IPv6 and Linux

1
IPv6 and Linux

• Kalyan Varma
• Security Czar, Yahoo!

2
Linux and IPv6

• Support Included from Kernel 2.1.x
• Glibc 2.1 (including header files)
• All major applications IPv6 ready.
• IPv6 tools
• Distros supporting IPv6

3
USAGI Project
(UniverSAl playGround for Ipv6)

• IPv6 stack in the Linux Kernel,
• IPv6 APIs in the glibc library and
• IPv6 capable applications.

4
Current Work

• Catching up RFC2292, RFC2292bis APIs,
• Implementing general tunnel device,
• Implement extension header functions,
• Implement IPv6 multicast routing,
• Improving SNMP statistics,
• IPv6 capable ATM driver and tools,
• IPsec for IPv6, and
• Mobile IPv6.

5
Coming soon on Linux

• IPv6,4 over IPv6,4 tunneling device (GIT)
• IPsec ( Tunnel mode, IKE deamon )
• IPv6 over ATM
• Anycast
• Neighbour Discover protocol ( very buggy )

6
Setting up IPv6 Client

• Kernel with IPv6 support
• Modprove ipv6 ( newer versions)
• Ping6 1
• Ifconfig eth0 add c0061
• /etc/sysconfig/network NETWORKING_IPV6"yes"

7
Setting up IPv6 Server

• Install radvd
• sysctl -w net.ipv6.conf.all.forwarding 1

interface eth0                AdvSendAdvert on
              prefix 3ffede9b801/64          
                        AdvOnLink on         
          AdvAutonomous on                   
   
8
Connection to the net

• Enable GRE Tunneling in the kernel
• Register at freenet.net or 6bone.net and execute
  the script.
• Add the 48bit prefix in the radvd.conf file.
• DNS entry
• razor IN A 128.173.88.82
• razor IN AAAA 5F05
  080020231D71

9
Connecting to the net (contd)

• Enable IPv6 on one of the host
• Global IP ( 48 bit v6 prefix from radvd 48
  bit MAC address )
• Ping the Ipv6 address of the host from the net.
• Look ma, I am on IPv6 network

10
Programming IPv6

• Use getaddrinfo() for all your name lookups
• Returns address family and an address structure
• Pass the returned address family straight to
  socket().
• AAAA - AF_INET6 and a struct sockaddr_in6
• A - AF_INET and a struct sockaddr

11
Links

• http//ipv6.linux-bangalore.org 
•  http//www.bieringer.de/linux/IPv6/
•  http//hs247.com
• http//www.linux-ipv6.org
• http//www.ipv6.org
• http//www.freenet6.net