Title: IPv6:
1 IPv6 Making The Dream Real Jawad
KhakiVice-President Windows Networking
CommunicationsMicrosoft Corporation
2Agenda
- Trends
- The Opportunity
- Key Problems
- The Promise of IPv6
- What is Microsoft doing
- Call to Action
3Evolution Of The Web
Transactions
Business
Presence
Publish Info
Process Transactions
Digital Economy
4TrendsPublic Network
- Data traffic exceeds Voice traffic
- Carriers shifting to network designs that favor
packets - High broadband adoption in geographies where
available - Carriers responding to demand
- Wireless deployments everywhere
- Rush to serve data over Cellular networks 2.5-3G
- WiFi usage growing rapidly
5TrendsComputing
- Moores Law still going strong
- Smaller, more computing devices every 18 months
- Miniaturization continues
- 100Gb per square inch hard disk density
- 128MB memory on a single chip
- Dramatic innovation towards longer battery time
- Low power CPUs from Intel, Transmeta, AMD
- Fuel Cell battery (1 month cell phone usage) in
the horizon - Smaller, lighter PC, PDA, phone designs enabling
new networking scenarios - TVs on Cell phones, Wearable computers, digital
cash, eBooks
6TrendsApplications
- XML revolution leading to web services
- Peer-to-Peer enables compelling scenarios
- Presence a paradigm shift in Real Time
Communications and Collaboration - Net attached Consumer Electronics and Gaming
appliances emerging - Applications assuming always on connectivity,
anywhere
7The Opportunity
8Key Problems
- Address Shortage
- Not enough IPv4 addresses available
- Disproportionate allocation
- Increasing number of devices and Always On
experience exacerbate the problem - Lack of Mobility
- Applications and network protocols break in
mobile scenarios - Network Security
- Always On Always attacked!
9Key ProblemsAddress Shortage
Extrapolating the number of DNS registered
addresses shows total exhaustion in 2009. But the
practical maximum is about 200 M addresses, in
2002-2003.
10Key ProblemsAddress Shortage
- Peer to Peer applications require
- Addressability of each end point
- Unconstrained inbound and outbound traffic
- Direct communication between end points using
multiple concurrent protocols - NATs are a band-aid to address shortage
- Block inbound traffic on listening ports
- Constrain traffic to understood protocols
- Create huge barrier to deployment of P2P
applications
11Key ProblemsLack of Mobility
- Existing applications and networking protocols do
not work with changing IP addresses - Applications do not reconnect when a new IP
address appears - TCP drops session when IP address changes
- IPSEC hashes across IP addresses, changing
address breaks the Security Association - Mobile IPv4 solution is not deployable
- Foreign agent reliance not realistic
- NATs and Mobile IPv4? Just say NO
12Key ProblemsNetwork Security
- Always On Always attacked!
- Consumers deploying NATs and Personal Firewalls
- Enterprises deploying Network Firewalls
- NATs and Network Firewalls break end-to-end
semantics - Barrier to deploying Peer to Peer applications
- Barrier to deploying new protocols
- Block end-to-end, authorized, tamper-proof,
private communication - No mechanisms for privacy at the network layer
- IP addresses expose information about the user
- No transparent way to restrict communication
within network boundaries
13The Promise of IPv6
- Enough addresses
- 6464 format 1.8E19 networks, units
- assuming IPv4 efficiency 1E16 networks, 1
million networks per human - 20 networks per m2 of Earth (2 per sqft )
- Removes need to stretch addresses with NATs
- True mobility
- No reliance on Foreign Agents
- Better network layer security
- IPSec delivers end-to-end security
- Link/Site Local addresses allow partitioning
- Anonymous addresses provide privacy
14The Promise of IPv6Example Multiparty
Conference, using IPv6
P1
P2
Home LAN
Home LAN
Internet
Home Gateway
Home Gateway
P3
- With a NAT
- Brittle workaround.
