More on China's IPv6 Network Buildout

photojournaliste writes "China has developed and demonstrated its first high-performance network core router based on the next-generation Internet standard known as IPv6, which the country officially inaugurated earlier this week." There's also a CNet story, which has a bit more information than our earlier story.

Comments

Not suprisingly slashdot "editor" michael posts

[Anonymous Coward]

this, with his communist, pro-censorship views he'd fit in very well in China's authoritarian regime.

Re:Not suprisingly slashdot "editor" michael posts

[Anonymous Coward]

china is k3wl. bush sux.

Re:Not suprisingly slashdot "editor" michael posts

[Anonymous Coward]

Michael A.K.A. Michael "Domain Squatter" Sims? There is nothing communist about domain squatting.

Re:Not suprisingly slashdot "editor" michael posts

[ScrewMaster]

Unless ... you happen to be a Communist who is squatting on a domain.

Re:Not suprisingly slashdot "editor" michael posts

[Anonymous Coward]

karma whore.

Re:Not suprisingly slashdot "editor" michael posts

[Anonymous Coward]

He squats when he pees.

Taco holds his purse.

fp

[Anonymous Coward]

first post

First post!

[Anonymous Coward]

First post! W00t!

I guess..

[Anonymous Coward]

..they're to blame for the lack of IPv4 addresses.

Any more high-profile rollouts of IPv6?

[The One KEA]

Does anyone know if there are similar projects in scope and concept to this one?

Re:Any more high-profile rollouts of IPv6?

[Xeo 024]

From the article:

China is not the only Asian country with a strong interest in IPv6. Japan has already implemented an IPv6 production network, which is used by every service provider in the country. South Korea is working with the EU to develop applications and services using IPv6.

Also, check out this article: Japan, China, S. Korea developing next Net.

Re:Any more high-profile rollouts of IPv6?

[Anonymous Coward]

Better get to know this one. It's got the most potential for morphing into SKYNET.

Compatibility

[bredk]

Is this compatible with the rest of the world, and is China gonna be the new internet-superpower, controlling IPv6?

Re:Compatibility

[jacksonj04]

Yes, yes it is. IPv6 is just like IPv4, except a new standard. It's published by the IETF (whos URL escapes me right now, possibly a child will have it) and is already implemented left right and centre, just not on any large scale. The network in my house uses IPv6, as does my school's 'Test Suite'. Microsoft have a big 6to4 router (lets IPv6 talk to IPv4) which is publicly available (search TechNet for the "6bone").

So, although China has fairly whupped most other places in getting IPv6 in first, there's no way it can run the show.

Re:Compatibility

[rekoil]

I think the IETF's web site is http://www.ietf.org.

Develop intellectual property, copy model #

[PornMaster]

Yes, this new router does IPv6 and the Cisco 12016 doesn't, but isn't the model number a little familiar?

Is this the Intel/AMD "486" thing all over again?

Re:Develop intellectual property, copy model #

[Duncan3]

What, are you implying the chinese would take the Cisco product, copy it IOS, product number and all, then add IPv6?

That's absurd, noone can read Cisco source code.

Re:Develop intellectual property, copy model #

[Jeff DeMaagd]

Wasn't the AMD 486 basically the same design? For a while Intel had to licence out the chip designs so they can supply the military. Around the 486 time, Intel decided to leave that market and quit the licencing.

Re:Develop intellectual property, copy model #

[agristin]

The 12000 series supports IPv6 and so does the very model you point out.

Check the release notes:

http://www.cisco.com/en/US/products/sw/iosswrel/ ps 5014/prod_release_note09186a0080199977.html

The chinese probably are using the cisco GSRs. If you google for GSR IPv6 you'll see a couple places with IPv6 and the GSR in action (abiliene?) and some with Juniper to GSR Ipv6 connections.

-A

While the idea that the chinese stole the router and hacked in IPv6 is nice, it is much easier to believe they bought a couple GSRs that support IPv6.

Re:Develop intellectual property, copy model #

[SexyAlexie]

I know a man who can.

Re:Develop intellectual property, copy model #

[Anonymous Coward]

You realise that the Chinese basically 0wn the US, and that intellectual "property" is just bits of paper at most?

I"P" is a massive scam to get the West to stop manufacturing. "Made in England (or USA)" used to be a mark of pride, now all the real work is done by China, while the idiot West kills itself fighting over who has the most imaginary property?

Pretty soon, all the West will have will be ephermal dreams, and the rest of the world will say "fuck that".

Re:Develop intellectual property, copy model #

[Anonymous Coward]

What actually happened is that 15 Chinese students came from China to the US to go to university. There were still jobs in the US when they graduated, so they went to work for Cisco, and developed router technology. Their made-in-America bosses distrusted them (looked at them squinty-eyed and shouted a lot) but took their ideas and called them 'CISCO'(tm). Then jobs started leaving the US, the terror alert went up, and the shouting and squinty-eyed looks of their bosses became screams and threats, along with pushing and shoving. The hapless Chinese students were forced to return to China. They were hired by companies to develop technology. There were no shouts or sqinty-eyed looks, nor were there racial slurs or people who treated them like they knew nothing. The first work was an improved version of the work they had done for another (foreign=US) company. Their American masters had belittled them for adding IPV6 as America doesn't need it --IPV4 is fine. China needs a lot of IP addresses. IPV6 is the way. The interesting part is that if China got the same proportion of IPV6 addresses as the US has IPV4 addresses, the US would still have more IP addresses than it has now.

Re:Develop intellectual property, copy model #

[myowntrueself]

"That's absurd, noone can read Cisco source code."

Do you mean;
"noone has the opportunity to look at and read cisco sourcecode" (because its so secret)

or;
"even if you had the opportunity to look at cisco sourcecode you wouldn't be able to read it" (because its so badly written)

Re:Develop intellectual property, copy model #

[Anonymous Coward]

I am assuming that you must know in fact Duncan3, that Cisco sued Huawei Technologies not long ago for stealing Cisco's intellectual property:

http://newsroom.cisco.com/dlls/corp_012303.html

I found this ironic and thought you must have already known this was the case. It's a interested read (the lawsuit). Apparently Huawei, had stolen a great deal of the IOS source code and used it as their own. From the url above:

"Cisco's complaint addresses the following claims:

* Copying of IOS source code: Cisco alleges that Huawei has copied portions of the Cisco IOS source code and included the technology in its operating system for its Quidway routers and switches. Huawei's operating system contains a number of text strings, file names, and bugs that are identical to those found in Cisco's IOS source code.

* Copying of Cisco's technical documentation: Cisco alleges that Huawei has copied extensively from Cisco's copyrighted technical documentation and included whole portions of Cisco's text in Huawei's user manuals for Quidway routers and switches.

* Copying of Command Line Interface: Cisco alleges that Huawei has copied Cisco's Command Line Interface (CLI) and corresponding screen displays. CLI, a key component of Cisco's copyrighted IOS software, is the user interface that enables users to communicate with the routers. Extensive portions of Cisco's CLI and help screens appear verbatim in Huawei's operating system for its Quidway routers and switches.

* Patent infringement: Cisco alleges that Huawei is infringing at least five Cisco patents related to proprietary routing protocols and has included these technologies in its Quidway routers and switches."

In what can only be described as cannabilistic efficiency, one of Huawei's motivating factors for copying the IOS commands was to make it so that customers who were already well versed in Cisco could make the transition over easily. I anticipate that as we move forward with Globilization, we will find more and more cases of Intellectual Piracy such as this. I hope Cisco has Huawei's lunch.

Re:Develop intellectual property, copy model #

[Anonymous Coward]

" You realise that the Chinese basically 0wn the US, and that intellectual "property" is just bits of paper at most?"

Intersting point. However, actual currency is just bits of paper as well. We are all aware that this also equates to utter power in a traditional sense. One of the "revolutionary" concepts to emerge from the information age was that we no longer need 100,000 square foot factories to generate value. That Intellectual Property itself was worth billions. I myself do not know if I agree with that or not. Conceptually, I think it is cool. However, there is a part of me that wonders if you are not indeed correct and the rest of the world will in fact say just that..."fuck that".

