november, 2005 ipv6 dns service deployment in korea dr. sir, jae-chul sir@nida.or.kr
Post on 30-Dec-2015
215 Views
Preview:
TRANSCRIPT
November, 2005
IPv6 DNS Service DeploymentIPv6 DNS Service Deploymentin Koreain Korea
Dr. Sir, Jae-Chulsir@nida.or.kr
2
Contents
Background & NeedBackground & NeedⅠⅠ
GoalsGoalsⅡⅡ
International TrendInternational Trend
KR Main StrategyKR Main Strategy
KR Deployment StatusKR Deployment Status
KR Future Service PlanKR Future Service Plan
ⅦⅦ
Korea IPv6 Infra. StatusKorea IPv6 Infra. StatusⅢⅢ
ⅣⅣ
ⅤⅤ
ⅥⅥ
3
Background & NeedBackground & NeedⅠⅠ
GoalsGoalsⅡⅡ
Korea IPv6 Infra. StatusKorea IPv6 Infra. StatusⅢⅢ
KR Main StrategyKR Main StrategyⅤⅤ
KR Deployment StatusKR Deployment StatusⅥⅥ
KR Future Service PlanKR Future Service PlanⅦⅦ
International TrendInternational TrendⅣⅣ
4
Background & Need
Advent of IPv6 Advent of IPv6 (1999)(1999)
Advent of IPv6 Advent of IPv6 (1999)(1999)
Advent of IPv4 Advent of IPv4 (Early 1980s)(Early 1980s)
Advent of IPv4 Advent of IPv4 (Early 1980s)(Early 1980s)
Early stage of Internet
Name-IP mapping table (hosts.txt file)
Needs for DNS
Activated IPv4 Activated IPv4 (1990s)(1990s)
Activated IPv4 Activated IPv4 (1990s)(1990s)
Increased Network/Host
Development of various application services
Activated hi-speed Internet service
Development of wireless/mobile tech.
Appearance of various new services
Advent of ubiquitous era
Arrangement for hi- performance IPv6 application test basis
Need for stable IPv6 DNS tech.
IPv4 DNSIPv4 DNSIPv4 DNSIPv4 DNS IPv6 DNSIPv6 DNSIPv6 DNSIPv6 DNS
the importance of DNS protocol is increased under Internet environment, DNS tech. is advanced
Depletion of IPv4 Depletion of IPv4 (1994)(1994)
Depletion of IPv4 Depletion of IPv4 (1994)(1994)
Need for systematic.KR DNS and tech.for early settlement oflocal IPv6 DNS service
5
Background & NeedBackground & NeedⅠⅠ
GoalsGoalsⅡⅡ
Korea IPv6 Infra. StatusKorea IPv6 Infra. StatusⅢⅢ
KR Main StrategyKR Main StrategyⅤⅤ
KR Deployment StatusKR Deployment StatusⅥⅥ
KR Future Service PlanKR Future Service PlanⅦⅦ
International TrendInternational TrendⅣⅣ
6
Goals in .KR IPv6 DNS
Root name server(IPv4/IPv6)
.KR name server (IPv4/IPv6)
.or.kr name server (IPv4/IPv6)
www.krdnsv6.or.kr web server (IPv4/IPv6)
www.krdnsv6.or.kr ? local name server
(IPv4/IPv6)
user(IPv4, IPv6, IPv4/IPv6)
Connect (IPv6 Socket 2001:dc5:a::100)Connect (IPv4 Socket 202.31.190.100)
queryanswer
Stage 1(~2001)
Stage 2(2002~2005)
Stage 3(2006~2010)
Stage 4(2011~)
IPv4 Only
IPv6 OnlyIPv6 testbed
․ ․ ․ IPv6 Island
IPv4 Ocean
IPv6 Ocean
IPv4 Island
Development of DNS service to provide stability toward IPv6
Network sideNetwork side - IPv4/IPv6 dual-stack - IPv4/IPv6 dual-stack
DNS delegation config.DNS delegation config. - Need to IPv6 delegation - Need to IPv6 delegation under root name server under root name server
7
Background & NeedBackground & NeedⅠⅠ
GoalsGoalsⅡⅡ
Korea IPv6 Infra. StatusKorea IPv6 Infra. StatusⅢⅢ
KR Main StrategyKR Main StrategyⅤⅤ
KR Deployment StatusKR Deployment StatusⅥⅥ
KR Future Service PlanKR Future Service PlanⅦⅦ
