november, 2005 ipv6 dns service deployment in korea dr. sir, jae-chul [email protected]

November, 2005

IPv6 DNS Service DeploymentIPv6 DNS Service Deploymentin Koreain Korea

Dr. Sir, [email protected]

mailto:[email protected]

2

Contents

Background & NeedBackground & NeedⅠⅠ

GoalsGoalsⅡⅡ

International TrendInternational Trend

KR Main StrategyKR Main Strategy

KR Deployment StatusKR Deployment Status

KR Future Service PlanKR Future Service Plan

ⅦⅦ

Korea IPv6 Infra. StatusKorea IPv6 Infra. StatusⅢⅢ

ⅣⅣ

ⅤⅤ

ⅥⅥ

3


GoalsGoalsⅡⅡ


KR Main StrategyKR Main StrategyⅤⅤ

KR Deployment StatusKR Deployment StatusⅥⅥ

KR Future Service PlanKR Future Service PlanⅦⅦ

International TrendInternational TrendⅣⅣ

4

Background & Need

Advent of IPv6 Advent of IPv6 (1999)(1999)

Advent of IPv6 Advent of IPv6 (1999)(1999)

Advent of IPv4 Advent of IPv4 (Early 1980s)(Early 1980s)

Advent of IPv4 Advent of IPv4 (Early 1980s)(Early 1980s)

Early stage of Internet

Name-IP mapping table (hosts.txt file)

Needs for DNS

Activated IPv4 Activated IPv4 (1990s)(1990s)

Activated IPv4 Activated IPv4 (1990s)(1990s)

Increased Network/Host

Development of various application services

Activated hi-speed Internet service

Development of wireless/mobile tech.

Appearance of various new services

Advent of ubiquitous era

Arrangement for hi- performance IPv6 application test basis

Need for stable IPv6 DNS tech.

IPv4 DNSIPv4 DNSIPv4 DNSIPv4 DNS IPv6 DNSIPv6 DNSIPv6 DNSIPv6 DNS

the importance of DNS protocol is increased under Internet environment, DNS tech. is advanced

Depletion of IPv4 Depletion of IPv4 (1994)(1994)

Depletion of IPv4 Depletion of IPv4 (1994)(1994)

Need for systematic.KR DNS and tech.for early settlement oflocal IPv6 DNS service

5


GoalsGoalsⅡⅡ






6

Goals in .KR IPv6 DNS

Root name server(IPv4/IPv6)

.KR name server (IPv4/IPv6)

.or.kr name server (IPv4/IPv6)

www.krdnsv6.or.kr web server (IPv4/IPv6)

www.krdnsv6.or.kr ? local name server

(IPv4/IPv6)

user(IPv4, IPv6, IPv4/IPv6)

Connect (IPv6 Socket 2001:dc5:a::100)Connect (IPv4 Socket 202.31.190.100)

queryanswer

Stage 1(~2001)

Stage 2(2002~2005)

Stage 3(2006~2010)

Stage 4(2011~)

IPv4 Only

IPv6 OnlyIPv6 testbed

․ ․ ․ IPv6 Island

IPv4 Ocean

IPv6 Ocean

IPv4 Island

Development of DNS service to provide stability toward IPv6

Network sideNetwork side - IPv4/IPv6 dual-stack - IPv4/IPv6 dual-stack

DNS delegation config.DNS delegation config. - Need to IPv6 delegation - Need to IPv6 delegation under root name server under root name server

7


GoalsGoalsⅡⅡ






8

Korea IPv6 Infra. Status(1/4)

Korea IPv6 Network Topology

9


First IPv6 First IPv6 experimental experimental network in Korea network in Korea

78+ org. has 78+ org. has involved in 6Bone-KR involved in 6Bone-KR

(www.6bone.ne.kr)(www.6bone.ne.kr)

6Bone-KR6Bone-KR

KOREN &KOREN &KREONET2 IPv6KREONET2 IPv6

TEIN IPv6 TEIN IPv6 &&6NGIX6NGIX

KOREAv6KOREAv6

1998~1998~

1999~1999~

2001~2001~

2004~2004~

IPv6 Network Deployment in Korea

KOREN, First nativeKOREN, First native IPv6 network in IPv6 network in Korea(by KT) Korea(by KT)

KREONET2(by KISTI)KREONET2(by KISTI)

R&D networkR&D network

TEINTEIN (Trans Eurasia (Trans Eurasia Information Network) : Information Network) : Continetal IPv6 Continetal IPv6 network between Asia network between Asia & Europe & Europe

6NGIX : IPv6 Internet 6NGIX : IPv6 Internet Exchange Point in Exchange Point in Korea(by NCA) Korea(by NCA)

Native IPv6 Trial Native IPv6 Trial Service Network Service Network in in Korea Korea

NIDA participates NIDA participates in in this project for this project for “TEST.KR” IPv6 “TEST.KR” IPv6 trialtrial DNS Service DNS Service

10


KRDNSv6 Service based on Korea IPv6 Infra.