However, again looking back on the made in England or the US concept, we know that neither nation can compete with Korea in terms of producing goods for a low cost. Much like IT and India. The US can't compete in terms of price. It can only compete in terms of innovation. We are entering a era where those who think of it first and develop it first will win and the playing field is a bit more equal than it has been in the past.

So perhaps the man in the West is not the idiot you imagine. But rather, a person who knows he can't compete in the traditional sense, as the cost of living in the West is much higher than anywhere else. The West has no choice but to create a "new wheel". You will never see the West become a land of just ideas alone. I think what the West hopes, is that it will be the first, build it first, sell it to the rest of the world, let the rest of the world start to build it for less and compete, buy the product back from these other countries at less and do it again.

wow!

[adeydas]

look ma, more spam from china...

Re:wow!

[PhraudulentOne]

Naw, the Americans still piss off the world the most in That Department

One Thing China Needs to Develop and Rollout

[Anonymous Coward]

Freedom for its citizens.

I'm glad China is catching up in technology to the rest of the world, but the government still hasn't caught up with the rest of the civilized world in political, religious, economic freedom.

Re:One Thing China Needs to Develop and Rollout

[Anonymous Coward]

I wish Americans would roll out some Shut The Fuck UP, we don't care about your definition of "Freedom" which means bowing down to Jebus, gender descrimination, persecution of muslims, illegal wars of aggression, becoming obese pigs and watching propoganda TV like Fox.

How come America has only 1/3 of the population of China yet has TWICE as many people in prison?!

Is that your idea of Freedom? A prison state were blacks and latinos provide cheap prison labor for companies too lazy to outsource like a decent capitalist? Maybe if you stop trying to conquer other countries like Vietnam and Iraq and free some of your millions of prisoners we'll give a shit about your "Freedom".

Re:One Thing China Needs to Develop and Rollout

[Anonymous Coward]

Umm.. I'm not American, jackass. What does your US-bashing comment have to do with China?

Re:One Thing China Needs to Develop and Rollout

[Anonymous Coward]

fuck off you troll. I am Chinese and hate it when I hear this stuff, you patronising bastards.

yes China isn't perfect, but I'd hate to see things turn out like Russia. and the US just makes me sick.

Re:One Thing China Needs to Develop and Rollout

[Anonymous Coward]

Because 90% of ignorant crap like yours comes out of some American mouth. (Don't lie, you know you're an American. It's pretty obvious.)

Re:One Thing China Needs to Develop and Rollout

[Anonymous Coward]

Yeah, the US is so inefficient at executions. All those expensive legal and medical procedings! It should be more like China where you pay for the bullet that will kill you.

Re:One Thing China Needs to Develop and Rollout

[iamacat]

Seriously, what use is a high performance router if you are going to have a firewall that does extensive filtering, blocking and logging? Or a large number of IP addresses if private citizens are not allowed to run servers?

Re:One Thing China Needs to Develop and Rollout

[Anonymous Coward]

yes the US goes to a lot of trouble to make sure it never executes anyone who's white or wealthy.

Re:One Thing China Needs to Develop and Rollout

[PhraudulentOne]

Oh I dunno... telephone, and TV maybe? All the bandwidth for cellular telephones and the video/data they transmit, all the medical data for hospitals, all the data/research for universities/military etc etc etc etc... basically the same as in America.

Re:One Thing China Needs to Develop and Rollout

[Anonymous Coward]

Hey, why do Chinese police patrol in groups of 3?

Because they've got one who can read, one who can write, and a third to keep an eye on those other two "dangerous intellectuals"

lolol

Re:One Thing China Needs to Develop and Rollout

[Anonymous Coward]

Hey, wait a minute, wasn't this joke about POLISH policemen?

Re:One Thing China Needs to Develop and Rollout

[Anonymous Coward]

Yeah, but the Chinese are the last ethnic group that it's still ok to be racist against so they had to change it.

Re:One Thing China Needs to Develop and Rollout

[Anonymous Coward]

> ... if private citizens are not allowed to run servers?

You have evidence of this? I'd be interested.

I live in Beijing and had assumed that the problem was due to lack of routable IP addresses (hence ISPs, by default, put everyone on a 10.X network), rather than something deliberate.

Actually, because I have such heavy net usage, my ISP (BlueWave) is currently trying to charge me a business rate[1] (since they actually think I am a business). I am faily sure that, if you pay enough money (going rate is about 900RMB/month, IINM), you can get a routable IP address and run your own server w/o any problem.

I could be wrong - and I don't intend to find out, since 900rmb/month is actually quite a lot of money here - but don't underestimate greed.

[1] Business rate is about 650RMB/month.

Re:One Thing China Needs to Develop and Rollout

[iamacat]

Well, China requires website/IM operators and owners of Internet Cafes to self-censor their contents, monitor discussions and report people who mention certain topics to the authorities. This will not be feasable if a million of individuals run their own little servers. People will be able to have forbidden discussions using someone's obscure personal blog script with no relalistic chance of being caught.

Now, I don't know if currently there is a regulation that bans an individual from having a routable address. But if enough people do, one of them will cause a problem sooner or later and then there will be a crackdown.

Re:One Thing China Needs to Develop and Rollout

[Anonymous Coward]

You have no clue about US, though you probaly live here. Prison labor is not widely used in USA to produce things for general consumption, and it is paid and had extreamly low productivity.

I wonder how thay tested it?

[CdBee]

The network operates between 10gb and 40gb a second... with current hard-disk technology it must have been a challenge to collate enough equipment at each end of the link to generate that much bandwidth without bottle-necking.

Do network speed tests rely on clusters of machines?

Re:I wonder how thay tested it?

[imsabbel]

just use more clients... or /dev/random as source... or just sends the same 2GB again and again from RAM...

Re:I wonder how thay tested it?

[Anonymous Coward]

If you have an algorithm at one end spit out data, you can check it at the other end, all without storing more than a few megs at either end in buffers. Since you'd probably generate a data set stored on a hard disk in a similar manner, you're really doing the same thing but without the bottleneck. 40GB is still a lot for one machine to generate, but this is a backbone and probably has a small network on either end feeding it (really wouldn't be too complete a test for a massive router to be handling a link where a switch or a cross cable would do just as well)

Re:I wonder how thay tested it?

[networkBoy]

No they rely on things like this:
http://www.spirentcom.com/analysis/product_line.cf m?pl=33&wt=2
and this:
http://www.ixiacom.com/products/chassis/ch_display .php?skey=ch_1600t_400t_100

I used one of these to demonstrate to the IT department of my megacorp exactally why my networking lab needed it's own isolated subnet on its own Cat6K, and its own servers.
Once I started pumping out thousands of frames per second of random IP and MAC addresses their routers started dying under the loads.
I got everything I asked for :-)
-nB

Re:I wonder how thay tested it?

[Enrico Pulatzo]

Remember, GB is 8*Gb. So if you have 8GB of RAM, you can easily saturate a 40Gb line.

Re:I wonder how thay tested it?

[networkBoy]

I call BS.
What counts is your ability to put that data on the line. This is something no PC and exceptionally few server class machines can do.
With the advent of PCIe we are beginning to see PC's that conceivably could saturate a gig link, though even then they would have trouble.
-nB

Re:I wonder how thay tested it?

[loyukfai]

When there's no compression involved, maybe you don't have to actually send meaningful data to test the bandwidth?

Remind me of flood ping.

Re:I wonder how thay tested it?

[PornMaster]

Apparently, YOU HAVE NO IDEA WHAT YOU'RE TALKING ABOUT.

The "Internet2 speed record" had Dell boxes running NetBSD pushing 4Gbps for an hour with no packet loss.

...and you call yourself networkBoy.

Re:I wonder how thay tested it?

[networkBoy]

Let me quote myself:
"This is something no PC and exceptionally few server class machines can do."
I think I have your statement covered.
I know what I'm talking about, I also know that the standard way to test a router is with the test tools I outline previously, not a group of PCs.
but hey, you're the one with the respectable handle :P
-nB

Re:I wonder how thay tested it?