International TrendInternational TrendⅣⅣ
9
Korea IPv6 Infra. Status(2/4)
First IPv6 First IPv6 experimental experimental network in Korea network in Korea
78+ org. has 78+ org. has involved in 6Bone-KR involved in 6Bone-KR
(www.6bone.ne.kr)(www.6bone.ne.kr)
6Bone-KR6Bone-KR
KOREN &KOREN &KREONET2 IPv6KREONET2 IPv6
TEIN IPv6 TEIN IPv6 &&6NGIX6NGIX
KOREAv6KOREAv6
1998~1998~
1999~1999~
2001~2001~
2004~2004~
IPv6 Network Deployment in Korea
KOREN, First nativeKOREN, First native IPv6 network in IPv6 network in Korea(by KT) Korea(by KT)
KREONET2(by KISTI)KREONET2(by KISTI)
R&D networkR&D network
TEINTEIN (Trans Eurasia (Trans Eurasia Information Network) : Information Network) : Continetal IPv6 Continetal IPv6 network between Asia network between Asia & Europe & Europe
6NGIX : IPv6 Internet 6NGIX : IPv6 Internet Exchange Point in Exchange Point in Korea(by NCA) Korea(by NCA)
Native IPv6 Trial Native IPv6 Trial Service Network Service Network in in Korea Korea
NIDA participates NIDA participates in in this project for this project for “TEST.KR” IPv6 “TEST.KR” IPv6 trialtrial DNS Service DNS Service
10
Korea IPv6 Infra. Status(3/4)
KRDNSv6 Service based on Korea IPv6 Infra.
IPv6 firewal
l
Web
.KR DNS(IPv4 only)
a.dns.kr(NIDA)
KOREAv6 6KANET, KOREN,
KREONET, 6NGIX, ISP
(IPv4/IPv6)
IPv6 DNSTestbed(NIDA)
g.dns.kr(NIDA)
KRDNSv6(IPv4/IPv6)
TEST.KRLocal DNS
for KOREAv6
Trial Service
b.dns.kr(KT)
c.dns.kr(Dacom)
d.dns.kr(Dacom)
e.dns.kr(KISTI)
f.dns.kr(Hanaro)
Internet
(IPv4)
Global IPv6
Network
11
Korea IPv6 Infra. Status(4/4)
Campus
Government
IPv6 portal
HospitalCDMA/WCDMA
Equipment Test
Home Network
Enterprise
HDTV
ISP Service
KOREN
KREONET
6KANet ISP6NGIX
KOREAv6 project
National trial IPv6 service network which is interconnected with
existing IPv6 network (e.g., 6KANET, KOREN, KREONET, 6NGIX,
commercial ISP network)
Various IPv6 based trial services(VoIPv6, IPv6 Streaming,
CDMA-based
Home Network, IPv6 G/W, MobileIPv6, IPv6 DNS and so on) are
tested
12
Background & NeedBackground & NeedⅠⅠ
GoalsGoalsⅡⅡ
Korea IPv6 Infra. StatusKorea IPv6 Infra. StatusⅢⅢ
KR Main StrategyKR Main StrategyVIVI
KR Deployment StatusKR Deployment StatusⅥⅥ
KR Future Service PlanKR Future Service PlanⅦⅦ
International TrendInternational TrendⅣⅣ
13
Local Strategy in IPv6 DNS
Providing Stable IPv6 DNS Providing Stable IPv6 DNS ServiceService
Providing Tech. Providing Tech. informationinformation
Deploying IPv6 while keepingDeploying IPv6 while keeping stability of existing stability of existing IPv4 basedIPv4 based 6 .KR DNS service 6 .KR DNS service
- After additional construction - After additional construction of IPv6 .KR Secondary DNS of IPv6 .KR Secondary DNS ( (g.dns.krg.dns.kr) ) - Applying IPv6 to existing DNS - Applying IPv6 to existing DNS step by step step by step
After deployment, trial service After deployment, trial service commencement and DNS commencement and DNS operational tech. accumulation operational tech. accumulation through service expansion through service expansion
