ARIN Letter Says Two More Years of IPv4
dew4au writes "A reader over at SANS Internet Storm Center pointed out a certified letter his organization received from ARIN. The letter notes that all IPv4 space will be depleted within two years and outlines new requirements for address applications. New submissions will require an attestation of accuracy from an
organizational officer. It also advises organizations to start addressing publicly accessible assets with IPv6. Is ARIN hoping to scare companies into action with the specter of scarce resources? This may be what's needed to spur adoption since there appears to be no business case for IPv6 deployment."
When IPv6 was announced, one of the benefits was that everything could have its own IP address; even your toaster!
So as for a business case, what about the internet toaster business? If we don't switch to IPv6, what will they do?
There's no -1 for "I don't get it."
Nothing gets fixed until it breaks so fully that people can't ignore it any longer. ARIN should just hand out the last of their IP assignment already and then we can move on with actually deploying IPv6.
I just got back from the ARIN meeting this week and the letters are, indeed, a "scare tactic". Network providers keep reporting that PHBs won't spend any money on IPv6 even though engineers are begging for it. Most corporate officers probably think IP is only Intellectual Property and this is an attempt to draw their attention to the fact that the network world as they know it is going to end soon and that the only way to avoid serious problems is to either stop growing or to start IPv6 deployment. PHBs sometimes get the idea when they realize that not spending some money will lead to big problems in a few years. Others figure that if it's over a year away, it really does not matter because it won't impact their bonus this year, so it may not work, but we can hope.
Kevin Oberman, Network Engineer, Retired
I want IPv6 support, but there are lots of pieces still not in place. I am actually using Miredo (Teredo implementation) when I am on the move and Sixxs when I am at home. These are more stop-gap solutions and until the necessary entities start allowing to get on board properly.
My parents live in France and they are with Free.fr who offers IPv6 as a standard option. On the other hand I am living in Canada and not one of the service providers offer IPv6 in any shape or form. One questioned about it they blame their up-stream provider. Even if they are ready the only IPv6 ready router for the home is the Apple Airport Extreme, and even then there is a blocker issue for connecting to Sixxs.net (Apple's bug). Linksys, D-Link and Buffalo are still not ready with a public release and you are left trying to see if the version of DD-WRT you need for IPv6 supports your router. Chances are you will be looking at eBay for a router that has enough flash to support it.
Like the Swine Flu outbreak, I get the feeling that few entities are going to be rushing to do any work until there is media frenzied panic.
There is no killer application for IPv6, since its just infrastructure. On the other hand the lack of a NAT can make certain application solutions easier to implement, since you don't need to do any NAT busting or other fancy tricks. Of course since internal addresses are now all routable, you will certainly need to make sure that you have a real firewall on the gateway device.
Once you are on IPv6 you can start playing around with IPv6 torrent and http://ipv6.google.com/ , if you are curious.
Jumpstart the tartan drive.
...because whoever is in charge of it does such a crummy job of explaining what it is and why I should care, and more importantly, why my folks should care.
I got my router set up to use IPv6 (an Apple Time Capsule), and I went searching for some IPv6 love and found practically none. Yes I got to Google, and yes I found a few websites that seemed to do little more than blink(!) "hooray, you are connecting using IPv6! Your address is ..."
IPv6 needs both a killer app (IPv6-only Twitter, anyone?) and some ready-to-explain-why-you-can't-get-to-it documentation that will get the people to *demand* that they have IPv6 addresses.
Until then, it's a 32-bit address space world.
Case in point. Thought it was supposed to be 2010? Now it's 2011.
IPv4 addresses won't magically be exhausted one night. They'll just start getting more expensive.
Advice: on VPS providers
As I keep pointing out on each IPv6 story, there will be little motivation to move to IPv6 until you can hit major sites, like cnn.com and slashdot.org, using nothing but IPv6 packets.
We've made a bit of progress, in that now, if you have IPv6 connectivity to "the Internet", you can in theory do the name resolution entirely by IPv6 packets, now that the root name servers support IPv6.
Note to the "a little knowledge is a dangerous thing" crowd: yes, you can form an IPv6 packet with an IPv4 address, but that doesn't mean the target machine will actually be able to understand it - it is still a completely different packet type than an IPv4 packet.
