中華電信研究所解讀課件

中華電信研究所解讀中華電信研究所解讀ContentsIPv6通訊協(xié)定簡介WorldwideTestbed--6BoneIPv6推廣現(xiàn)況國外IPv6發(fā)展現(xiàn)況我國IPv6發(fā)展及建置經(jīng)驗總結ContentsIPv6通訊協(xié)定簡介IPv6通訊協(xié)定簡介IPv6通訊協(xié)定簡介IntroductionDrivingmotivation:Limitationimposedbythe32-bitaddressinIPv4NAT(NetworkAccessTranslator)isashort-termsolutionbutnotthebestToprovideaplatformfornewInternetFunctionalityImprovementratherthanderivativeofIPv4AddressingCapacity,RoutingCapacity,SupportforQoS,Auto-configuration,Securityinter-operabilityandsoonRelatedIETFworkingGroupsIPng(ipngwg)workinggroupunderInternetAreaIPngTransition(ngtrans)workinggroupunderOperationsandManagementAreaIntroductionDrivingmotivationIPv6vs.IPv4PacketDataUnitminimum20octetsmaximum65535octetsIPv4PDUFixed40octetsmaximum65535octetsIPv6PDU0ormoreIPv4HeaderDataFieldTransport-levelPDUIPv6HeaderExtensionHeaderExtensionHeaderIPv6vs.IPv4PacketDataUnitDestinationAddressSourceAddressVerIHLServiceTypeIdentificationFlagsOffsetTTLProtocolHeaderChecksumSourceAddressDestinationAddressOptions+PaddingTotalLengthVerFlowLabelPayloadLengthNextHeaderHopLimitTrafficClassIPv4vs.IPv6HeaderIPv4PacketHeaderIPv6PacketHeader32bitsDestinationAddressSourceAddrIPv6ExtensionHeaders(1/2)Hop-by-hopoptionsheaderRoutingheaderFragmentheaderAuthenticationheaderEncapsulatingsecuritypayloadheaderDestinationoptionsheaderIPv6PDUgeneralformTransport-levelPDUIPv6HeaderExtensionHeaderExtensionHeader40octets0ormoreIPv6ExtensionHeaders(1/2)HoIPv6ExtensionHeaders(2/2)IPv6specificationrecommendedorder:IPv6headerHop-by-hopoptionsheaderDestinationoptionsheaderRoutingheaderFragmentheaderAuthenticationheaderEncapsulationsecuritypayloadheaderDestinationoptionsheaderIPv6packetwithallextensionheadersOctets:40VariableVariableVariableVariableVariableVariable820(optionalvariablepart)=NextheaderfieldIPv6headerHop-by-hopoptionsheaderRoutingheaderFragmentheaderAuthenticationheaderEncapsecuritypayloadheaderTCPheaderApplicationdataDestinationoptionsheaderIPv6ExtensionHeaders(2/2)IPPacketFormatofIPv6vs.IPv4HeadersizebecomesfixedOptionfieldsarereplacedbyextensionheaders

hop-by-hop,routingheader,fragmentheader,authenticationheader,encapsulatingsecuritypayload,destinationoptionsheaderDecreasednumberoffield,increasedtotalsizeSixfieldsaresuppressedIPheaderlength,typeofservice,identification,flags,fragmentoffset,headerchecksumThreefieldsarerenamedTotallength:payloadlengthProtocoltype:nextheaderTimetolive:hoplimitTwofieldsareaddedtrafficclass,flowlabel

