2012.12.11 presentation i_pv6_fedict

© Fedict 2012. All rights reserved

Fedict and IPv6BELTUG – Grimbergen – 11/dec/12

© Fedict 2012. All rights reserved | p. 2

About Fedict

Source: http://fedict.newlink.be/uploaded_files/pic_08v2.jpg

© Fedict 2012. All rights reserved | p. 3

Fedict

Federal Public Service ICT e-gov building blocks, expertise center

Hosts several (but not all) federal services Belgium.be Federal Authentication Service (FAS) Federal Service Bus (FSB)

FedMAN High-speed, secure network between FPS Developed by Belnet

© Fedict 2012. All rights reserved | p. 4

Getting there

Source: http://commons.wikimedia.org/wiki/File:Street_Sign_with_ideas.jpg

© Fedict 2012. All rights reserved | p. 5

Regulations

Digital Agenda for Europe

Decision Council of Ministers (June 22, 2012) Implementation of IPv6 within 2 years Focus on G2C / G2B services

Official note to federal administrations Published in “Staatsblad” (October 26, 2012) Each FPS, ... should appoint an IPv6 lead Each FPS, … is responsible for their own IPv6 roll-out

© Fedict 2012. All rights reserved | p. 6

The approach

People Create awareness Human communication

Product and services Ask all our suppliers if their products support IPv6 ... … and if not: when will this be implemented ? Gradually replace IPv4-only products and services

Patience Report (and sometimes fix) issues

© Fedict 2012. All rights reserved | p. 7

People

Source: http://commons.wikimedia.org/wiki/File:Docteurs-SorbonneUniversit%C3%A9s-15.jpg

© Fedict 2012. All rights reserved | p. 8

Creating awareness

2nd round of Belnet workshops (federal) network engineers End of January 2013 Theory + practice

IPv6 newsletter ICT managers and FedMAN contacts Regions / Communities / CBSS

Workgroup FPS Economy, Fedict, FCCU, ...

© Fedict 2012. All rights reserved | p. 9

Products and services

Source: http://www.greenwavereality.com/solutions/led-lighting/

© Fedict 2012. All rights reserved | p. 10

The big picture

Network

Security andavailability

Platforms

ApplicationsExternalServices

© Fedict 2012. All rights reserved | p. 11

FedMAN and IPv6 connectivity

FedMAN Operated by Belnet IPv6-ready since end 2009

/48 for each FedMAN customer IPv6 traffic on explicit request (test or production) In use: Fedict, SPF Int.Affairs, Court of Audit, FCCU Soon: SPF Economy

© Fedict 2012. All rights reserved | p. 12

Example IPv6 clause public tenders

IPv6 must be available immediately Products and services

IPv6 must be on par with IPv4 Performance Functionality Availability Security Support

© Fedict 2012. All rights reserved | p. 13

Questionnaire

Sent to suppliers Products and services

Are your products / services IPv6 ready ? Today ? Upgrade required ? When ?

If not, provide a plan towards IPv6

Some surprises Positive and negative

© Fedict 2012. All rights reserved | p. 14

Patience

Source: http://commons.wikimedia.org/wiki/File:Bios_robotlab_writing_robot.jpg

© Fedict 2012. All rights reserved | p. 15

Currently testing

Golden rule: do not touch production IPv4 Just add “something” in front of IPv4 infrastructure New environment: consider Dual Stack

Reverse proxy Easy for HTTP

NAT64

© Fedict 2012. All rights reserved | p. 16

Pay attention to ...

Tablets and smartphones DHCPv6 support ?

Firewalls / load balancers IPv6 support in hardware (performance) ?

Peering disputes If any, your ISP may block some IPv6 traffic

External services E-payment, anti-spam, webstats, … ?

© Fedict 2012. All rights reserved | p. 17

If you want an IPv6-only data center

Databases Connectors / clusters may not be certified in IPv6

Management tools Monitoring / TAPs Storage / backup systems

Cloud offerings Do they support IPv6 ?

© Fedict 2012. All rights reserved | p. 18

Questions ?

Source:http://commons.wikimedia.org/wiki/File:20_questions_1954.JPG

© Fedict 2012. All rights reserved

Thanks !Bart Hanssens / Fedict

Maria-Theresiastraat 1

1000 Brussels, Belgium

@BartHanssens

bart.hanssens [at] fedict.be