IPv6 firewal

l

Web

.KR DNS(IPv4 only)

a.dns.kr(NIDA)

KOREAv6 6KANET, KOREN,

KREONET, 6NGIX, ISP

(IPv4/IPv6)

IPv6 DNSTestbed(NIDA)

g.dns.kr(NIDA)

KRDNSv6(IPv4/IPv6)

TEST.KRLocal DNS

for KOREAv6

Trial Service

b.dns.kr(KT)

c.dns.kr(Dacom)

d.dns.kr(Dacom)

e.dns.kr(KISTI)

f.dns.kr(Hanaro)

Internet

(IPv4)

Global IPv6

Network

11


Campus

Government

IPv6 portal

HospitalCDMA/WCDMA

Equipment Test

Home Network

Enterprise

HDTV

ISP Service

KOREN

KREONET

6KANet ISP6NGIX

KOREAv6 project

National trial IPv6 service network which is interconnected with

existing IPv6 network (e.g., 6KANET, KOREN, KREONET, 6NGIX,

commercial ISP network)

Various IPv6 based trial services(VoIPv6, IPv6 Streaming,

CDMA-based

Home Network, IPv6 G/W, MobileIPv6, IPv6 DNS and so on) are

tested

12


GoalsGoalsⅡⅡ


KR Main StrategyKR Main StrategyVIVI




13

Local Strategy in IPv6 DNS

Providing Stable IPv6 DNS Providing Stable IPv6 DNS ServiceService

Providing Tech. Providing Tech. informationinformation

Deploying IPv6 while keepingDeploying IPv6 while keeping stability of existing stability of existing IPv4 basedIPv4 based 6 .KR DNS service 6 .KR DNS service

- After additional construction - After additional construction of IPv6 .KR Secondary DNS of IPv6 .KR Secondary DNS ( (g.dns.krg.dns.kr) ) - Applying IPv6 to existing DNS - Applying IPv6 to existing DNS step by step step by step

After deployment, trial service After deployment, trial service commencement and DNS commencement and DNS operational tech. accumulation operational tech. accumulation through service expansion through service expansion

- cooperation with other - cooperation with other organization in .KR DNS trial organization in .KR DNS trial service service - Sharing DNS tech. by launching - Sharing DNS tech. by launching web site web site

14


GoalsGoalsⅡⅡ



KR Deployment StatusKR Deployment StatusVV



15

IPv6 DNS Deployment Milestone

2000 2000 ~2003~2003

20042004

Construction of tunneling IPv6 Construction of tunneling IPv6 networknetwork & IPv4/IPv6 interoperability test & IPv4/IPv6 interoperability test

Construction of Native-IPv6 Construction of Native-IPv6 networknetwork Construction of IPv6 DNS trial Construction of IPv6 DNS trial systemsystem & IPv4/IPv6 interoperability test & IPv4/IPv6 interoperability test

Education(NGI2 & IPv6 DNS Education(NGI2 & IPv6 DNS workshop)workshop)

Publication of ‘DNS Guideline’Publication of ‘DNS Guideline’

Construction of 7Construction of 7thth .KR dual- .KR dual- stack server & network stack server & network [ [KRDNSKRDNSvv66 test network] test network]

Delegation of IPv6 AAAA of .krDelegation of IPv6 AAAA of .kr name server to root DNS zone name server to root DNS zone

Registration of IPv6Registration of IPv6 reverse of .kr name server to reverse of .kr name server to APNIC APNIC

Launching DNS web page Launching DNS web page (http://www.krdnsv6.or.kr) (http://www.krdnsv6.or.kr)

16

WhatWhatisisKRDNSKRDNSvv66 ??