PacketFormatofIPv6vs.IPv4AddressingFeaturesAddressCapacity32-bitaddress128-bitaddressGivebrand-newstartforaddressaggregation(CIDR,ClasslessInter-DomainRouting)AddressingCapabilityUnicast,AnycastandMulticastAnycastaddressMoreefficientrouting(intermediatenodes)Moreefficientaccesstomirroredservers(destinationnodes)SingleinterfacewithmultipleaddresssupportrenumberinginanondisruptivemannerAddressingFeaturesAddressCapRoutingCapabilitySizeofpacketheaderisfixedRevisedoptionmechanismMostbypassedbyroutersHintinheader(Routingoption)Thenumberoffieldsinpacketheaderisreduced12fixed+options8fixedSuppressed:headerlength,typeofservice,identification,flag,fragmentoffset,headerchecksumModified:length,protocoltype,timetoliveAdded:priority,flowlabelPacketfragmentationisnotallowedbyroutersPathMTU(Max.TransferUnits)discoveryprotocolAtleast1280octetsRoutingCapabilitySizeofpackMoreFlexibleforQoSMechanismNew“Flow”conceptDefinedbysourceaddress+flowlabelRoutingonlyonflowDA,priority,hop-by-hop,routingoptionmustbethesameonagivenflowWhenusedwithRSVPDA+SA(+DP+SP)SA+flowlabelSolvelayerviolationwithroutersStillworkwithencryptionCanbeusedwithotherReservationProceduresDefineQoSofaflowinhop-by-hopoptionsMoreFlexibleforQoSMechanisOtherImprovementsMoreflexibleAutoconfigurationStatelessautoconfiguration(New)Statefulautoconfiguration(V6versionofDHCP,DynamicHostConfigurationProtocol)ImprovedSupportforSecurity,MobilityandARP,etc.Provideinter-operabilitymoreefficientprocessOtherImprovementsMoreflexiblTransitionMechanism(1/2)SimpleInternetTransition(SIT)Dual-stackstrategiesIPv6-over-IPv4TunnelingImportantfeaturesIncrementalupgradeanddeploymentMinimalupgradedependenciesEasyAddressingLowstart-upcostsTunnelingtechniquesConfiguredTunnelingTunnelendpointaddressshouldbedeterminedfromconfigurationinformationontunnelstartingpointForHost-to-RouterandRouter-to-RoutertunnelTransitionMechanism(1/2)SimpTransitionMechanism(2/2)AutomaticTunnelingIPv4-compatibleIPv6addressisusedasIPv6destinationaddressForHost-to-HostandRouter-to-HosttunnelIPv4TunnelDual-stacknodeDual-stacknodeDual-stacknodeIPv4HIPv6HPayloadIPv6HPayloadIPv6HPayload0:0:0:0:0:0IPv4AddressTransitionMechanism(2/2)AutoWorldwideTestbed-6BoneWorldwideTestbed-6Bone6Bone(1/2)Aworldwidetestbed:/Virtualnetwork

LayeredonIPv4-basedInternettosupportroutingofIPv6packets ToprovidetheearlypoliciesandproceduresforIPv6transportOperationalfromJune/Julyon1996Willbereplacedinatransparentwayby

ProductionISPUsernetworkIPv6Internet-widetransportAddressingArchitectureglobalaggregatableunicastaddressTLA0x1FFEisassignedto6BonebyIANAfortesting6Bone(1/2)Aworldwidetestbed6Bone(2/2)ThreetypesofsitesBackboneSite(pTLAsites)WithitsownpTLAassignmentsToaggregateroutingforothertransitsitesorleafsitesWithBGP4+peeringwithacoupleofbackbonesitesTransitSiteToaggregateroutingforleafsiteswithatleastoneBGP4+peeringwithitsbackbonesiteLeafSiteWithstaticroutepeering6Bone(2/2)Threetypesofsite6BoneArchitectureIPv6islandTunnel(BGP4+)IPv4networkBackboneSiteTransitSiteLeafSiteTunnel(BGP4+)Tunnel(Static)IPv6islandIPv6islandIPv6islandIPv6islandBackboneSiteBackboneSite6BoneArchitectureIPv6islandTLogicalStructureofthe6BoneNetworkLogicalStructureofthe6BoneGrowthofthe6BoneSitesGrowthofthe6BoneSites6BoneTestAddress1381664243FFE:3600::/24CHT-TL128001TLARESNLASLA InterfaceID0010x1ffeNLA1NLA2SLA InterfaceID6BoneTestAddress1381664243FHowtojointhe6boneEQUIPMENTNEEDSROUTERSWORKSTATIONSFINDINGAPOINTONTHE6BONETOATTACHTOMAKING6BONEREGISTRYENTRIESFORYOURSITECONFIGURINGYOURIPv6ROUTERANDWORKSTATIONGETTINGIPv6ADDRESSESANDBUILDINGYOURTUNNELTOTHE6BONEDNSSUPPORTHowtojointhe6boneEQUIPMENTIPv6推廣現(xiàn)況IPv6推廣現(xiàn)況IPv6相關組織(1/2)OrganizationsaresetuptopromotethedeploymentofIPv6network6RENCAIRN,CANARIE,CERNET,CHT,DANTE,ESnet,FREEnet,Internet2,NTT,Sprint,vBNS,WIDE,...IPv6Forum(Fundingmembers:51,Generalmembers:28)IANAbeginstodelegatetheIPv6addressspacetotheARIN、RIPENCCandAPNICRIRs(regionalInternetregistries)sinceJuly1999