[PornMaster]

Did you see the specs of the PCs they used?

I know that load generators are used to throw bits on the wire for network testing, but you don't have anything covered.

Re:I wonder how thay tested it?

[networkBoy]

I'd love to see the specs.
Show me one PC that can source 4Gbps off of it's I/O bus. That's faster than a single PCIe lane. Desktop boards supporting faster, multi-lane PCIe are only now coming to market. There aren't even many NICs that can support over 1Gbps. Myrinet only supports 2 gig, Infiniband supports 10Gig and in theory could support 40 gig. I suspect that the machine you are talking about is not a desktop class machine.
Load generators are the accepted standard unit of speed measurement. Whether or not you want to accept it, using a PC is for publicty, not testing.
Have it your way if you want though, I really don't care.
-nB

Re:I wonder how thay tested it?

[Alien Being]

Right, the PC couldn't go any faster than 4Gb/s. We're talking about 40Gb/s, no?

Re:I wonder how thay tested it?

[Anonymous Coward]

you, my friend, are an idiot. 1Gbit NICs do not saturate PCI. 10Gbit NICs do not saturate PCIe.

Re:I wonder how thay tested it?

[PornMaster]

I know that this is Slashdot, and nobody RTFAs, but I linked to the page with the specs.

Sender:
Dell 2650, with one single Intel Xeon 2.0 GHz CPU and 1024 Mbytes of RAM
Receiver:
Dell Precision 650, with one single Intel Xeon 2.8 GHz CPU and 512 Mbytes of RAM. NOTE that this host only has a 100 MHz PCI-X bus(!)
Network interfaces (both sender and receiver): Intel® PRO/10GbE LR

Re:I wonder how thay tested it?

[PornMaster]

Yes, but networkBoy was saying that no PCs could pump out a gigabit/sec to the wire.

Re:I wonder how thay tested it?

[Anonymous Coward]

Apparently, YOU HAVE NO IDEA WHAT YOU'RE TALKING ABOUT.

You fucking douche-bag. You didn't even bother to read your own article:

Observation:
We noted that it is the PC hardware (excluding the Intel PRO/10GbE network adapter) that is the limiting factor in our setup. The operating system, the network adapter, as well as the network itself, including the routers, are capable of handling more traffic than this, but the PCI-X bus and the memory bandwith in the end hosts are currently the bottlenecks.

Re:I wonder how thay tested it?

[Alien Being]

Ah, so he did.

Re:I wonder how thay tested it?

[peachpuff]

According to the specs you linked, they used server-grade Intel(R) PRO/10GbE LR NICs which cost more than a whole PC. They point out that one of the machines "only has a 100 MHz PCI-X bus(!)" but that's a lot faster than whatever is on your desktop, and it comes on a server-grade motherboard (see here under "Will new PCI-X cards be compatible in conventional PCI based systems?").

These guys called the machines PCs, but they obviously spent a big wad of cash on server-grade I/O busses. The result:

"[T]he PCI-X bus and the memory bandwith in the end hosts are currently the bottlenecks."

I'd say networkBoy has some idea what he's talking about.

Think about it for a second. When someone says "no PC and exceptionally few server class machines" can do something, are you going to disprove them by pointing to the world record holders?

Important Questions...

[Anonymous Coward]

never mind the blah blah blah reports.

How will this effect BitTorrent and P2P apps in general?
Will it make it more difficult for the self-appointed "copyright police" MPAA/RIAA/BSA scumbags?
Will this make it easier for me to download everything I want, for nothing?

One thing I like

[bert.cl]

From the CNet article:

Some experts have predicted that once China has embraced IPv6, Western countries that wish to do business with Asia will have to upgrade their own networks.

There is actually some truth in this, and might increase the accepetance rate. Same thing is happening to governments using OOo file formats is all, but at a smaller scale.

However, the other article said that it is backward compatible with ipv4, are they using some kind of NAT then, or is it just backward compatible in the sense that the Chinese network can read of ipv4 networks.

Another critique is that, whilst this network uses ipv6, it is mainly used to connect university networks, therefore, business won't be as much pushed to adopt ipv6, hence the article...

Re:One thing I like

[LiquidCoooled]

I suppose you could do some kind of hash from ip6 down to ip4.
It may infact make the internet a bit more random and fun again ;)

Re:One thing I like

[St. Arbirix]

However, the other article said that it is backward compatible with ipv4, are they using some kind of NAT then, or is it just backward compatible in the sense that the Chinese network can read of ipv4 networks.

yeah, that'll translate well...

Chinese guy: let's browse over to Slashdot...
His computer: Hey 66.35.250.150, I'm FEDC:BA98:7654:3210:FEDC:BA98:7654:3210 and I want all your base to belong to me. Or maybe just you're index.html.
Slashdot server: WTF? What's all that "FEDC" gobbly-gook supposed to mean? Don't you try to set us up the bomb by giving us 128 bits. We only accept 32! We're not gonna even try to respond. Fucking cats.

Re:One thing I like

[dryeo]

However, the other article said that it is backward compatible with ipv4, are they using some kind of NAT then, or is it just backward compatible in the sense that the Chinese network can read of ipv4 networks.


IIRC the way it should work is slashdot.org (66.35.250.150) becomes 0:0:0:0.66.35.250.150 which tells the ipv6 router to use ipv4. After upgrading to ipv6 slashdots ip is now 0:0:0:FFFF.66.35.250.150
which means that slashdot can use ipv6. Eventually slashdot would get its own ipv6 block and stop using ipv4. Unluckily it seems ipv6 is never going to be totally implemented

I think that...

[wolf31o2]

I really believe that this is a good thing. Many people are not embracing IPv6 due to lack of a high-profile rollout showing its feasability. Also, much of the software out there does not take advantage of IPv6. Having such a large number of people using IPv6 will persuade a few more people to start coding their software capable of using IPv6 addressing.

I really look forward to the day when I can (once again) have end-to-end connectivity with peers. The proliferation of NAT devices truly has changed the face of the Internet from a large peer-to-peer network with content at every corner, to a client-server model where content is only served by those with enough capital.

This is readily apparent in the draconian acceptable useage policies of most providers.

I *want* to be able to connect to any of my home machines from work, and vice-versa (firewall permitting). I would *love* to have my own block of portable address space for me to do with as I please.

I simply can't wait for this to catch on in more places. I encourage all of you to look into IPv6 and see how much added benefit you could get from having a near-unexhaustable pool of addresses available.

Re:I think that...

[jessecurry]

I *want* to be able to connect to any of my home machines from work, and vice-versa (firewall permitting). I would *love* to have my own block of portable address space for me to do with as I please.

I already do all of this, I don't see why you wouldn't be able to, it just requires that you correctly setup your router at home and know your ip address. I use dyndns with my router and have each machine setup to be accessible from a different port number.

Re:I think that...

[Anonymous Coward]

I *want* to be able to connect to any of my home machines from work, and vice-versa (firewall permitting).

So fucking do it dumbass. What does that have to do with IPv6?

Re:I think that...

[ctime]

You know just as well if everyone on the planet had their own dedicated IP space, the number of trojans, worms, and other malicious code that uses IP 'sprays' to find hosts would spiral out of control.. I don't think anyone realizes how many PC's are effectively firewalled and safe thanks to the NAT routers you think we should abandoned. Even if we did have IPv6 available at home, no business with enough sense to rub together would give every end user a block of IP's, routing of their own IP's (block), nor would they unblock 'malicious' ports and known common ports at the CPE level (cable or DSL modem). The current market dictates that services should be can on dedicated _servers_. IPv6 is only going to be realized as your thinking suggests when programs which listen on ports become secure..which may never happen.

Re:I think that...

[Tony Hoyle]

Not true.. it actually becomes unfeasable to find machines with random IPs.

If you have a /48 or a /64, which is likely, then the rest of the address is derived from your mac address... unless you can actually randomly guess that then 'random' hunting just isn't going to work.

Re:I think that...

[Anonymous Coward]

I really believe that this is a good thing. Many people are not embracing IPv6 due to lack of a high-profile rollout showing its feasability.

