it will no longer be the toy, it will have graduated to the tool.
IPv6 will be seeing the same fate as what IE6 has within the corporate networks.
Examples:
We're solving a chicken and egg problem by providing more and more chicken so eggs ought to follow.
Is there a way to enable IPv6 tunneling on OS X in a way that doesn't require firewall configuration?
While SixXS provides proto41 tunnels too, they also provide AYIYA tunnels, a (standardized) encapsulation protocol able to pass NATs and handle IPv4 local endpoint changes with ease. For this you need to use their companion (open-source) tool called aiccu. Another advantage of aiccu is that it uses a protocol for autoconfiguring the tunnel (TIC), so you don't need to do some ifconfig incantations. Just put your creds in the config file, do aiccu start or load the plist and you're IPv6 enabled. I've written a homebrew formula for aiccu [0] and made a pull request, so it should be available straight from brew search/install aiccu.
[0] https://github.com/lloeki/homebrew/blob/aiccu/Library/Formul...
Set up a tunnel on a machine: Teredo for a single host, or 6to4/6in4/AYIYA via HE or SixXS, then use that machine as a router to distribute a /64.
For those with an Apple Airport Extreme or a Time Capsule, using the Airport Utility 5.x you can trivially set up a 6to4 tunnel if you have a public IPv4 address on its WAN side, or easily set up a HE 6in4 tunnel.
It takes me from 5min to 15min to enable a machine or a whole network with internet-enabled IPv6.
Not sure ipv6 qualifies as "some kind of hell," but I'll take any reason for an Iron Maiden reference.
That said, the "hell" part seems to be getting big ISP's to roll out ipv6 support. Last I checked, Time Warner Cable still didn't have ipv6 available to RoadRunner customers, at least not here in NC. :-(