APNICCONNECT-AU、WIDE-JP、NUS-SG、KIX-KR、JENS-JP、NTT-JP、HINET-TW、...ARINESNET-V6、ARIN、VBNS、CANET3IPv6相關組織(1/2)OrganizationsarIPv6相關組織(2/2)RIPEDE-SPACE、EU-UUNET、UK-BT、CH-SWITCH、AT-ACONET、UK-JANET、DE-DFN、NL-SURFNET、RU-FREENET、...EmergingProductsandEquipmentRouterTelebit、Bay、Cisco(Beta)、Hitachi(NR60)….HostWindowNT、Linux、SunSolaris、HP…..IPv6相關組織(2/2)RIPE6REN(1/2)6REN(IPv6Research&EducationNetwork)isestablishedinOctoberof1998PrimaryGoalsToprovideproductionqualityIPv6packetdeliveryservicesTodevelopoperationalproceduresforIPv6networksTopromotethedeploymentofIPv6networksToenableearlyIPv6-readyapplicationtestinganddeploymentAvoluntarycoordinationwithoutfeeParticipatesmustuseproductionIPv6addressesandprovideproductionqualityIPv6service.The“6Tap”projectsponsoredbyCanarieandESnetTofacilitatetheeasyinterconnectionof6RENparticipantsOverATMinterconnections6REN(1/2)6REN(IPv6Research6REN(2/2)WideareaATMlinksfromStarTAPparticipantsworldwideNativeIPv6peersNativeIPv6peer6TAProuternativeIPv6BGPpeeringsessionsATMPVCspre-configuredLocalOC3linkATMswitchforIPv6@startap6REN(2/2)WideareaATMlinksIPv6ForumEstablishedinApril1999byInternetvendorsandresearchandeducationnetworksIBM,Cisco,Compaq,HP,Sun,MCIWorldcom,Microsoft,UUNET,TelebitCommunications,ThomsonCSF,Case,Acer,NTT,Hitachi,FrenchG6,6REN,WIDEofJapan,...TodramaticallyimprovethemarketanduserawarenessofIPv6byprovidingworld-wide,equitableaccesstoknowledgeandtechnologytoworkcloselywiththeInternetEngineeringTaskForce(IETF)ThemembershipfeeperorganizationisUS$2500,perannum.IPv6ForumEstablishedinAprilProductionIPv6Address(1/2)Assignsub-TLAtoapplicantsSlowStartMechanismareusedToissuesmalladdressblocksuntiltheprovidercanshowanimmediaterequirementforlargerblocks.ThefirstallocationtoaTLAregistrywillbea2001::/35blockRightnow,inBootstrapPhas0001sub-TLAResNLASLA InterfaceID1316136482416FPTLAResNLASLA InterfaceIDProductionIPv6Address(1/2)AProductionIPv6Address(2/2)Examplesofassignedsub-TLAsAPNICETRI-KRNIC-KR-199911242001:230::/35NTT-JP-199909222001:218::/35HINET-TW-200002082001:238::/35