Many people are also not building gigantic football stadiums made out of cotton candy due to lack of a high-profile rollout showing its feasability. But just because someone does it doesn't mean you will get more gigantic cotton-candy stadiums, even though it does solve the shortage of cotton-candy at football games.

Also, much of the software out there does not take advantage of IPv6. Having such a large number of people using IPv6 will persuade a few more people to start coding their software capable of using IPv6 addressing.

Why should it. All the good web sites are on IPv4 (or IPv4 along with IPv6 in a few cases). For instance slashdot is still on IPv4. So why would I need IPv6? In fact I regularly remove IPv6 support from all my software. My ISP doesn't even support IPv6.

I really look forward to the day when I can (once again) have end-to-end connectivity with peers.

I don't. I don't want any AOL customers to have direct internet connections for instance.

The proliferation of NAT devices truly has changed the face of the Internet from a large peer-to-peer network with content at every corner, to a client-server model where content is only served by those with enough capital.

Demonstrate how IPv6 will solve this problem.

This is readily apparent in the draconian acceptable useage policies of most providers.

My ISP gives me both public (non-NAT) address AND a draconian AUP. Demonstrate how IPv6 will solve this problem.

I *want* to be able to connect to any of my home machines from work, and vice-versa (firewall permitting).

Use port forwarding if you have less than roughly 60,000 machines. It works for me.

I would *love* to have my own block of portable address space for me to do with as I please.

Try 10.*.*.*, I hear that's available.

I simply can't wait for this to catch on in more places. I encourage all of you to look into IPv6 and see how much added benefit you could get from having a near-unexhaustable pool of addresses available.

I did look into IPv6. There are some nice features but on balance it seems like a total waste of time. I'm sorry to hear that you used up all the 10.*.*.* addresses on your LAN, you must have a lot of machines.

Re:I think that...

[Jeff DeMaagd]

I *want* to be able to connect to any of my home machines from work, and vice-versa (firewall permitting). I would *love* to have my own block of portable address space for me to do with as I please.

IPs were never meant to be portable. Making it portable really messes up routing. This is why you set up DNS so you can name each device. I have a DHCP server that gives out IPs based on MAC addresses so all I have to remember is a name, not a long number (IPv6 numbers are a lot longer too).

Re:I think that...

[Anonymous Coward]

It's easy to map the space of all Linksys MAC addresses for instance. MAC address doesn't give you any security.

Re:I think that...

[loyukfai]

I agree that using a NAT is a pain if you need direct P2P connectivity, but OTOH, it's also useful as it basically works like a one-way firewall so that outsiders won't be able to get into your network so easily. For once, I didn't have to worry about those Windows RPC worms for my home network. In that way, it's kind of useful. But then, there are many more ways to infect a private network.

Re:I think that...

[ctime]

Security through obscurity? I'm pretty sure thats what you just described.

Re:I think that...

[Anonymous Coward]

This is readily apparent in the draconian acceptable useage policies of most providers.

I don't think a lack of addresses is what keeps service providers from allowing all kinds of services to be run from residential access. The math that makes their business work figures for downloads to be greater in volume that uploads by a rather large factor (usually true), and for sustained utilization to be rather lower than peak utlization (you aren't maxing out your connection 75% of the time with a browser; you may well with a server). The reason that residential service is as cheap and accessable as it is is that it is tailored for use as a client.

Re:I think that...

[Anonymous Coward]

I strongly suggest you actually learn about networking. as from your statements I see that you only know a very VERY tiny bit to be dangerous and a pain in the ass to those that really know.

you can do all of that right now, and anyone that thinks that ipv6 will instantly compell your ISP to give you 900 IP addresses for free is a complete fool. right now with your cablemodem you can get 8 IP addresses, or how about more cablemodems?? or better yet get yourself a T1 and router and build it yourself.

now Let's think about what you are asking for. you want a multiple IP address router/firewall. Do you know how firewalls work? they do not act transparent like a router. so you can not have one of them to protect multiple destination IP addresses... so now if you have 4 pc's at home you need 4 firewalls.

please take some classes on basic networking cince you know nothing about netowrking, tcp/ip or netwporking hardware and servinces at all.

Re:I think that...

[PhraudulentOne]

I agree, I can't wait for IPv6. We are rolling out our new 10Gbit network in the spring and once we start doing video, we will probably do IPv6 for all the set-top boxes as well as the streaming servers. That way we can have a totally closed IPv6 network to start playing around. Foundry makes the NetIron 40G that does IPv6 at wirespeed right now and it's backplane is 40Gbs so its ready to go when we want to increase capacity yet again. Also, I run the IP network for an ISP and I have our DSL network set up so that people can have a non-routable IP (DHCP 10.x.x.x) when they plug in, or if they need to do a voice chat etc, they can do PPPoE for a real IP. I really would like to just assign real IPs to everyone, but as you all know, IPv4 addresses are running low.

Re:I think that...

[loyukfai]

I agree using a NAT is a pain if one needs direct P2P connectivity, but OTOH, it also gives you a basic one-way firewall so that outsiders won't be able to get in so easily.

For example, if a Windows box is behind a NAT, the chance of getting infected by a new RPC bug drops significantly.

In that sense, it's useful.

But then, there are so many more ways to get into a private network (Such as worms propagate through browser bugs...), and a basic NAT is not a replacement for those who need two-way access control.

Re:I think that...

[Anonymous Coward]

Uhh yes, and what's wrong with that? Guess what SSH, PGP, SSL, and every single encryption standard we've come up with to date have in common? They all use security through obscurity. If you don't believe me, then you should stop "obscuring" all your private keys and post them publically. You might want to stop "obscuring" your credit card information and social security number as well.

You can use all the cliched buzzwords you don't understand all you like, but it doesn't change the fact that if you have a 64-bit address space, it takes a long time to find the one address in there you're looking for, if you're looking for it randomly.

Re:I think that...

[ctime]

Actually it's a 128bit addresses space, but I'm not an expert. What I do know is that when ARIN or whomever starts to really hand out addresses and they become hugely routable on the internet now, It's not going to be that difficuilt at all..they are likely to assign address space contigously for one, secondly most of the IPv6 space "prefixes" will be availabe on routers making the 'spray' range for certain blocks less than /32 or /48.

There's more than one way to do this, my point is that having every device, cell phone, blow-up doll online isn't a good thing. It just leaves everyone open to attack.

Re:I think that...

[rekoil]

True, but what you're doing is working around a fundamental weakness of both IPv4 (the relative scarcity of addresses) and your ISP's policy (not willing to allocate you a static IP for each machine, partly due to #1). With IPv6, both issues are moot.

Re:I think that...

[GoofyBoy]

>Guess what SSH, PGP, SSL, and every single encryption standard we've come up with to date have in common? They all use security through obscurity. If you don't believe me, then you should stop "obscuring" all your private keys and post them publically.

Thats not "security through obsecurity". Its if others didn't know how SSH, PGP, SSL worked and relied on that to provide a level of security. The fact that you keep a key secret ok.

Re:I think that...

[Anonymous Coward]

Security through obscurity means the *algorithm* is only secure when kept secret.

If you have an algorithm that depends on a key, then yes you have to keep the key secret. I'll leave it up to you to decide if an IP address is secret.

it takes a long time to find the one address in there you're looking for, if you're looking for it randomly.

Yeah, that's why we have DNS! Seriously, it's the "randomly" part that you need to focus on. Is it true that all IPv6 addresses are randomly distributed?

Re:I think that...

[timoteo21]

Evidentally, there are a fair number of hosts on the Internet with public IP addresses that are running "programs which listen on ports." Otherwise, there would be no communication at all. So, what is it about these "server" machines that make them more secure than "client" machines? Why can those practices not be implemented on client machines?

Re:I think that...

[Anonymous Coward]

... so now if you have 4 pc's at home you need 4 firewalls.

A firewall is a piece of software that blocks certain packets. It can thus work for multiple systems on one network. You are an idiot.

Re:I think that...