IPv4/IPv6 based local DNS network for IPv6 network

Construction of trial IPv6 service networkthrough trial IPv6 deployment to .kr domain in 2004

StructureStructureofofKRDNSKRDNSvv66

Construction of IPv4/IPv6 interoperable networkthrough cooperation with KOREAv6

Construction of ‘IPv6 DNS preliminary test network’for IPv6 DNS related technical analysisFully equipped environment for technical analysisin depth

Trial KRDNSv6 Service (1/3)

Trial IPv6 DNS Service through KRDNSv6

17

.KR DNS IPv6 System Construction Status


a.dns.kra.dns.krb.dns.krb.dns.krc.dns.krc.dns.krd.dns.krd.dns.kre.dns.kre.dns.krf.dns.krf.dns.krg.dns.krg.dns.kr

a.dns.kra.dns.krb.dns.krb.dns.krc.dns.krc.dns.krd.dns.krd.dns.kre.dns.kre.dns.krf.dns.krf.dns.krg.dns.krg.dns.kr - - IPv4/IPv6 [1]IPv4/IPv6 [1]

IPv4 [6]IPv4 [6]

KR.KR. NS NS a.dns.kr.a.dns.kr. ::KR.KR. NS NS g.dns.kr.g.dns.kr.

a.dns.kr.a.dns.kr. A 202.30.50.50A 202.30.50.50 : :

g.dns.kr.g.dns.kr. A 202.31.190.1A 202.31.190.1g.dns.kr.AAAA 2001:dc5:a::1g.dns.kr.AAAA 2001:dc5:a::1

Registration ofRegistration of reverse reverse delegationdelegation to APNIC in /32 to APNIC in /32

Stabilized IPv6 DNS Service SystemStabilized IPv6 DNS Service SystemStabilized IPv6 DNS Service SystemStabilized IPv6 DNS Service System

18


Trial KRDNSv6 Service Topology as of March. 2005

IPv4 NetworkIPv4 Network

IPv4/IPv6 userIPv4/IPv6 user

IPv4 (query/response)

IPv4

IPv6 (query/response)Root DNSRoot DNS

IPv4/IPv4/IPv6 IPv6 NetworkNetwork

IPv4/IPv6 DNS

IPv4

KRKR

ORORGOGOPEPE

ROOT(.)ROOT(.)

mic.go.krmic.go.krmic.go.krmic.go.kr

IPv4 userIPv4 user

IPv4 .KR DNS

IPv4 DNS

Trial Trial KRDNSKRDNSv66 network network

IPv6

IPv4 based application service

IPv4 based application service

Application service

Application service

IPv4/IPv6 .KR DNSTESTTEST

19

Trial KRDNSv6 Operation Status (1/6)

Statistics

TrafficMonitoring (MRTG)

Zone checking tools

Providing upgraded services as of Aug. 1

IPv4/IPv6 DNS statistics

Monitoring 7th .KR DNS(g.dns.kr) name server traffic

Providing zone checking tools for users

and so on

Launching KRDNSv6 Web Site

20

Statistics

.KR DNS (g.dns.kr) IPv6 delegation to root DNS zone

World first delegation to ccTLD (July 21, 2004)

IPv6-based DNS query/response increased as of July 21 (45,000 100,000)

: IPv6 DNS Query Counter

: IPv6 DNS Response Counter


100,000100,000

45,00045,000

21


110,000

115,000

120,000

125,000

130,000

135,000

140,000

145,000

8월 9월 10월 11월 12월

Statistics

IPv6 DNS daily average query : 133,694

vs. IPv4 DNS daily average query : 50,175,656

<.KR IPv6 DNS daily average query in every month, (Aug. ~ Dec., 2004)>

22

IPv6-based query type

14% 0%

0%

67%

1%

0%

5%13%

0%

0%

0%IPv6QueryTypeA

IPv6QueryTypeCNAME

IPv6QueryTypeSOA

IPv6QueryTypePTR

IPv6QueryTypeMX

IPv6QueryTypeTXT

IPv6QueryTypeAAAA

IPv6QueryTypeA6

IPv6QueryTypeIXFR

IPv6QueryTypeIXFR

IPv6QueryTypeETC

Target server : g.dns.kr

Statistics on IPv6 based query by query type

• PTR(67%)

• A(14%)

• A6(13%)

• AAAA(5%)

• and so on

Statistics


<IPv6-based RR Query Type><IPv6-based RR Query Type>

23

Traffic Monitoring (MRTG)

Target server : g.dns.kr

March 15, 2005, PM 4:20 updated

IPv4/IPv6 DNS (daily)

Average reception: 431.3kbps

Average transmission: 665.6kbps

IPv4/IPv6 DNS (weekly)

Average reception: 396.3kbps

Average transmission: 613.3kbps

Daily graph (Average in every 5 min.)

Weekly graph (Average in every 30 min.)


24

Zone Checking Tools

Providing checking tools for domain config.

Problems in DNS operation

DNS config. error

etc.