CONNECT-CC-AU2001:0210::/35

ARINESNET-V62001:0400::/35ARIN-0012001:0400::/23VBNS-IPV62001:0408::/35CANET3-IPV62001:0410::/35RIPE-NCCDE-SPACE-199908122001:0608::/35UK-BT-199909032001:0618::/35CH-SWITCH-199909032001:0620::/35AT-ACONET-199909202001:0628::/35ProductionIPv6Address(2/2)E國外IPv6發(fā)展現(xiàn)況國外IPv6發(fā)展現(xiàn)況WIDEv6WorkingGroupWIDE-sTLAinternalstructure<2><---0----0----1><-0----2----0--><-RES-><---------------><2><---0----0----1><-0----2----0---0---0-><-----WIDE------>0010|0000|0000|0001|0000|0010|0000|0000|0000|0000|0000|0000|<-APNIC><NLA1><--NLA2--->/16/24/32/35/40/48BackBoneInfrastructure2001:200:0:XX::/48AllWIDEPOPsareallocatedthisaddressw/XX(POP#)forWIDEBoneBoneInfrastructure.NLA1(NextLevelAggregator1)2001:200:[0-1]x00::/40x=1->f(0isreservationforWIDEBackBone)WIDE-NLA12001:200:0100::/40allocateWIDE-NLA2(/48)forotherorganizations.POP(PointOfPresence)5bitboundary2001:200:01yy::/45yy=0->fNLA22001:200:01yz::/48y:POPnumberz:OrgnizatrionID[0-8](identifyinonePOP)WIDEv6WorkingGroupWIDE-sTLAWIDEv6WorkingGroup[WIDEINTERNAL]WIDE-CAMP2001:0200:0000:ff00::/562000/06/26NSPIXP62001:0200:0000:1800::/641999/10/SFC-U-TOKYO-VLAN2001:0200:0000:1c04::/642000/06/12[NLA2]orgnameipv6addressconnect-poplinkissuedate==============================================================nui-org-net2001:0200:0140::/48komatsutunnel2000/01/14SonyCSL-NET2001:0200:0120::/48otemachiATM2000/01/14EhimeUniv.2001:0200:0150::/48hiroshimatunnel2000/02/02TokyoUniv.2001:0200:0180::/48nezutunnel2000/02/02UwajimaInternetCommunity2001:0200:0121::/48otemachitunnel2000/02/03UwajimaMunicipalHospital2001:0200:0122::/48otemachitunnel2000/02/03N+IShownet2001:0200:0123::/48otemachiether2000/02/08JSAT-NET2001:0200:0124::/48otemachiATM2000/03/30WASEDA-NET2001:0200:0125::/48otemachitunnel2000/04/09TokyoUniversityofTechnology2001:0200:01a8::/48hachiojitunnel2000/04/19TNT-WIDE2001:0200:0148::/48kyotoether2000/06/09YDC-WIDE-IPV6-012001:0200:0100::/48TokyoSerial2000/07/24NABECHAN.ORG2001:0200:0126::/48otemachitunnel2000/07/24RESEARCHLAB-NET2001:0200:0127::/48otemachitunnel2000/07/26[NLA1]orgnameipv6addressconnect-poplinkissuedatedb================================================================WIDE-NLA12001:0200:0100::/40otemachi2001/01/14yesITJIT-NET2001:0200:0200::/40otemachitunnel2000/01/14yesIMASY2001:0200:0300::/40otemachitunnel2000/01/20yesNTTv6Net2001:0200:0400::/40tokyoT12000/01/25noINTEC2001:0200:0500::/40otemachiether2000/02/09noKDD-Labs2001:0200:0600::/40otemachitunnel2000/02/09yesNTT-MY2001:0200:0700::/40otemachiATM2000/02/21yesAIII2001:0200:0800::/40NaraEther2000/04/18yesAPAN2001:0200:0900::/40otemachiATM2000/05/11yesWIDEv6WorkingGroup[WIDEINTETRIAdvanceStandardsResearchTeam

Head:Kim,Yong-JinReserchIssuesIPv4/IPv6NextGenerationInternetAddressTranslatorStandardizationplanningofNextGenerationMobileCommunicationsStandardizationofNextGenerationInternetProtocolsRelatedInformationResearchResultsIPv6ForumKoreaITU-TSG13/Q.20SimulationStudyGroupOSIATG-Deploymenthttp://pec.etri.re.kr/index2.htmETRIAdvanceStandardsResearcNTT-JPNTT-JPNTT-JPNTT-JPIIJ–IPv6TrialServiceIIJ–IPv6TrialServiceIIJ–IPv6TrialServiceIIJ–IPv6TrialServiceCERNETIPv6Testbed預計2000年底將實現(xiàn)的結構CERNETIPv6Testbed預計2000年底將實現(xiàn)CERNETIPv6Testbed試驗床的內部實現(xiàn)拓樸（1）CERNETIPv6Testbed試驗床的內部實現(xiàn)拓樸（CERNETIPv6Testbed試驗床的內部實現(xiàn)拓樸（2）CERNETIPv6Testbed試驗床的內部實現(xiàn)拓樸（ESNET-V6ESnetisworkingtomakethistransitionfromIPv4toIPv6asseemlessaspossibleforourcustomers.WeareoneofthefewInternetServiceProviderstobeaparticipateinthe6Bonebackbone.OurengineeringstaffisalsotestingmanyofthenetworkservicesweareallfamiliarinanIPv6environment.6Bone6Tap6renWhoisServerTunnelRegistrationAddressDelegation/hypertext/welcome/pr/ipv6.htmlESNET-V6ESnetisworkingtomaVBNS-IPV6VBNS-IPV6CA*net3IPv6CA*net3IPv6UK-BTNAT-PTProjectBTLabshavedevelopedanimplementationofNAT-PTdesignedtorunonarouterrunningtheFreeBSDoperatingsystemandusingtheKAMEIPv6stack.WearemakingthisimplementationavailablefordownloadtopromoteitsuseasanIPv4/IPv6interoperabilitymechanism./projects/nat_pt/index.htmUK-BTNAT-PTProjectBTLabshaSWITCHIPv6PilotSWITCHhasbeenassignedanexperimentalpseudo-TLA(pTLA)foruseonthe6bone.TheprefixofthispTLAis3ffe:2000::/24.ThefollowingprefixesunderthepTLAhavebeenassignedtositesthatareconnectedtothe6boneviaSWITCH:3ffe:2000:0000::/48 SWITCH3ffe:2000:0400::/48 ETHZ3ffe:2010:0000::/48 EPFL3ffe:2000:0c00::/48 UniBE3ffe:2022:0001::/48 ISBE3ffe:2000:1000::/48 TLAB-CHUR3ffe:2022:0003::/48 FH-Aargau3ffe:2022:f000::/48 TELEPORT3ffe:2024:0001::/48 TK-LINZ3ffe:2028:0001::/48 SIMMCOMM3ffe:2028:1000::/36 SOLNET3ffe:202a:0001::/48 SIMULTAN3ffe:202a:0002::/48 TILINKSWITCHIPv6PilotSWITCHhasbeUK-JANETTheJANETManagedBandwidthService,initialtrialsarenowtakingplaceintheUK.Southamptonhasa512KbitMBSlinktotheEuropeanTF-TANTnetwork.Southampton,UCLandLancasterareembarkingonatriangularIPv6networkoverJANET,aprojectwhichshouldleadtoIPv6connectivitytoInternet2.Numerousrouterandworkstation/OSvendorsalreadysupportIPv6;thesetrialswillreportoninteroperabilityissuesandapplicationdevelopments./conferences/networkshop/abstracts/ipv6.htmlUK-JANETTheJANETManagedBandDE-DFNJOINProjectDE-DFNJOINProjectEuronet*InternetIPv6ExperimentalHTTP-ServerEuronet*InternetIPv6ExperimeCanarie-TheQuakegameonIPv6TypicalarchitecturestoplayQuakeoverIPv6Canarie-TheQuakegameonIPv6Canarie-TheQuakegameonIPv6