- cooperation with other - cooperation with other organization in .KR DNS trial organization in .KR DNS trial service service - Sharing DNS tech. by launching - Sharing DNS tech. by launching web site web site
14
Background & NeedBackground & NeedⅠⅠ
GoalsGoalsⅡⅡ
Korea IPv6 Infra. StatusKorea IPv6 Infra. StatusⅢⅢ
KR Main StrategyKR Main StrategyⅤⅤ
KR Deployment StatusKR Deployment StatusVV
KR Future Service PlanKR Future Service PlanⅦⅦ
International TrendInternational TrendⅣⅣ
15
IPv6 DNS Deployment Milestone
2000 2000 ~2003~2003
20042004
Construction of tunneling IPv6 Construction of tunneling IPv6 networknetwork & IPv4/IPv6 interoperability test & IPv4/IPv6 interoperability test
Construction of Native-IPv6 Construction of Native-IPv6 networknetwork Construction of IPv6 DNS trial Construction of IPv6 DNS trial systemsystem & IPv4/IPv6 interoperability test & IPv4/IPv6 interoperability test
Education(NGI2 & IPv6 DNS Education(NGI2 & IPv6 DNS workshop)workshop)
Publication of ‘DNS Guideline’Publication of ‘DNS Guideline’
Construction of 7Construction of 7thth .KR dual- .KR dual- stack server & network stack server & network [ [KRDNSKRDNSvv66 test network] test network]
Delegation of IPv6 AAAA of .krDelegation of IPv6 AAAA of .kr name server to root DNS zone name server to root DNS zone
Registration of IPv6Registration of IPv6 reverse of .kr name server to reverse of .kr name server to APNIC APNIC
Launching DNS web page Launching DNS web page (http://www.krdnsv6.or.kr) (http://www.krdnsv6.or.kr)
16
WhatWhatisisKRDNSKRDNSvv66 ??
IPv4/IPv6 based local DNS network for IPv6 network
Construction of trial IPv6 service networkthrough trial IPv6 deployment to .kr domain in 2004
StructureStructureofofKRDNSKRDNSvv66
Construction of IPv4/IPv6 interoperable networkthrough cooperation with KOREAv6
Construction of ‘IPv6 DNS preliminary test network’for IPv6 DNS related technical analysisFully equipped environment for technical analysisin depth
Trial KRDNSv6 Service (1/3)
Trial IPv6 DNS Service through KRDNSv6
17
.KR DNS IPv6 System Construction Status
Trial KRDNSv6 Service (2/3)
a.dns.kra.dns.krb.dns.krb.dns.krc.dns.krc.dns.krd.dns.krd.dns.kre.dns.kre.dns.krf.dns.krf.dns.krg.dns.krg.dns.kr
a.dns.kra.dns.krb.dns.krb.dns.krc.dns.krc.dns.krd.dns.krd.dns.kre.dns.kre.dns.krf.dns.krf.dns.krg.dns.krg.dns.kr - - IPv4/IPv6 [1]IPv4/IPv6 [1]
IPv4 [6]IPv4 [6]
KR.KR. NS NS a.dns.kr.a.dns.kr. ::KR.KR. NS NS g.dns.kr.g.dns.kr.
a.dns.kr.a.dns.kr. A 202.30.50.50A 202.30.50.50 : :
g.dns.kr.g.dns.kr. A 202.31.190.1A 202.31.190.1g.dns.kr.AAAA 2001:dc5:a::1g.dns.kr.AAAA 2001:dc5:a::1
Registration ofRegistration of reverse reverse delegationdelegation to APNIC in /32 to APNIC in /32
Stabilized IPv6 DNS Service SystemStabilized IPv6 DNS Service SystemStabilized IPv6 DNS Service SystemStabilized IPv6 DNS Service System
18
Trial KRDNSv6 Service (3/3)
Trial KRDNSv6 Service Topology as of March. 2005
IPv4 NetworkIPv4 Network
IPv4/IPv6 userIPv4/IPv6 user
IPv4 (query/response)
IPv4
IPv6 (query/response)Root DNSRoot DNS
IPv4/IPv4/IPv6 IPv6 NetworkNetwork
IPv4/IPv6 DNS
IPv4
KRKR
ORORGOGOPEPE
ROOT(.)ROOT(.)
