microsoft it: journey to ipv6...rfc 7269 dual-stack wireless guest globally “scream tests” of...
TRANSCRIPT
![Page 1: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/1.jpg)
Veronika McKillopNetwork ArchitectMicrosoft CSE&O
Microsoft IT: Journey to IPv6
![Page 2: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/2.jpg)
• Network Overview
• Dual-Stack Status
• Moving to IPv6-Only
Agenda
![Page 3: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/3.jpg)
![Page 4: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/4.jpg)
![Page 5: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/5.jpg)
![Page 6: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/6.jpg)
![Page 9: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/9.jpg)
![Page 10: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/10.jpg)
![Page 11: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/11.jpg)
This WAS the plan…
![Page 12: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/12.jpg)
RFC 7269
Dual-stack Wireless Guest globally
“Scream tests” of IPv6-Only
![Page 13: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/13.jpg)
![Page 14: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/14.jpg)
![Page 15: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/15.jpg)
Guest network
Everything needs IPv6, not everything will be IPv6-Only
Internet-First
![Page 16: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/16.jpg)
![Page 17: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/17.jpg)
![Page 18: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/18.jpg)
LB IPv4-Only DNS
Corporate Network
SP Agg SP Core
IPv6-Only/dual-stack
NAT44 & 46
translation/encapsulation
3. & 4.
1.
2.
MAP-BR
64 translation/decapsulation
5.
IPv4 VPN Headend
v4
v6
Local P&T
Aggregation /
Backbone P&T
IPv6 Internet
IPv4 Internet
SP Regional Agg
Regional networks
1. VPN client does VPN concentrator address resolution
2. Load-Balancer provides DNS A record
3. VPN session establishment over IPv4 is NAT44 translated on the home CPE
4. Then 4->6 header translation/encapsulation is performed on the home CPE
5. This traffic is forwarded over IPv6-Only/Dual-stack network to MAP Border Relay
![Page 19: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/19.jpg)
LB IPv4-Only DNS
Corporate Network
SP Agg SP Core
IPv6-Only/dual-stack
NAT44 & 46
translation/encapsulation
3. & 4.
1.
2.
MAP-BR
64 translation/decapsulation
5.
IPv4 VPN Headend
v4
v6
Local P&T
Aggregation /
Backbone P&T
IPv6 Internet
IPv4 Internet
8. ??
SP Regional Agg
Regional networks
7.
6. At MAP-BR the traffic is IPv6 traffic has header replaced with IPv4/decapsulated
7. The traffic is forwarded over IPv4 to the VPN headend
8. Will the VPN Headend accept this traffic?
• The header has been tampered with (MAP-T)
• What about Jumbo frames (in MAP-E), fragmentation (it is SW processed on the MAP-BR)??
6.
The Future is NOW Free (France), Charter Communications, Comcast (tests), your any given mobile ISP (BT/EE, T-Mobile US, Reliance JIO)…
![Page 20: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/20.jpg)
LB DS DNS
Corporate Network
SP Agg SP Core
IPv6-Only/dual-stack
NAT44 & 46
translation/encapsulation
MAP-BR
64 translation/decapsulation
DS VPN Headend
v4
v6
Local P&T
Aggregation /
Backbone P&T
IPv6 Internet
IPv4 Internet
SP Regional Agg
Regional networks 1. VPN client performs VPN concentrator address resolution
2. Load-balancer provides DNS A/AAAA record
3. VPN session establishment over IPv6 is natively forwarded out the home CPE
4. This traffic is forwarded over IPv6-Only network to the nearest exit point (local P&T etc.)
5. At the local exit point the traffic is natively forwarded to the IPv6 address of the VPN
Headend.
6. VPN session is established and both IPv6 and IPv4 traffic from the user device for the
Corpnet is sent through the VPN tunnel
1.
2.
3.
4.
6.
It doesn’t matter what IPv4-as-a-Service technology is used by the ISP, native IPv6 gets around it.
![Page 21: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/21.jpg)
![Page 22: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/22.jpg)
![Page 23: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/23.jpg)
https://datatracker.ietf.org/doc/html/draft-bruneau-intarea-provisioning-domains
![Page 24: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/24.jpg)
![Page 25: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/25.jpg)
![Page 26: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/26.jpg)
![Page 27: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/27.jpg)
![Page 28: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/28.jpg)
![Page 29: Microsoft IT: Journey to IPv6...RFC 7269 Dual-stack Wireless Guest globally “Scream tests” of IPv6-Only](https://reader033.vdocuments.us/reader033/viewer/2022052006/601a52c3b9ecf2257a18691e/html5/thumbnails/29.jpg)