18
22 Feb 2011, APRICOT/APAN Hong Kong IPv6 Experience at Internode Development and Deployment Thursday, 17 February 2011

IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as [email protected] to get IPv4, [email protected]

  • Upload
    others

  • View
    1

  • Download
    0

Embed Size (px)

Citation preview

Page 1: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

22 Feb 2011, APRICOT/APAN Hong Kong

IPv6 Experience at InternodeDevelopment and Deployment

Thursday, 17 February 2011

Page 2: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

Talk Outline

✤ Who is Internode?

✤ The market in which we operate

✤ Our network

✤ Implementation

✤ Broadband trial

✤ Salient points

Thursday, 17 February 2011

Page 3: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

Who are we?

✤ Australian broadband ISP

✤ Privately owned

✤ Good mix of business customers and about 200,000 residential broadband customers

✤ Marketplace reputation as an innovator and thought leader.

Thursday, 17 February 2011

Page 4: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

Our Marketplace

✤ ADSL2+ with PPPoE

✤ BYO CPE

✤ L2TP wholesale

✤ Usage accounting with strong accuracy requirements

✤ Significant customer support issues associated with departure from legacy.

Thursday, 17 February 2011

Page 5: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

Our Network

✤ Globe-spanning

✤ Australian portion is about 60mS RTT Perth-Brisbane

✤ At least two major POPs per state capital city

✤ At least one BRAS/LNS per major POP.

Thursday, 17 February 2011

Page 6: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

!"#$%"

SXC : Southern Cross CableAJC : Australia-Japan CablePPC1 : Pipe Pacific 1 Cable

SMW3 : SEA-ME-WE 3 Cable

&$'%($)'*+$),-&.-/%'0+(123$%-4565

This diagram is the property of Internode Pty Ltd - AS4739 - Indicative representation only

.%('7 8%9%$#

Fibre optic link

syd7

8+:-;$9%,%:

lax1

!)$-2+:%

sjc2

<+1"+nrt1

NTTEquinixJPIX

per1 syd6

hkg1

SprintAstraweb

GoogleEquinix

Global CrossingLevel 3

SprintEquinix

Any2Google

Global CrossingLevel 3

;:7=3($

8+$#+$

per2

!*$9)>+(%sin1

StarhubEquinix

?+$9-@+$9NTTHKIX

(for more detail, see domestic IP diagram)

622 Mbps(AJC)

622 Mbps

622 Mbps(SMW3)

622 Mbps

622 Mbps

4.8 Gbps (SXC)

4.8 Gbps (SXC)

2.4 Gbps(PPC1)

1.8 Gbps (AJC)

International Gateway PoP

Peer

Transit

Cable Station

Domestic PoP

PAIX

2.4 Gbps(PPC1)

APE

Equinix

AMS IXLINX 1LINX 2

to Singapore (sin1)1 Gbps

to London (lon1)1 Gbps

NTT

NTT

akl1

lon1

iad1

;3A1,)$#100 Mbps

1 Gbps

1 Gbps1 Gbps

1 Gbps

1 Gbps

Equinix

Internode’s network

Thursday, 17 February 2011

Page 7: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

Our IPv6 Transition

✤ Internode’s owner and founder has always wanted to do it.

✤ Geoff Huston’s presentation about IPv4 utilisation rates at RIPE in July 2007 was the catalyst to get started.

✤ Geoff predicted IPv4 exhaustion in 2009, amusing in retrospect.

Thursday, 17 February 2011

Page 8: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

Our IPv6 Transition

✤ “Outside-in”

✤ Started at our peering edge router in San Jose, CA.

✤ Progressively brought it in to the rest of the network over the next few weeks.

✤ Killed bugs as we progressed (e.g.: C7200 accidentally exporting IPv6 prefixes to IPv4 RIB)

✤ Automated BGP config helped a lot! Change one script to fix the whole network

Thursday, 17 February 2011

Page 9: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

Our IPv6 Transition

✤ Core network done, first access customer in January 2008.