mic.go.krmic.go.krmic.go.krmic.go.kr
IPv4 userIPv4 user
IPv4 .KR DNS
IPv4 DNS
Trial Trial KRDNSKRDNSv66 network network
IPv6
IPv4 based application service
IPv4 based application service
Application service
Application service
IPv4/IPv6 .KR DNSTESTTEST
19
Trial KRDNSv6 Operation Status (1/6)
Statistics
TrafficMonitoring (MRTG)
Zone checking tools
Providing upgraded services as of Aug. 1
IPv4/IPv6 DNS statistics
Monitoring 7th .KR DNS(g.dns.kr) name server traffic
Providing zone checking tools for users
and so on
Launching KRDNSv6 Web Site
20
Statistics
.KR DNS (g.dns.kr) IPv6 delegation to root DNS zone
World first delegation to ccTLD (July 21, 2004)
IPv6-based DNS query/response increased as of July 21 (45,000 100,000)
: IPv6 DNS Query Counter
: IPv6 DNS Response Counter
Trial KRDNSv6 Operation Status (2/6)
100,000100,000
45,00045,000
21
Trial KRDNSv6 Operation Status (3/6)
110,000
115,000
120,000
125,000
130,000
135,000
140,000
145,000
8월 9월 10월 11월 12월
Statistics
IPv6 DNS daily average query : 133,694
vs. IPv4 DNS daily average query : 50,175,656
<.KR IPv6 DNS daily average query in every month, (Aug. ~ Dec., 2004)>
22
IPv6-based query type
14% 0%
0%
67%
1%
0%
5%13%
0%
0%
0%IPv6QueryTypeA
IPv6QueryTypeCNAME
IPv6QueryTypeSOA
IPv6QueryTypePTR
IPv6QueryTypeMX
IPv6QueryTypeTXT
IPv6QueryTypeAAAA
IPv6QueryTypeA6
IPv6QueryTypeIXFR
IPv6QueryTypeIXFR
IPv6QueryTypeETC
Target server : g.dns.kr
Statistics on IPv6 based query by query type
• PTR(67%)
• A(14%)
• A6(13%)
• AAAA(5%)
• and so on
Statistics
Trial KRDNSv6 Operation Status (4/6)
<IPv6-based RR Query Type><IPv6-based RR Query Type>
23
Traffic Monitoring (MRTG)
Target server : g.dns.kr
March 15, 2005, PM 4:20 updated
IPv4/IPv6 DNS (daily)
Average reception: 431.3kbps
Average transmission: 665.6kbps
IPv4/IPv6 DNS (weekly)
Average reception: 396.3kbps
Average transmission: 613.3kbps
Daily graph (Average in every 5 min.)
Weekly graph (Average in every 30 min.)
Trial KRDNSv6 Operation Status (5/6)
24
Zone Checking Tools
Providing checking tools for domain config.
Problems in DNS operation
DNS config. error
etc.
Constructing stabilized DNS by providing web based zone checking tools for DNS operators
Trial KRDNSv6 Operation Status (6/6)
25
Background & NeedBackground & NeedⅠⅠ
GoalsGoalsⅡⅡ
Korea IPv6 Infra. StatusKorea IPv6 Infra. StatusⅢⅢ
KR Main StrategyKR Main StrategyⅤⅤ
KR Deployment StatusKR Deployment StatusⅥⅥ
KR Future Service PlanKR Future Service PlanVIVI
International TrendInternational TrendⅣⅣ
26
2005200520052005
IPv6 DNS service expansion - .KR name server distribution - .KR IPv6 DNS commercial service
IP Anycast study - IP Anycast(IPv4/IPv6) study and trial deployment
Study to overcome UDP packet size limit
Sharing IPv6 DNS technology
2006 ~2006 ~2006 ~2006 ~
Future Service Plan in IPv6 DNS(1/2)
Settlement of IPv6 DNS - stable IPv4/IPv6 .KR DNS service
Transference current IPv4 based .KR DNS name server to IPv4/IPv6
IP Anycast commercial service
Study on EDNS0 deployment plan
DNS for Next Generation Internet
27
Future Service Plan in IPv6 DNS(2/2)
.KR DNS Servers