Constructing stabilized DNS by providing web based zone checking tools for DNS operators


25


GoalsGoalsⅡⅡ




KR Future Service PlanKR Future Service PlanVIVI


26

2005200520052005

IPv6 DNS service expansion - .KR name server distribution - .KR IPv6 DNS commercial service

IP Anycast study - IP Anycast(IPv4/IPv6) study and trial deployment

Study to overcome UDP packet size limit

Sharing IPv6 DNS technology

2006 ~2006 ~2006 ~2006 ~

Future Service Plan in IPv6 DNS(1/2)

Settlement of IPv6 DNS - stable IPv4/IPv6 .KR DNS service

Transference current IPv4 based .KR DNS name server to IPv4/IPv6

IP Anycast commercial service

Study on EDNS0 deployment plan

DNS for Next Generation Internet

27

Future Service Plan in IPv6 DNS(2/2)

.KR DNS Servers

IPv4/IPv6 Router

a.dns.kr (NIDA, Seoul)

IPv4/IPv6

Southern province of Korea

mirror DNSBGP & BGP4+

IPv4/IPv6 Router

Location Distribution

IPv4/IPv6

g.dns.kr

IPv4/IPv6g.dns.kr

mirror DNS

: Reconfig. & Construction range

IPv6FW

BGP & BGP4+

KRDNSv6

b.dns.kr (KT, Seoul)

c.dns.kr (DACOM, Anyang)

d.dns.kr (DACOM, SanJose)

e.dns.kr (KISTI, Daejon)

f.dns.kr (HANARO, Seoul)

g.dns.kr (NIDA, Seoul)

Europe / North AmericaMirror DNSBGP &

BGP4+

IPv4/IPv6 Router IPv4/IPv6

a.dns.krmirror DNS

Globalization

IPv4/IPv6 a.dns.krInternetIPv4/IPv6

: .KR Slave([b-f].dns.kr) DNS

: g.dns.kr IPv6 DNS

: g.dns.kr Mirror DNS: IPv4/IPv6 Router

: .KR Slave(a.dns.kr) DNS

: a.dns.kr Mirror DNS

.KR IPv6 DNS expansion plan based on IP Anycast < 2005 Expansion Plan

>< Now >

28

Dr. Sir, Jae-Chul ,Executive DirectorTel : +82-2-2186-4552Fax : +82-2-2186-4495 Email : [email protected]

National Internet Development Agencyof Korea

CONTACT

29


GoalsGoalsⅡⅡ





International TrendInternational TrendVIIVII

30

International Trend (1/6)

E, Mt. View, CA

B, Marina Del Rey, CA

F, Palo Alto, CA

C, Herndon,VA

A, Dulles,VA

D, College Park, MD

G, Vienna, VA

I, Stockholm, Sweden

K, London, United Kingdom

M, Tokyo, Japan

H, Aberdeen, MD

J, Dulles,VA

L, Los Angeles

Worldwide Root DNS Servers : Total 13

31

IPv4/IPv6 dual-interface on 5 root servers from perspective of IP layer

- IPv6 based DNS Query acceptable

- so, local server needs to be built up as dual network

IPv6 delegation to name servers under root

- IPv6 AAAA delegation to ccTLD level name server (July 20, 2004 UTC)

- Technical limit of DNS packet size 512 bytes


Name server Organization Location IP address

B Information Sciences Institute

Marina Del Rey CA

IPv4: 192.228.79.201IPv6: 2001:478:65::53

F Internet Software Consortium

Palo Alto IPv4: 192.5.5.241IPv6: 2001:500::1035

H U.S. Army Research Lab

Aberdeen MD IPv4: 128.63.2.53IPv6: 2001:500:1::803f:235

K RIPE NCC London IPv4: 193.0.14.129IPv6: 2001:7fd::1

M WIDE Project Tokyo IPv4: 202.12.27.33IPv6: 2001:dc3::35

IPv6 Compatibility with Root DNS

32


IPv6 Address Added to the Internet's Root DNS Zone

33

Requests for AddingRequests for Adding

IPv6 Glue RecordIPv6 Glue Record

Requests for AddingRequests for Adding

IPv6 Glue RecordIPv6 Glue Record

DelegationPolicy

DelegationPolicy

Domain Name SpaceDomain Name SpaceDomain Name SpaceDomain Name Space

KRKR

ORORNENECOCOGOGO

ROOT(.)ROOT(.)