[Anonymous Coward]

It's not a "weakness" of IPv4, it's a way to use the protocol within its specification without breaking anything. IPv6 breaks *everything* because it's a DIFFERENT PROTOCOL.

My ISP is willing to allocate a static IP for all my machines. They have a class A. But I don't *need* more than two. Even if I could put all my internal machines on the internet directly, they would all be firewalled anyway, so I certainly don't care about all these IP addresses.

In fact big consumer ISPs could N:1 NAT *all* their customers. I bet this will happen before they even start talking about IPv6.

Re:I think that...

[Yebyen]

Bzzzt... There is actually an addressing protocol built into IPv6 known as "Mobile IPv6" which allows a machine on the home network, listening for packets addressed to one of your "mobile IP's" will respond with a packet that tells the sender where to find that computer right now, a "care-of address."

This all requires the mobile computer to report back periodically with status updates on its current "care-of IP", and that's all. This is not a tunnel, it's real mobile IP, built into the protocol. I believe this feature is also available for IPv4 through use of some extension to the protocol.

Re:I think that...

[asdfghjklqwertyuiop]

I don't think anyone realizes how many PC's are effectively firewalled and safe thanks to the NAT routers you think we should abandoned.

NAT has nothing to do with firewalling. NAT does not drop any packets whatsoever - your firewall does. With IPv6 noone is proposing that we stop using firewalls, just that we stop using NAT. Nobody's network will be one bit less safe by dropping the NAT and keeping the firewall.

Re:I think that...

[asdfghjklqwertyuiop]

I really look forward to the day when I can (once again) have end-to-end connectivity with peers.

I don't. I don't want any AOL customers to have direct internet connections for instance.

Then keep your firewall in place. You do have one, don't you? Noone is proposing we drop firewalls with IPv6, just NAT.

Use port forwarding if you have less than roughly 60,000 machines. It works for me.

You don't use SSH or SSL or any other protocol that does host-based authentication? If not, and if you don't mind memorizing what 60,000 numeric port numbers are for since you can't use DNS, then yeah, I guess it does work for you... but not many other people.

I would *love* to have my own block of portable address space for me to do with as I please.

Try 10.*.*.*, I hear that's available.

But that's not portable - you don't actually "port" 10/8 to another ISP because that network doesn't even exist as far as the ISP is concerned.

Re:I think that...

[asdfghjklqwertyuiop]

I agree that using a NAT is a pain if you need direct P2P connectivity, but OTOH, it's also useful as it basically works like a one-way firewall so that outsiders won't be able to get into your network so easily.

Actually NAT doesn't act like a firewall at all. Read the RFCs sometime, it doesn't actually drop any packets, it simply re-writes certain ones.

Re:I think that...

[asdfghjklqwertyuiop]

now Let's think about what you are asking for. you want a multiple IP address router/firewall. Do you know how firewalls work? they do not act transparent like a router. so you can not have one of them to protect multiple destination IP addresses... so now if you have 4 pc's at home you need 4 firewalls.

Wow... if the parent poster knows a "VERY tiny bit" about networking, you know absolutely nothing at all.

Re:I think that...

[tabrisnet]

Both true and false.

NAT rewrites outgoing packets and maintains a connection tracking table for outgoing packets so that incoming packets may be routed to the correct internal host.

However, this also means that packets coming in that do not match an entry in the conntrack table will simply be... ignored. aka dropped. After all, short of you setting up a default host for random packets to go to, a NAT device does not know what to do with random packets.

Re:I think that...

[asdfghjklqwertyuiop]

NAT rewrites outgoing packets and maintains a connection tracking table for outgoing packets so that incoming packets may be routed to the correct internal host.

However, this also means that packets coming in that do not match an entry in the conntrack table will simply be... ignored. aka dropped. After all, short of you setting up a default host for random packets to go to, a NAT device does not know what to do with random packets.

No, they won't be dropped. Random packets ariving will simply be routed normally. If a packet arrives with a destination address matching your internal network, it will be routed right in. Anything else will follow your default route out.

Try it sometime - set up a capable router someitme with no filtering rules and only NAT. You can set up routes on the outside to the inside and that router will pass them right through.

Re:I think that...

[loyukfai]

Are we talking about the NAT as described in RFC 1631?

AFAIK (please correct if wrong), internal hosts behind a NAT uses private addresses (and that's the whole point of using a NAT...?), and the only device within the internal network including the NAT who has a REAL IP is the NAT device.

Therefore, how could external packets "routed" to internal hosts? As private IP won't get transferred at all on the Net.

Re:I think that...

[loyukfai]

According to RFC 3022:

Traditional NAT can be viewed as providing a privacy mechanism as sessions are uni-directional from private hosts and the actual addresses of the private hosts are not visible to external hosts.

Re:I think that...

[asdfghjklqwertyuiop]

According to RFC 3022:

Traditional NAT can be viewed as providing a privacy mechanism as sessions are uni-directional from private hosts and the actual addresses of the private hosts are not visible to external hosts.

That is just a conceptual view of how the usual network using Traditional NAT works - sessions are going one way, and the private addresses are not visible to outside hosts. That doesn't specify that NAT should drop connections that are going they other way. Nothing in any of the NAT RFCs says to do so. Search for the words drop, reject, deny, filter, etc in any of the NAT RFCs.

Not only that, but if you look at RFC2663, section 9.0, you'll see:

NAT devices, when combined with ALGs, can ensure that the datagrams
injected into Internet have no private addresses in headers or
payload. Applications that do not meet these requirements may be
dropped using firewall filters. For this reason, it is not uncommon
to find NAT, ALG and firewall functions co-exist to provide security
at the borders of a private network.

Re:I think that...

[asdfghjklqwertyuiop]

AFAIK (please correct if wrong), internal hosts behind a NAT uses private addresses (and that's the whole point of using a NAT...?), and the only device within the internal network including the NAT who has a REAL IP is the NAT device.

Therefore, how could external packets "routed" to internal hosts? As private IP won't get transferred at all on the Net.

Your own router will route them to internal hosts unless it has filtering rules to tell it to do otherwise. All the attacker has to do is get the packets to your router. There are various ways of doing that - your ISP could be compromised, or if you happen to have brodband which places nearby customers on one logical subnet, any one of those customers machines could be compromised and used to send such packets into your router (which will then happily pass them to your internal host).

Re:I think that...

[loyukfai]

Your own router will route them to internal hosts unless it has filtering rules to tell it to do otherwise.

I don't get this, since the hosts behind the NAT are using private IPs, how could the NAT knows which host to send the packets to?

Say, someone initiate a TCP connection to port 80 to the NAT host, which has a real IP of 123.123.123.123, when the NAT receives the packets, how could it know which internal host to forward the packets to?

Maybe it's because I'm too get used to Linux's IP Masquerade, but I suppose a NAT maintains a "database" of connections initiated from INSIDE the NAT, when packets from the OUTSIDE arrives, it matches against the database to see which host the packets should then be forwarded to. As the way implemented in the Netfilter's stateful firewall.

Therefore, when an outside initiated connection comes to the NAT at an arbitrary port, and the NAT found that there are no records of connections with regards to that, it doesn't know where to forward the packets to (I suppose it won't randomly forward packets to internal hosts...), so the packets will be rejected or dropped.

Or maybe, this is only ONE type of the NAT and oops... There are static NATs (just Googled it...)?

Re:I think that...

[asdfghjklqwertyuiop]

I don't get this, since the hosts behind the NAT are using private IPs, how could the NAT knows which host to send the packets to?

Say, someone initiate a TCP connection to port 80 to the NAT host, which has a real IP of 123.123.123.123, when the NAT receives the packets, how could it know which internal host to forward the packets to? ...
when an outside initiated connection comes to the NAT at an arbitrary port, and the NAT found that there are no records of connections with regards to that, it doesn't know where to forward the packets to (I suppose it won't randomly forward packets to internal hosts...), so the packets will be rejected or dropped.

I'm not talking about incoming packets addressed to the router itself (123.123.123.123), I'm talking about incoming packets addressed to the private addresses (10/8, 192.168/16, 172.16/12, whatever you use on the inside).

