D

ISC

OV

ER

TH

E T

RU

E V

AL

UE

OF T

EC

HN

OL

OG

Y

Federal IPv6

Transition and The

Department of

Veterans Affairs

GoGoNet Live 3

November 13, 2012

Dale Geesey Chief Operating Officer Auspex Technologies, LLC Phone: 703.319.1925 Fax: 866.873.1277 E-mail: dgeesey@auspextech.com Web: www.auspextech.com

D

ISC

OV

ER

TH

E T

RU

E V

AL

UE

OF T

EC

HN

OL

OG

Y

OMB 2012 Milestone

2

• External Services:

– Public/external facing

servers and services

– e.g. web, email, DNS,

ISP services, etc.

– Operationally use

native IPv6

– End of FY 2012

(September 30, 2012)

11/13/12

D

ISC

OV

ER

TH

E T

RU

E V

AL

UE

OF T

EC

HN

OL

OG

Y

OMB 2014 Milestone

3

• Internal Services:

– Applications that

communicate with

public Internet servers

– Supporting enterprise

networks

– Operationally use

native IPv6

– End of FY 2014

(September 30 2014)

11/13/12

D

ISC

OV

ER

TH

E T

RU

E V

AL

UE

OF T

EC

HN

OL

OG

Y

World IPv6 Launch

• Participation

– Websites = 2,608

– Network Operators = 63

– Home Router Vendors = 4

– USG Sites = 20

• USG Domains using IPv6 = 130

– http://usgv6-deploymon.antd.nist.gov/cgi-

bin/generate-all.www

• Measurements

– ISOC:

http://www.worldipv6launch.org/measuremen

ts/

– Akamai: http://www.akamai.com/ipv6

– Google:

http://www.google.com/intl/en/ipv6/statistics/

4 11/13/12

D

ISC

OV

ER

TH

E T

RU

E V

AL

UE

OF T

EC

HN

OL

OG

Y

Major VA IPv6

Transition Drivers

5 11/13/12

Technology

Leadership

Cost Control

OMB

Directive

Veteran Service

Continuity

D

ISC

OV

ER

TH

E T

RU

E V

AL

UE

OF T

EC

HN

OL

OG

Y

Key Driver for VA –

IPv6 Only Veterans

6

WITHIN 18 MONTHS VA WILL NEED TO SERVE

IPV6 ONLY VETERANS

11/13/12

D

ISC

OV

ER

TH

E T

RU

E V

AL

UE

OF T

EC

HN

OL

OG

Y

VA Execution Timeline

7

Jun

‘11

Dec

‘11

Jun

‘12

Dec

‘12

Jun

‘13

Dec

‘13

Jun

‘14

Dec

‘14

Jun

‘15

Dec

‘15

ISP Services

DNS/DNSSEC

SMTP/Mail

Web

WAN/Backbone

Sites/LANs

Data Centers

Applications

End Devices

Mission Devices

IPv4 Decommissioning

2012

2014

2015

OM

B

Mile

sto

ne

s

VA

Mile

sto

ne

11/13/12

D

ISC

OV

ER

TH

E T

RU

E V

AL

UE

OF T

EC

HN

OL

OG

Y

VA 2015 Milestone

“By 2015, all computing, application, and network resources must turn off

IPv4 as a communication mechanism in VA unless there is a waiver from my

office or the device/service runs in an

enclave.”

8

-VA CIO IPv6 Directive

11/13/12

D

ISC

OV

ER

TH

E T

RU

E V

AL

UE

OF T

EC

HN

OL

OG

Y

VA IPv6 Progress Measure –

2012 Milestone

0 100 200 300 400 500 600

DNSSEC

DNS

SMTP

Web

Gateways

DNSSEC DNS SMTP Web Gateways

Complete 523 523 520 507 4

In Progress 2 2 5 4 0

2012 Progress Status

100%

99%

99%

99%

99%

VA HAS MET THE 2012 OMB IPV6 MILESTONE* *FOR AGENCY OPERATED DOMAINS

11/13/12 9

D

ISC

OV

ER

TH

E T

RU

E V

AL

UE

OF T

EC

HN

OL

OG

Y

Success Highlights

10

•Launched for world IPv6 day in 6/2011

•Continuous IPv6 operation since www.va.gov

•Combined IPv6 DNS upgrade with DNSSEC effort

•Reduced effort and cost savings, launched services sooner VA IPv6 DNS Services

•100% of VA operated services for 2012 support IPv6

• Implemented on VA systems: (ISP, DNS, Web, Email) 2012 Progress

•Hosted bi-annual interagency conference

•Federal IPv6 outreach Interagency

Coordination

•Developed modified address justification for ARIN

•Largest civilian agency IPv6 address block ARIN /24 Allocation

•Assembled and lead integrated program team across VA

•Established since 2006 Cross Agency Support

11/13/12

D

ISC

OV

ER

TH

E T

RU

E V

AL

UE

OF T

EC

HN

OL

OG

Y

VA IPv6 Acquisition

Support

11 11/13/12

D

ISC

OV

ER

TH

E T

RU

E V

AL

UE

OF T

EC

HN

OL

OG

Y

Other Significant IPv6

Activities in VA

12

IPv6 VPN Telework Implementation

IPv6 Cloud Pilots

VA IPv6 Profile Process

WAN IPv6 Implementation

VistA IPv6 Proof of Concept

11/13/12

D

ISC

OV

ER

TH

E T

RU

E V

AL

UE

OF T

EC

HN

OL

OG

Y

IPv6 Addressing

Experience

13

•Think in terms of IPv6 & stay standards based

•Business goals more important than how it was done before

•Insure broad participation, Consensus Rules!

•The plan will change

Lessons Learned

•Getting past IPv4 thinking

•Getting equipment to think in IPv6, not just watch it

•ARIN process changes and bureaucracy

•Business processes inhibit growth and change

•Changing exiting vendors if required

Issues Encountered

•We are now on version 4 of the plan

•Set up focused teams to address issues

•Minimum /48 major subnet

Changes Made

VA IPv6 Address Allocation 2600:8::/24

11/13/12

D

ISC

OV

ER

TH

E T

RU

E V

AL

UE

OF T

EC

HN

OL

OG

Y

Major Issues to Date

14

External Issues

Networx Carrier Services

IPv6 Spam Filtering

USGv6 Certified Products

Internal Issues

IPv4 Thinking

Silo Mentality

Internal Organizational Processes

Ordering Enterprise Circuits as Dual-stack

Change Management and New Products

11/13/12

D

ISC

OV

ER

TH

E T

RU

E V

AL

UE

OF T

EC

HN

OL

OG

Y

Questions

Dale Geesey

Chief Operating Officer

Auspex Technologies, LLC

Phone: 703.319.1925

Fax: 866.873.1277

E-Mail: geesey@auspextech.com

Web: www.auspextech.com

(IPv6 Enabled)

11/13/12 15