- With IPv6
- Just use IPv6 addresses
15The Promise of IPv6If IPv6 is so great, how come
it is not there yet?
- Applications
- Need upfront investment, stacks, etc.
- Similar to Y2K, 32 bit vs. clean address type
- Network
- Need to ramp-up investment
- No push-button transition
networks
?
applications
16What is Microsoft doing
- Building a complete IPv6 stack in Windows
- Technology Preview stack in Win2000
- Developer stack in Windows XP
- Deployable stack in .NET Server update for
Windows XP - Windows CE planned
- Supporting IPv6 with key applications protocols
- File sharing, Web (IIS, IE), Games (DPlay), Peer
to Peer platform, UPnP - Building v4-gtv6 transition strategies
- Scenario focused tool-box
17What is Microsoft doingIPv6 deployment tool-box
- IPv6 stateless address auto-configuration
- Router announces a prefix, client configures an
address - 6to4 Automatic tunneling of IPv6 over IPv4
- Derives IPv6 /48 network prefix from IPv4 global
address - Automatic tunneling of IPv6 over UDP/IPv4
- Works through NAT, may be blocked by firewalls
- ISATAP Automatic tunneling of IPv6 over IPv4
- For use behind a firewall.
18What is Microsoft doingRecommended Strategies
- In the home
- Use IPv6 if available,
- Or use 6to4 if global IPv4 address,
- Or use IPv6 over UDP
- In the enterprise
- Use IPv6 ISP or 6to4 for external access,
- Use ISATAP while upgrading the network
19What is Microsoft doingAddressing hard problems
- Domain Names and IPv6 have issues
- Peer to Peer applications require dynamic
registration of IPv6 address - DDNS is hard to deploy securely on the internet
- Workarounds require building alternate namespaces
or avoiding names altogether - Ease of use is a must
- Need an easy way to get Mobile IPv6 addresses
- Need an easy way to resolve names in a IPv6
Ad-hoc network (DNS Server not reachable)
20In Summary We Build Together
- Microsoft is moving quickly to enable Windows
platforms for IPv6 - Up to date information on
- http//www.microsoft.com/ipv6/
- Send us feedback and requirements
- mailtoipv6-fb_at_microsoft.com
- We need your help to move the world to a simple
ubiquitous network based on IPv6
21Call to Action
- Network Providers Build it and they will come
- Do not settle for NATs for new designs
- Demand IPv6 support on all equipment
- Offer native IPv6 services
- Device Vendors Design for the simpler,
ubiquitous IPv6 internet - Application Writers Dont wait on the above
- Use Windows XP and Windows .NET Server NOW!
22Microsoft Vision
Empower peoplethrough great software anytime,
anyplace,and on any device
23(No Transcript)
24Background Material
256to4 tunnel IPv6 over IPv4
1.2.3.4
192.88.99.1
2002102304b
3001234c
6to4-A
Relay
C
Native IPv6
A
IPv4 Internet
2002506708b
B
Relay
6to4-B
5.6.7.8
192.88.99.1
- 6to4 router derive IPv6 prefix from IPv4 address,
- 6to4 relays advertise reachability of prefix
2002/16 - Automatic tunneling from 6to4 routers or relays
- Single address (192.88.99.1) for all relays
26ISATAP IPv6 behind firewall
- ISATAP router provides IPv6 prefix
- Host complements prefix with IPv4 address
- Direct tunneling between ISATAP hosts
- Relay through ISATAP router to IPv6 local or
global
D
IPv6 Internet
IPv4 Internet
IPv4 FW
IPv6 FW
ISATAP
Firewalled IPv4 network
Local native IPv6 network
B
C
A
27IPv6 over UDP through NAT
C
- IPv6 / UDP
- IPv6 prefix IP address UDP port
- Servers
- Address discovery
- Default route
- Enable shortcut (A-B)
- Relays
- Send IPv6 packets directly to nodes
- Works for all NAT
IPv6 Internet
Relay
IPv4 Internet
Server
NAT
NAT
B
A