If a packet arrives on the outside interface with an inside destination address, your NAT doesn't come into play at all because your NAT rules only alter outbound packets (departing on the outside interface) and packets addressed to the firewall on certain ports (ie, port forwards).

You're right that NAT does keep a connection state table for translating inbound packets related to established connections, but again, all that stuff doesn't come into play for the situation I'm talking about.

Re:I think that...

[loyukfai]

I'm not talking about incoming packets addressed to the router itself (123.123.123.123), I'm talking about incoming packets addressed to the private addresses (10/8, 192.168/16, 172.16/12, whatever you use on the inside).

But wait... Aren't private IP addresses non-routable on the real Net? Then how could someone, outside the private network, contact a host inside the private network?

Say, if you're running a private network with 10/8 and a host with the address 10.10.10.10, I shouldn't be able to "ping" you at that address, the packets won't get through the Net, right...?

I'm so confusing now... @_@

Re:I think that...

[asdfghjklqwertyuiop]

But wait... Aren't private IP addresses non-routable on the real Net? Then how could someone, outside the private network, contact a host inside the private network?

You're right, they aren't routable for the most part, but certain people can make them routable, at least on the network near you on the outside. See my other post. You can't rely on the non-routability of those addresses to maintain the security of your network.

Re:I think that...

[loyukfai]

I see... I suppose a stateful firewall like Netfilter configured correctly can prevent this, right?

Anyway, thanks alot, I think I get a better view on NAT now. :)

Re:I think that...

[asdfghjklqwertyuiop]

I see... I suppose a stateful firewall like Netfilter configured correctly can prevent this, right?

Yeah. Well, netfilter does nat and filtering. Just make sure you have some stuff in the filter table as well as nat.

Anyway, thanks alot, I think I get a better view on NAT now. :)

No problem.

seems like I've heard of CERN before

[garyisabusyguy]

According to the CNET article, CERN stands for China Education and Research Network... What about History of CERN? Oh well, I guess that there are advantages to living in a world without legacy systems or intellectual property...

Re:seems like I've heard of CERN before

[Anonymous Coward]

It's true, you'll find that China is a hotbed of innovation and entrepreneurship. Ditching IP and legacy systems in general is the best thing they've got going, but unfortunately other little problems like communism keep China struggling in other areas like rights/freedoms etc.

Why is parent modded troll? more like +2 insightful

Communism and the internet.

[DanielJosphXhan]

One has to wonder what vested interest China has in implementing new protocols, especially with a view to becoming a leader amongst world powers when it comes to the internet. Especially when one factors in the way information is controlled (alright, less and less, but still controlled) in China at the moment.

Isn't this self-defeating for a communist country as it exists now?

Re:Communism and the internet.

[quarkscat]

There is, actually, a dark side to the PRC's
adoption of IPv6. There will be no way for
any dissident to hide behind a NATed IPv4
address. Everyone will have their own static
IP address assigned to them, so there will
not be any anonimity to hide behind.

In the Soviet PRC, the Internet owns YOU!

Re:Communism and the internet.

[jay-be-em]

I think it's self-defeating for a totalitarian dictatorship.. For communism I don't really see the problem.

Re:Communism and the internet.

[loyukfai]

a view to becoming a leader amongst world powers when it comes to the internet

That doesn't do it? : )

To be serious, I think (With no hard data supporting the claim.) China's technology, especially in the academic institutions, is much more advanced than many think, and can actually utilize some of that.

Re:Communism and the internet.

[wheelbarrow]

I don't see much difference between totalitarian dictatorship and communism. Both can only be implemented through coercion and force. Why do you draw a distinction?

Re:Communism and the internet.

[jay-be-em]

Any non-trivial government can only be implemented through coercion and force. The most 'free' nations in the world _still_ need jails to enforce it's laws. As Tolstoy said 'Government is an association of men who do violence to the rest of us' (paraphrased, and where Tolstoy's violence is 'some people forcing others, under threat of suffering or death, to do what they do not want to do.) I don't really see a reason why communism requires a totalitarian dictatorship; it is true that most communist societies have had one but I'd argue that most aren't (or weren't) communist, they were/are more purely totalitarian than anything. Disclaimer: I am not a communist.

Re:Communism and the internet.

[leereyno]

"Self-defeating" as applied to a communist nation simply means continuing to embrace communism.

Re:Communism and the internet.

[leereyno]

The free nations of the world use jails to incarcerate criminals. Nations that are not free use jails to incarcerate dissidents.

Under a communist regime, the government is not answerable to the people. The political process is controlled by the party elites. The average citizen's only role in the process is to submit to the dictates of the party. To do otherwise means a short painful life in a gulag.

A report from CNN on gulags in North Korea

Non-trivial totalitarian governments can only be implemented through coercion and force. Democracies and republics can only be implemented, let alone preserved, through the consent of the governed.

Communism requires a totalitarian dictatorship because it is contrary to rational self interest. No human society is not going to willingly submit to a system where everyone enjoys the equal status of being a slave.

Communism is one of the great evils that came to plague the world in the 20th century, if not THE great evil. As bad as the Nazi's were, they've got nothing on communism.

Lee

Re:Communism and the internet.

[jay-be-em]

"The free nations of the world use jails to incarcerate criminals. Nations that are not free use jails to incarcerate dissidents." Um, yes. And they are criminals because of the government's definition of laws. The implementation of, for instance, the US government and legal system directly puts people in jail. I'm not saying this isn't a good thing, I'm just saying that enforcing any legal system which hands down punishments requires force. The rest of your post basically confuses the pseudo-communist dictatorships which have existed with communism.

Billions?

[Anonymous Coward]

From the news.com article
By increasing this to 128 bits, IPv6 provides billions more IP addresses

Billions? Try 3.4 dodecillion

Re:Billions?

[Anonymous Coward]

Wiki has it wrong. It is 340 undecillion.

Re:Billions?

[Anonymous Coward]

the reporter obviously didn't know there are larger numbers than 'billions'. 'Billions' should be big enough for anybody, right? after all, 'bi' is for 'big' ... erm ... nevermind

Re:Billions?

[Anonymous Coward]

IPv4 uses 32 bit addresses, split into 4 octets (of 8 bits each) eg: 192.168.1.1, so there are a theoretical maximum of 2^32 addresses (or 4294967296 in all). In every subnet, addresses with a last octet of 0 is for the network and addresses with a last octet of 255 are for broadcast, so not every address can be used for individual machines. IPv6 uses 128 bits for addressing. This means that there are 2^128 theoretical addresses (or 340282366920938463463374607431768211456 addresses in all). In IPv6, the Aggretageable Global Unicast address which begins with a 3 bit prefix of 001 will replace the IPv4 class A,B, and C addresses. There are no classes in IPv6, just eight 16-bit hexidecimal numbers (so it would look like 1D1EE7ED). The first 48 bits are for the public network. The next 16 bits are for the local site topology, and the last 64 bits are for the local interface ID. So you can have 2.8x10^14 sites(internet), each with 65536 local subnets, and each subnet can have 1.8x10^19 machines in it. Note that every local site can have more IP addresses than the entire public IPv4 internet has now.
* I would like to (re-thank) W. Richard Stevens and his landmark reference Unix Network Programming, Volume 1 -Networking APIs: Sockets and XTI for much of the valuable information I present here. Sincerely, Anonymous Coward esq.

this isn't ipv6 related

[Anonymous Coward]

you already can connect between home and work to your own block of ips.

just set up a vpn tunnel, and assign your 10.x.x.x addresses and set up routing through it.

if that's what you want, nothing is stopping you

Re:this isn't ipv6 related

[MightyMartian]

The problem with private address spaces is that they technically break the end-to-end structure of the Internet, not to mention a number of protocols. While most NAT routers now finally have helper apps to take care of protocols like FTP and IRC, it's still a pain in the a** at times.

However, the IP6 rollout is going to be an expensive process. It certainly hasn't gone at the pace that we were being told four or five years ago.

For myself, I've moved the company I work for away from some of their older hardware to Linux-based routers. This way we won't be shovelling money down Ci$co's throat, and the upgrade, at least at the head, will require nothing more than a reconfiguration.