IPv4/IPv6 Router
a.dns.kr (NIDA, Seoul)
IPv4/IPv6
Southern province of Korea
mirror DNSBGP & BGP4+
IPv4/IPv6 Router
Location Distribution
IPv4/IPv6
g.dns.kr
IPv4/IPv6g.dns.kr
mirror DNS
: Reconfig. & Construction range
IPv6FW
BGP & BGP4+
KRDNSv6
b.dns.kr (KT, Seoul)
c.dns.kr (DACOM, Anyang)
d.dns.kr (DACOM, SanJose)
e.dns.kr (KISTI, Daejon)
f.dns.kr (HANARO, Seoul)
g.dns.kr (NIDA, Seoul)
Europe / North AmericaMirror DNSBGP &
BGP4+
IPv4/IPv6 Router IPv4/IPv6
a.dns.krmirror DNS
Globalization
IPv4/IPv6 a.dns.krInternetIPv4/IPv6
: .KR Slave([b-f].dns.kr) DNS
: g.dns.kr IPv6 DNS
: g.dns.kr Mirror DNS: IPv4/IPv6 Router
: .KR Slave(a.dns.kr) DNS
: a.dns.kr Mirror DNS
.KR IPv6 DNS expansion plan based on IP Anycast < 2005 Expansion Plan
>< Now >
28
Dr. Sir, Jae-Chul ,Executive DirectorTel : +82-2-2186-4552Fax : +82-2-2186-4495 Email : sir@nida.or.kr
National Internet Development Agencyof Korea
CONTACT
29
Background & NeedBackground & NeedⅠⅠ
GoalsGoalsⅡⅡ
Korea IPv6 Infra. StatusKorea IPv6 Infra. StatusⅢⅢ
KR Main StrategyKR Main StrategyⅤⅤ
KR Deployment StatusKR Deployment StatusⅥⅥ
KR Future Service PlanKR Future Service PlanⅦⅦ
International TrendInternational TrendVIIVII
30
International Trend (1/6)
E, Mt. View, CA
B, Marina Del Rey, CA
F, Palo Alto, CA
C, Herndon,VA
A, Dulles,VA
D, College Park, MD
G, Vienna, VA
I, Stockholm, Sweden
K, London, United Kingdom
M, Tokyo, Japan
H, Aberdeen, MD
J, Dulles,VA
L, Los Angeles
Worldwide Root DNS Servers : Total 13
31
IPv4/IPv6 dual-interface on 5 root servers from perspective of IP layer
- IPv6 based DNS Query acceptable
- so, local server needs to be built up as dual network
IPv6 delegation to name servers under root
- IPv6 AAAA delegation to ccTLD level name server (July 20, 2004 UTC)
- Technical limit of DNS packet size 512 bytes
International Trend (2/6)
Name server Organization Location IP address
B Information Sciences Institute
Marina Del Rey CA
IPv4: 192.228.79.201IPv6: 2001:478:65::53
F Internet Software Consortium
Palo Alto IPv4: 192.5.5.241IPv6: 2001:500::1035
H U.S. Army Research Lab
Aberdeen MD IPv4: 128.63.2.53IPv6: 2001:500:1::803f:235
K RIPE NCC London IPv4: 193.0.14.129IPv6: 2001:7fd::1
M WIDE Project Tokyo IPv4: 202.12.27.33IPv6: 2001:dc3::35
IPv6 Compatibility with Root DNS
33
Requests for AddingRequests for Adding
IPv6 Glue RecordIPv6 Glue Record
Requests for AddingRequests for Adding
IPv6 Glue RecordIPv6 Glue Record
DelegationPolicy
DelegationPolicy
Domain Name SpaceDomain Name SpaceDomain Name SpaceDomain Name Space
KRKR
ORORNENECOCOGOGO
ROOT(.)ROOT(.)
MyCompanyMyCompany MyShopMyShop
JPJPCOMCOM ORGORG
g.dns.kr.g.dns.kr. AAAAAAAA 2001:dc5:a::12001:dc5:a::1g.dns.kr.g.dns.kr. AAAAAAAA 2001:dc5:a::12001:dc5:a::1
ARPAARPA
IPv4/IPv4/IPv6IPv6
IPv6IPv6 Enabled EnabledName ServersName ServersIPv6IPv6 Enabled EnabledName ServersName Servers
B.ROOT-SERVERS.NETF.ROOT-SERVERS.NETH.ROOT-SERVERS.NET
M.ROOT-SERVERS.NET
B.ROOT-SERVERS.NETF.ROOT-SERVERS.NETH.ROOT-SERVERS.NET
M.ROOT-SERVERS.NET
ROOT ZoneROOT ZoneROOT ZoneROOT ZoneKR.KR. NSNS a.dns.kr.a.dns.kr.::KR.KR. NSNS g.dns.kr.g.dns.kr.
