2012.12.11 presentation i_pv6_fedict

© Fedict 2012. All rights reserved

Fedict and IPv6BELTUG – Grimbergen – 11/dec/12

© Fedict 2012. All rights reserved | p. 2

About Fedict

Source: http://fedict.newlink.be/uploaded_files/pic_08v2.jpg


Fedict

Federal Public Service ICT e-gov building blocks, expertise center

Hosts several (but not all) federal services Belgium.be Federal Authentication Service (FAS) Federal Service Bus (FSB)

FedMAN High-speed, secure network between FPS Developed by Belnet


Getting there

Source: http://commons.wikimedia.org/wiki/File:Street_Sign_with_ideas.jpg


Regulations

Digital Agenda for Europe

Decision Council of Ministers (June 22, 2012) Implementation of IPv6 within 2 years Focus on G2C / G2B services

Official note to federal administrations Published in “Staatsblad” (October 26, 2012) Each FPS, ... should appoint an IPv6 lead Each FPS, … is responsible for their own IPv6 roll-out


The approach

People Create awareness Human communication

Product and services Ask all our suppliers if their products support IPv6 ... … and if not: when will this be implemented ? Gradually replace IPv4-only products and services

Patience Report (and sometimes fix) issues


People

Source: http://commons.wikimedia.org/wiki/File:Docteurs-SorbonneUniversit%C3%A9s-15.jpg


Creating awareness

2nd round of Belnet workshops (federal) network engineers End of January 2013 Theory + practice

IPv6 newsletter ICT managers and FedMAN contacts Regions / Communities / CBSS

Workgroup FPS Economy, Fedict, FCCU, ...


Products and services

Source: http://www.greenwavereality.com/solutions/led-lighting/


The big picture

Network

Security andavailability

Platforms

ApplicationsExternalServices


FedMAN and IPv6 connectivity

FedMAN Operated by Belnet IPv6-ready since end 2009

/48 for each FedMAN customer IPv6 traffic on explicit request (test or production) In use: Fedict, SPF Int.Affairs, Court of Audit, FCCU Soon: SPF Economy


Example IPv6 clause public tenders

IPv6 must be available immediately Products and services

IPv6 must be on par with IPv4 Performance Functionality Availability Security Support


Questionnaire

Sent to suppliers Products and services

Are your products / services IPv6 ready ? Today ? Upgrade required ? When ?

If not, provide a plan towards IPv6

Some surprises Positive and negative


Patience

Source: http://commons.wikimedia.org/wiki/File:Bios_robotlab_writing_robot.jpg


Currently testing

Golden rule: do not touch production IPv4 Just add “something” in front of IPv4 infrastructure New environment: consider Dual Stack

Reverse proxy Easy for HTTP

NAT64


Pay attention to ...

Tablets and smartphones DHCPv6 support ?

Firewalls / load balancers IPv6 support in hardware (performance) ?

Peering disputes If any, your ISP may block some IPv6 traffic

External services E-payment, anti-spam, webstats, … ?


If you want an IPv6-only data center

Databases Connectors / clusters may not be certified in IPv6

Management tools Monitoring / TAPs Storage / backup systems

Cloud offerings Do they support IPv6 ?


Questions ?

Source:http://commons.wikimedia.org/wiki/File:20_questions_1954.JPG

2012.12.11 presentation i_pv6_fedict

Documents