Of course, there is our old Ci$co AS5200 dialup server. That may have to be put in an IP4 NAT space. :-(

Re:this isn't ipv6 related

[asdfghjklqwertyuiop]

you already can connect between home and work to your own block of ips.
just set up a vpn tunnel, and assign your 10.x.x.x addresses and set up routing through it.

And as you want to connect to more and more networks, you'll find you need to centralize allocation of network addresses, you'll run into portability and route table size issues, and you'll eventually run out of space in 10/8 to use, and at that point you realize you didn't solve the problem at all, you just duplicated it on a smaller scale.

Re:this isn't ipv6 related

[Anonymous Coward]

you should probably not be allowed anywhere near networking equipment, seeing as how you think Linux-based routers are somehow superior to Cisco's (nothing like telling the CEO the entire sales force won't be getting their e-mail because the "router" hard drive crashed) and the fact that you think Cisco's equipment (let's face it, they are the industry standard so even if you hate it and refuse to use it, you should still be pretty damn familiar with it.) doesn't support IPV6 (and you apparently aren't aware that it's supported it for five years)

What was it Einstein said? business without IT is lame, IT without business is blind... yeah Cisco's hardware/support is expensive. But that's totally fucking irrelevant if that's what's required to support the business needs. Some wacky home-grown Linux router is great till the thing crashes and it takes you 6 hours to get it back on line, or you get hit by a bus and no one else knows how the hell to support it.

Re:this isn't ipv6 related

[MightyMartian]

And you probably shouldn't be let anywhere near a monitor, as you seem to be incapable of reading.

I never said Cisco was inferior to Linux. We're a small outfit, and money spent to upgrade our existing *older* Cisco equipment to IP6 could be much better spent elsewhere. Linux does a damn good job on routing, and is a lot cheaper than Cisco.

You must be a Cisco employee, because Linux routing and iptables/netfilter are not unknowns. Cisco ain't the only equipment in the world, but it sure is among the most expensive.

The Question Is...

[ewanrg]

When will IPV6 support become important rather than just interesting? I think the CNet article partly addresses this - when the Asian markets make it a requirement.

On the other hand, it's still pretty easy to tunnel IPV4 through IPV6, so where is the incentive to upgrade going to be?

At least running Linux at home, that's one conversion worry I don't have :-)

---

My blog or yours?

Re:The Question Is...

[mabu]

We cannot switch to IPv6 until we've figured out a way to stop spam, or else things will get exponentially worse. This is a prerequisite.

Re:The Question Is...

[kinema]

I wasn't aware that there was an easy way to tunnel v4 over pure v6 nets. The only method I know of is the dual stack transition mentor (DSTM) which IIRC requires daemons not only at the v6 net's edge but on each of the v6 clients doing.

Last to market

[hey]

It helps to be last to market. They get those nice pebble bed nuclear reators, IPv6, no need to waste all the money with land lands just use the latest WiFi or cell phone tech, etc.

why, if there's no freedom?

[diegocgteleline.es]

If China government is trying to control what Chinese people can do on Internet...what's the point of having a high-performance router if they can't download pr0n movies? Linux distros?

Why the Chinese are using IPv6

[mabu]

..because they are running out of non-RBL'd IPv4 space from which to spam....

Plenty of bandwidth

[Anonymous Coward]

Yeah, there's plenty of bandwidth to spare on this network because only 12 people in China have computers and only 3 of them have internet access.

China should work on rolling out donkey-powered electronics next.

For those who claim China respects IP

[glrotate]

Hitachi GST sues Chinese disk drive maker

Reuters

Wednesday December 29, 4:59 PM
Hitachi GST sues Chinese disk drive maker
HONG KONG, Dec 29 (Reuters) - The hard disk drive manufacturing joint venture between Hitachi Ltd. and IBM said on Wednesday it has sued Chinese firm Magicstor Inc., saying it had made multiple patent infringements.

In the suit filed in United States District Court, Hitachi Global Storage Technologies seeks monetary damages and a permanent injunction barring Magicstor from making and selling the allegedly infringing products.

A spokeswoman at Magicstor, located in the interior Chinese city of Guiyang, had no immediate comment.

The suit names Magicstor, its Chinese parent company, GS Magic Inc. and California-based Riospring Inc., according to a statement released by Hitachi GST.

According to its Web site, GS Magicstor is a hard disk drive maker that was founded in 2002 "as the first small form factor manufacturer with its own intellectual property rights."

The filing of patent infringement lawsuits in the United States against Chinese firms has become a relatively common strategy by plaintiffs wary of using China's fledgling patent protection system.

Taiwan Semiconductor Manufacturing Co. Ltd. (TSMC) the world's biggest contract maker of semiconductor chips, is using the tactic in its lawsuit against Shanghai-based rival Semiconductor Manufacturing International Corp. (SMIC) .

Last year, Cisco Systems , the world's biggest maker of routers and switches used in telecoms networks, also used a U.S.-based lawsuit when it accused Huawei Technologies, China's largest telecoms equipment maker, of copyright infringement.

Re:For those who claim China respects IP

[loyukfai]

So...?

Minidrive maker Cornice slapped with another suit

If you want to claim the Chinese doesn't respect the US IP system as much as the US do, just pointing out a Chinese firm being sued doesn't seem very convincing to me...

Just my 2 cents.

P.S. Software piracy is probably more (Or much more...) serious in China (And many developing countries.), and China doesn't seem to have a good track record in holding up the US IP system, but the above article doesn't tell much IMO, US companies get sued on IP infringements all the time... Umm?

Not feasability, need.

[glrotate]

I *want* to be able to connect to any of my home machines from work, and vice-versa. NAT and port forwarding take care o this already. Most companies DON'T wan any machine to be publicly accesible.

I want to buy some of this stock

[gtrubetskoy]

China has developed and demonstrated its first high-performance network core router based on the next-generation Internet standard

China? Are they public yet? What's their ticker, I can't find it??

Re:I want to buy some of this stock

[ravenwing_np]

Want to buy stock in China? Purchase stock in Walmart, K-Mart, Sears, Best Buy, Old Navy/The Gap/Banana Republic or any other retail store you see in America.

tunnel

[ashpool7]

IP4 over IP6 tunnel. Set the IP4 gateways at the border, where the rest of the world is, only route IP6 inside.

easy way to determine what's outbound traffic without having to look at the destination.... that would probably be benificial to the chinese government

someone has to say it.

[ctime]

According to the article, half of the 'core' networking equipment was suppied by chinnese companties, of the two, one happened to be Huawei technolgies.

Lest we forget!

http://newsroom.cisco.com/dlls/corp_012303.html

One of my favorite quotes to be found on cisco's website:

Copying of IOS source code: Cisco alleges that Huawei has copied portions of the Cisco IOS source code and included the technology in its operating system for its Quidway routers and switches. Huawei's operating system contains a number of text strings, file names, and bugs that are identical to those found in Cisco's IOS source code.

Re:someone has to say it.

[Anonymous Coward]

cisco cant handle making ipv6 ready gear, so screw em when a smarter China team makes their crap better.

that's capitolism baby.

Content control?

[bckspc]

Has anyone heard about content control and surveillence technology built into all of this? I'd be very surprised if the government designed router and network did not have a mechanism to sniff packets and block or reroute email or Web traffic they find objectionable.

The CNET article itself is terrible.

[James Youngman]

I cannot believe there were so many errors in an article which is only 358 words long. What a bad piece of journalism. Only 81 words are devoted to the China new item, the rest ss background on IPv6. The IPv6 information is riddled with errors.

There is a rather better article on the subject of IPV6 adoption at InternetWeek, but that article is now four years old.

As for the specific information in the article,
"IPv6 provides billions more IP addresses" - I think the reporter is a bit confused about all these large numbers. IPv6 provides billions of TIMES more addresses. More even than that in fact; 2 to the power 128 is 79228162514264337593543950336 times greater than 2 to the power 32. (This calculation was brought to you by GNU bc)

"It was created and deployed in response to ... especially as Web use in Asia rises sharply." - The author has fallen for the post hoc ergo propter hoc fallacy. In any case, the beginning of the development of IPv6 occurred significantly before the extensive takeup of Internet technologies in Asia.