a.dns.kr.a.dns.kr. AA 202.30.50.50 202.30.50.50::g.dns.kr.g.dns.kr. AA 202.30.190.1202.30.190.1g.dns.kr.g.dns.kr. AAAA 2001:dc5:a::1AAAA 2001:dc5:a::1:
KR.KR. NSNS a.dns.kr.a.dns.kr.::KR.KR. NSNS g.dns.kr.g.dns.kr.
a.dns.kr.a.dns.kr. AA 202.30.50.50 202.30.50.50::g.dns.kr.g.dns.kr. AA 202.30.190.1202.30.190.1g.dns.kr.g.dns.kr. AAAA 2001:dc5:a::1AAAA 2001:dc5:a::1:
.KR IPv6 delegation to ROOT DNS
For the first time in the world
(Since July 20, 2004 UTC)
IPv6 user
IPv6 packet with DNSDNS Query:www.myshop.co.kr AAAA ?
IPv6 packet with DNSDNS Query:www.myshop.co.kr AAAA ?
IPv6 packet with DNSDNS Response:Refer to KR. NS A.DNS.KR. : KR. NS G.DNS.KR. A.DNS.KR. A 202.30.50.50 : G.DNS.KR. A 202.31.190.1 G.DNS.KR. AAAA 2001:dc5:a::1
IPv6 packet with DNSDNS Response:Refer to KR. NS A.DNS.KR. : KR. NS G.DNS.KR. A.DNS.KR. A 202.30.50.50 : G.DNS.KR. A 202.31.190.1 G.DNS.KR. AAAA 2001:dc5:a::1
International Trend (4/6)
13 Root DNS ccTLD Delegation Services As of March. 2005
34
International Trend (5/6)
CountryCountry
NameNameNo. of DNS No. of DNS
ServerServerNo. of No. of
IPv4/IPv6 dual IPv4/IPv6 dual DNS ServerDNS Server
Name of DNS Name of DNS ServerServer
IP AddressIP Address
Japan 6 4
a.dns.jpIPv4: 203.119.1.1
IPv6: 2001:dc4::1
b.dns.jp IPv4: 202.12.30.131
c.dns.jp IPv4: 165.76.0.98
d.dns.jpIPv4: 210.138.175.244
IPv6: 2001:240::53
e.dns.jpIPv4: 192.50.43.53
IPv6: 2001:200:0:1::4
f.dns.jpIPv4: 150.100.2.3
IPv6: 2001:2f8:0:100::153
France 7 3
a.ext.nic.fr IPv4: 193.51.208.13
c.ext.nic.fr IPv4: 128.112.129.15
d.ext.nic.frIPv4: 204.152.184.85
IPv6: 2001:4f8:0:2::8
e.ext.nic.fr IPv4: 193.176.144.6
a.nic.fr IPv4: 192.93.0.1
b.nic.frIPv4: 192.93.0.4
IPv6: 2001:660:3005:1::1:2
c.nic.frIPv4: 192.134.0.49
IPv6: 2001:660:3006:1::1:1
Dual-stack Status of ccTLD Countries
35
International Trend (6/6)
DNS Name System Simplification of ccTLD Countries
Minimizing DNS response message size through consistent domain name - Systemized domain name can be processed in compressed - Systemized domain name can be processed in compressed typetype - This allows DNS response message size that is limited to 512 - This allows DNS response message size that is limited to 512 bytesbytes - This is also very sensitive factor in construction of dual-stack - This is also very sensitive factor in construction of dual-stack network andnetwork and IPv6 delegation to root domain name server in the future IPv6 delegation to root domain name server in the future
JJ
PP Upgrade from Jul. of 2003 to Aug. of 2003Upgrade from Jul. of 2003 to Aug. of 2003
6 .JP domain names changed : [a-f].dns.jp6 .JP domain names changed : [a-f].dns.jp
FF
RR March. of 2005, .FR domain names changedMarch. of 2005, .FR domain names changed
top related