✤ IPv6 dual-stack for network design/operations staff at home on ADSL provided via multihop L2TP to a private LNS

✤ Early access for technical staff enables skills development, training.

Thursday, 17 February 2011

Page 10: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

Digression: Is a /32 big enough?

✤ Some folks advocate /48 assignments for everyone.

✤ There are 65536 /48’s in a /32 -- a bit small for an ISP with 200,000-odd customers.

✤ Perhaps not every customer is going to get a /48.

✤ Dynamic IP isn’t going away.

✤ Hope /32 is big enough, ‘cos we’re kinda committed to it now!

Thursday, 17 February 2011

Page 11: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

Broadband Customer Edge

✤ Australia uses access methods not widely considered by IPv6 boosters.

✤ PPPoE IP6CP, SLAAC with ND/RA to allocate addresses for broadband CPE.

✤ /64 for the link drawn from a dynamic pool.

✤ DHCPv6-PD for prefix assignment

✤ Static or dynamic depending on service type, config by Radius.

✤ Mostly dynamic.

Thursday, 17 February 2011

Page 12: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

Vendor Support

✤ As it turns out, that deployment model is rather difficult.

✤ Cisco 10Ks are IPv6-challenged.

✤ Switched to ASR 1000 series, IOS-XE 2.6.x

✤ IOS-XE 2.6.x has had its own bugs, which we’ve been working through with Cisco.

✤ Customer-facing opt-in trial commenced November 2009 on Cisco 7200-series LNSs, 12.2(33)SRDx.

Thursday, 17 February 2011

Page 13: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

IPv6 Broadband Trial

✤ 7200-series platform

✤ Multihop L2TP

✤ PPP login as [email protected] to get IPv4, [email protected] to get dual-stack.

✤ Several purposes:

✤ CPE vendors: “Test against this”, solves chicken and egg problem.

✤ Geek users: “Here’s your playpen.”

✤ Internode: Operational experience, debugging, testbed, etc.Thursday, 17 February 2011

Page 14: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

Bugs and Misfeatures

✤ IPv6 accounting: Not so good (e.g., no accounting if v4 or v6 not negotiated)

✤ DHCPv6-PD DoS: Radius query every time PD request received, no caching.

✤ Cisco DHCPv6-PD server occasionally “forgetting” delegations.

✤ Bug-roulette: Find IOS that works well with both v4 and v6...

Thursday, 17 February 2011

Page 15: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

Current status

✤ Intending to migrate the trial platform from 7200s to ASRs running 2.6.2-ES this week.

✤ Will leave it that way for two weeks.

✤ Move to our production BRAS/LNS systems (stop L2TP multihopping) early March 2011.

Thursday, 17 February 2011

Page 16: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

Still to do

✤ Our IPAM system is, in the Aussie vernacular, “agricultural.”

✤ Needed a rewrite anyway, now the rewrite will include IPv6.

✤ No ISG support for IPv6

✤ DNS: A great big barrel of bad. Thankfully another team’s problem :)

✤ vpnv6 address family in our MPLS layer-3 VPN product

✤ All configs automated out of a provisioning system, this shouldn’t be too hard.

Thursday, 17 February 2011

Page 17: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

Lessons and recommendations

✤ Automate everything.

✤ But don’t use IPv6 as the reason to automate, else you won’t be able to do it until the automation is finished

✤ Be practical: Religious wars about implementation details are boring and pointless at this stage.

✤ To vendors: No more excuses. Stop stalling and just do it, okay?!

✤ Shipped products and running code; everything else is detail.

✤ Be “incremental.” Doesn’t have to be all-or-nothing.

Thursday, 17 February 2011

Page 18: IPv6 Experience at Internode - Home - HPCpublic · IPv6 Broadband Trial 7200-series platform Multihop L2TP PPP login as foo@internode.on.net to get IPv4, foo@ipv6.internode.on.net

22 February 2011

Any questions?Mark Newton, [email protected], @NewtonMark

Thursday, 17 February 2011