As other people have already mentioned (including in the reader comments below the article - I would have contributed but see no point in "registering" with CNET), goodness knows where the journalist got their figure of "257 nodes". They should perhaps take the time to either check their notes or cross-check the information their sources are giving them.

Something the author failed to point out is that it is not only Asian countries that have been working with IPV6. There has been significant piloting in most countries that make use of the Internet. This means that there are IPV6 over IPv4 tunneling facilities that work therse days, meaning that it is not necessary for countries up upgrade everything to IPv6 in order for their businesses to trade with China, no matter what the article implies.

Re:The CNET article itself is terrible.

[burns210]

"...meaning that it is not necessary for countries up upgrade everything to IPv6 in order for their businesses to trade with China, no matter what the article implies."

The IPv6 network was academic institutions only, from what I understood. How is this any different than the Internet2 that we (colleges, etc) have in the US?

Re:The CNET article itself is terrible.

[Tesla Tank]

I cannot believe there were so many errors in an article which is only 358 words long. What a bad piece of journalism. Only 81 words are devoted to the China new item, the rest ss background on IPv6. The IPv6 information is riddled with errors.

Is it customary to count the number of words in an article?

Re:The CNET article itself is terrible.

[James Youngman]

I cannot believe there were so many errors in an article which is only 358 words long. What a bad piece of journalism. Only 81 words are devoted to the China new item, the rest ss background on IPv6. The IPv6 information is riddled with errors.

Is it customary to count the number of words in an article?

It struck me as a very short article with a large number of errors. With "wc -w" it's easy to count the words. You didn't think I did it by hand, did you?

Another reason NOT to use IPv6.

[Anonymous Coward]

I don't want all these asian spammers sending me mail. So I will choose not to hook up to this network, if the option becomes available.

IPv6: the stuff dreams are made of.

No idea of how IPv6 works

[silas_moeckel]

OK I'm a network engineer been one for 15 years. IPv6 does not make customer address space portable, it does make it easier to "renumber" but in no way does it even help multi homing. So you IP's from your provider are no more portable actualy since the rules for getting IPv6 space are harder pretty much anybody withou an AS does not qualify and there are 16 bits of those half of them allready used. v6 only deals with multicast and IP space as it's big wins. Funny the telco's dont want Multicast to work and the IP space thing isn't hurting anybody yet you can get all the space you can justify and pay for.

BTW I can do what you described with NAT and with Public IP space (yes I have a public Class C in my home :) but most people dont qualify for a /19 and dont have 2.5k to buy the block.

37.25 GB/sec

[kevincw01]

320 billion bits per sec == 37.25 GB/sec. Seems low to me?

Re:37.25 GB/sec

[Anonymous Coward]

Not really. In fact, as a local technology it's quite good. For backbone technology it isn't that bad either. Compare:

10 Gbps 10G Ethernet (IEEE 802.3ae)

13.271 Gbps OC-255

40 Gbps OC-768

(OC stands for optical carrier). Note also that OC-768 is 1/8 as fast as the Chinese technology (8 bits of data per byte in ASCII). Go ahead, take a look at current network technology. 320Gb/s is hot technology. You can immitate 320 Gb/s with 8x40Gb/s routers, but you need 8 of them. In April, an internet2 speed record of 6.25Gb/s was set. The Chinese aren't sending data 11000 km, but 320Gb/s is more than 50 times as fast, and they are sending the data more than 214 km, so this is a new world speed record. Cisco has designed a 92TB/s router (the CRS-1), but their technology revolves around 40Gb/s routers per slot with a maximum of 1152 slots per shelf x 2shelves. If the Chinese built such a beast 320 Gb/s per slot with 1152 slots x 2 shelves, they would run at 737Tb/s. That would be enough to provide each person in China (1.1 billion) with a 670kb/s connection (all from the one switch, and all running to the max at the same time). So no, their technology isn't really that slow after all.

Re:37.25 GB/sec

[kevincw01]

good points.

IPv6 on Internet2

[Danathar]

Contrary to what many people know...there are MANY networks that are IPv6 enabled. Just not many IPv6 apps.

ALL of abiline (Internet2) is v6 enabled, just not all the way to clients.

Here is an up to date map of deployment of Ipv6 on I2.

http://www.abilene.iu.edu/images/v6.pdf

Re:IPv6 on Internet2

[barureddy]

I know when I at school at Vanderbilt (I2 enabled school) we get IPv6 addresses all the way down to our dorm rooms. I've had an IPv6 address for well over a year if not more. Never noticed until I installed gentoo about 2 years ago.

I'm interested that this did not make the news aswell. Internet 2 is what exactly the new Chinese network is trying to do. It must be the fact that
China, a technological underdog.

When is Slashdot going to do IPv6?

[Anonymous Coward]

So when is Slashdot going to accept IPv6 connections?

IPv6 is a good thing, but people won't usually change until there are sites operating with IPv6. Slashdot could lead the way. :)

Re:When is Slashdot going to do IPv6?

[b1scuit]

They tried, but on the second day everyone was screaming "Dupe! This was on yesterday!", so they took it down. :)

You're kinda slow aren't you?

[glrotate]

The point is that the Chinese government doesn't do anything about it. In the US you have the recourse of a legal system that respects IP.

Re:You're kinda slow aren't you?

[loyukfai]

Why would a government like to do something to protect someone else's broken system?

And I don't think the Chinese government is doing nothing about it, but if you want to put US standard on other countries, so be it.

Because it helps you track your citizens?

[xixax]

While I am not familar with IPV6 beyond the large increase in address space; IPV6 security features such as the Authentication Header might be a great way of making sure only nproperly documented citizens are allowed on the Internet. You may also be able to ensure that they do not connect to undesirable services such as anonymous proxies.

Xix.

Re:Because it helps you track your citizens?

[forfan]

Ok, have u ever been to China? or Do u understand Chinese? If not, just stop talking about "Freedom in China".

Re:Because it helps you track your citizens?

[xixax]

No, I have never been to China. However it has been demonstrated that the Chinese government has an interest in technology to control Internet access:
http://www.theregister.co.uk/2003/12/04/it_giants_ fingered_over_links/

On this basis, I'd expect the security provisions of IPV6 to be attractive (depeinding on what they let you do). Seems like a pretty logical conclusion to me.

Xix.

"Intellectual Property" vs National Interests

[MacDork]

Can you guess the winner? Did Germany pay the Wright Brothers royalties on their intellectual property? How about the USSR and the A bomb? India and AIDS drugs? The very notion that an idea can be owned by any one person or corporation is absurd. As for the alleged wholesale plagiarism, well... that's karma for you. It serves Cisco right for helping build the great firewall of China. I feel no pity for them.

china

[fudy]

They are comunists ! they can`t do nothing right! They are EVIL !

high perfomance filtering, blocking and logging

[sonictheboom]

maybe you need really high performance router if you are doing lots of filtering, blocking and logging ???

Article misses main benefits of IPv6

[SgtChaireBourne]

I cannot believe there were so many errors in an article which is only 358 words long. What a bad piece of journalism. Only 81 words are devoted to the China new item, the rest ss background on IPv6. The IPv6 information is riddled with errors

Probably some crap article from a few years back got stuck in the vertical file and keeps getting resurrected every time some journalist wants some background information on IPv6. I'd rather think that than say there is some agenda to keep people in the dark.

This and other articles neglect the main reasons to go with IPv6:

+ better security + simplified headers + quality of service + multi-casting + improved routing + geographically mobile IP numbers + autoconfiguration Firewalls can be done with either IPv4 or IPv6, no big deal there. Oh, and NAT != firewall. It can't be that after all this time the so-called journalists can't get their teeny minds around all the above.

China's on a roll. This is good. But the article sucks, she can write better.

Blog on Internet in China

[fatblock]

Hi all, I'm blogging news on the development of the internet in China. I hope that it's useful and interesting to some of you. http://china-netinvestor.blogspot.com/ fatblock