MyCompanyMyCompany MyShopMyShop

JPJPCOMCOM ORGORG

g.dns.kr.g.dns.kr. AAAAAAAA 2001:dc5:a::12001:dc5:a::1g.dns.kr.g.dns.kr. AAAAAAAA 2001:dc5:a::12001:dc5:a::1

ARPAARPA

IPv4/IPv4/IPv6IPv6

IPv6IPv6 Enabled EnabledName ServersName ServersIPv6IPv6 Enabled EnabledName ServersName Servers

B.ROOT-SERVERS.NETF.ROOT-SERVERS.NETH.ROOT-SERVERS.NET

M.ROOT-SERVERS.NET

B.ROOT-SERVERS.NETF.ROOT-SERVERS.NETH.ROOT-SERVERS.NET

M.ROOT-SERVERS.NET

ROOT ZoneROOT ZoneROOT ZoneROOT ZoneKR.KR. NSNS a.dns.kr.a.dns.kr.::KR.KR. NSNS g.dns.kr.g.dns.kr.

a.dns.kr.a.dns.kr. AA 202.30.50.50 202.30.50.50::g.dns.kr.g.dns.kr. AA 202.30.190.1202.30.190.1g.dns.kr.g.dns.kr. AAAA 2001:dc5:a::1AAAA 2001:dc5:a::1:

KR.KR. NSNS a.dns.kr.a.dns.kr.::KR.KR. NSNS g.dns.kr.g.dns.kr.

a.dns.kr.a.dns.kr. AA 202.30.50.50 202.30.50.50::g.dns.kr.g.dns.kr. AA 202.30.190.1202.30.190.1g.dns.kr.g.dns.kr. AAAA 2001:dc5:a::1AAAA 2001:dc5:a::1:

.KR IPv6 delegation to ROOT DNS

For the first time in the world

(Since July 20, 2004 UTC)

IPv6 user

IPv6 packet with DNSDNS Query:www.myshop.co.kr AAAA ?

IPv6 packet with DNSDNS Query:www.myshop.co.kr AAAA ?

IPv6 packet with DNSDNS Response:Refer to KR. NS A.DNS.KR. : KR. NS G.DNS.KR. A.DNS.KR. A 202.30.50.50 : G.DNS.KR. A 202.31.190.1 G.DNS.KR. AAAA 2001:dc5:a::1

IPv6 packet with DNSDNS Response:Refer to KR. NS A.DNS.KR. : KR. NS G.DNS.KR. A.DNS.KR. A 202.30.50.50 : G.DNS.KR. A 202.31.190.1 G.DNS.KR. AAAA 2001:dc5:a::1


13 Root DNS ccTLD Delegation Services As of March. 2005

34


CountryCountry

NameNameNo. of DNS No. of DNS

ServerServerNo. of No. of

IPv4/IPv6 dual IPv4/IPv6 dual DNS ServerDNS Server

Name of DNS Name of DNS ServerServer

IP AddressIP Address

Japan 6 4

a.dns.jpIPv4: 203.119.1.1

IPv6: 2001:dc4::1

b.dns.jp IPv4: 202.12.30.131

c.dns.jp IPv4: 165.76.0.98

d.dns.jpIPv4: 210.138.175.244

IPv6: 2001:240::53

e.dns.jpIPv4: 192.50.43.53

IPv6: 2001:200:0:1::4

f.dns.jpIPv4: 150.100.2.3

IPv6: 2001:2f8:0:100::153

France 7 3

a.ext.nic.fr IPv4: 193.51.208.13

c.ext.nic.fr IPv4: 128.112.129.15

d.ext.nic.frIPv4: 204.152.184.85

IPv6: 2001:4f8:0:2::8

e.ext.nic.fr IPv4: 193.176.144.6

a.nic.fr IPv4: 192.93.0.1

b.nic.frIPv4: 192.93.0.4

IPv6: 2001:660:3005:1::1:2

c.nic.frIPv4: 192.134.0.49

IPv6: 2001:660:3006:1::1:1

Dual-stack Status of ccTLD Countries

35


DNS Name System Simplification of ccTLD Countries

Minimizing DNS response message size through consistent domain name - Systemized domain name can be processed in compressed - Systemized domain name can be processed in compressed typetype - This allows DNS response message size that is limited to 512 - This allows DNS response message size that is limited to 512 bytesbytes - This is also very sensitive factor in construction of dual-stack - This is also very sensitive factor in construction of dual-stack network andnetwork and IPv6 delegation to root domain name server in the future IPv6 delegation to root domain name server in the future

JJ

PP Upgrade from Jul. of 2003 to Aug. of 2003Upgrade from Jul. of 2003 to Aug. of 2003

6 .JP domain names changed : [a-f].dns.jp6 .JP domain names changed : [a-f].dns.jp

FF

RR March. of 2005, .FR domain names changedMarch. of 2005, .FR domain names changed

november, 2005 ipv6 dns service deployment in korea dr. sir, jae-chul [email protected]

Documents