Canarie-TheQuakegameonIPv6我國IPv6發(fā)展及建置經(jīng)驗我國IPv6發(fā)展及建置經(jīng)驗IPv6inCHT-TLAsaleafsitesince1997/12Asatransitsitsince1998/11Asabackbonesitesince1999/02RelatedworksGet3FFE:3600::/24addressspaceanddelegatesub-spacetoothersSetupIPv6testbedandprovidetransitserviceSetuptheDNSserversupportingAAAArecordsSetupaWWWserversupportingIPv4/IPv6simultaneouslymonitorthetransittrafficIPv6addressfromAPNIC(2000/02)inet6num:2001:238::/35netname:HINET-TW-20000208IPv6inCHT-TLAsaleafsitesCHTTL-TWin6BoneBecomebackbonesitein1999FebruaryRegisterasCHTTL-TWGet3FFE:3600::/24addressprefixHasbuiltBGP4+tunnelwithsomeotherbackbonesitessuchasSprint,Viagenie,Cisco,Digital-CAandTelebit,etc.Providestabletransitservicetoothersites3ffe:3600:1::/48forNDHU3ffe:3600:2::/48forCCITT3ffe:3600:3::/48forNCKU…etc.SetupIPv6TestBedAutoconfigurationDNSserversupportingAAAArecordsIPv6Webserverat.twCHTTL-TWin6BoneBecomebackbo中華電信6Bone註冊http://www.cs-ipv6.lancs.ac.uk/ipv6/6Bone/Whois/CHTTL-TW.html中華電信6Bone註冊http://www.cs-ipv6中華電信6Bone位址分配圖(1/3)138166424

3FFE:3600::/24CHT-TL128001TLARESNLASLA InterfaceID0010x1ffeNLA1NLA2SLA InterfaceID3FFE:3600:0000::/32fortunnelinganduniversities3FFE:3600:0100::/32forCHTbusinessgroupsandsubordinates中華電信6Bone位址分配圖(1/3)13816642中華電信6Bone位址分配圖(2/3)3FFE:3600:0000::/48reserved3FFE:3600:0001::/48forNDHU東華大學3FFE:3600:0002::/48forCCIT中正理工學院3FFE:3600:0003::/48forNCKU成功大學3FFE:3600:0004::/48forNCU-CSIE中央大學3FFE:3600:0005::/48forNCU-CC中央大學3FFE:3600:0006::/48forNTU臺灣大學3FFE:3600:0007::/48for中正大學138166424

3FFE:3600::/24CHT-TL128001TLARESNLASLA InterfaceID0010x1ffeNLA1NLA2SLA InterfaceID中華電信6Bone位址分配圖(2/3)3FFE:360中華電信6Bone位址分配圖(3/3)138166424

3FFE:3600::/24CHT-TL128001TLARESNLASLA InterfaceID0010x1ffe