So, does slashdot.org have IPv6 enabled? Does the colo housing slashdot.org's servers route IPv6 packets from the Internet to the slashdot.org servers? Can "the Internet" route IPv6 packets to the colo?
If a tech site like slashdot.org doesn't have the ability to handle IPv6 traffic, then why should I get all hot and bothered about trying to get IPv6? And if I'm not going to demand it, then why should my ISP spend the effort to supply it?
www.eFax.com are spammers
ARIN really is the most trustworthy source you could have for a claim like that, though. Sure, many have made the claim before, but this is the next best thing to having Jesus, Moses, Mohamed, Buddha, and Thor all sit down with you around a burning bush and explain the importance of implementing IPv6.
A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
They're already more expensive. The expense increase has been down in the noise for customers - that will no longer be true by the end of the year, and it will hurt by mid 2010.
IPv4 is no longer too cheap to meter. If that's not a business case for IPv6 I don't know what is.
With this junk IPv4 toaster?
How about they take back the Class A address space owned by companies who probably aren't even utilizing it. Here's a list of a few companies who have class A licenses and you wonder how much of it they are even using:
General Electric 3.0.0.0 - 3.255.255.255
IBM 9.0.0.0 - 9.255.255.255
Xerox Palo Alto Research Center 13.0.0.0 - 13.255.255.255
Hewlett-Packard 15.0.0.0 - 15.255.255.255
Hewlett-Packard (originally DEC, then Compaq) 16.0.0.0 - 16.255.255.255
Apple Inc. 17.0.0.0 - 17.255.255.255
Massachusetts Institute of Technology 18.0.0.0 - 18.255.255.255
Ford Motor Company 19.0.0.0 - 19.255.255.255
Royal Signals and Radar Establishment 25.0.0.0 - 25.255.255.255
Halliburton Company 34.0.0.0 - 34.255.255.255
Why the hell do some of these companies even need 16+ million addresses? I can't see them utilizing the space available, but maybe someone here can enlighten me on how that is done (aside from trying to justify a public IP address for every workstation).
...wait, didn't they say the same thing then??!?
Fortunately, nobody in their right mind would let Slashdot design a new network protocol.
If we had a measurement that said that only 25% of the entire address space is in use at any one time, then maybe would would rethink our choices.
I have 6 IPs just for personal use. Every big networking company that controls some portion of the Internet is set for IPv4 space for a while. There just isn't room for anyone new to enter into the market. This is a huge advantage for those already established companies. I don't think they intentionally planned it this way, but the scarcity of address is a short term advantage for too many businesses for us to simply ignore that and keep pushing IPv6 as if is of some automatic benefit to everyone. Don't get me wrong, I would be thrilled if Comcast and others moved me over to IPv6. Maybe with a massive address space scanning IP blocks for SSH logins and open firewalls would no longer be as a productive use of botnet time.
“Common sense is not so common.” — Voltaire
Awesome idea. We'll give Google 1/40, The government can 2/40, IBM will get 3/40, etc etc etc
Same problem. The ipv6 is not a "bad" idea, it's just sort of like...imagine in 1950s if the phone company decided "we could go with area codes to subdivide numbers to prevent running out, or we could use letters AND numbers".
Can you imagine the upheaval?
In a lot of ways, that would have been even easier to deal with, because everyone's phone was owned by AT&T. New phones could have been issued without too much problem.
No, imagine it instead in the mid 1980s. Ma Bell doesn't own the phones any more, in fact there are tons of cheap phones available, cell phones are starting to come out, and there are still rotary AND push button phones.
That's more like what the IPv6 switch is like. Do you give the new people 2 numbers, so that grandma can still call them? How long is it before you stop accepting legacy phones that only have 10 dialing options? How the hell do you get DTMF to work with 36 numbers? Do we need area codes? It would be weird without them, but we don't really need them.
The equivalent of these questions are still being asked. Just a couple of months ago, there was a huge to-do about NAT and IPv6. "IPv6 is a world without NAT". The hell it is. My internal routers don't get publicly routable IP addresses, even if I have to NAT back to IPv4.
When the wrinkles get ironed out, we're going to wonder how we ever did without it. During the transition, it's going to be hell for everyone (with the possible exception of the clueless end user, who might have to buy a new router at most).
Check out my sysadmin blog!
Actually, I would claim that that's not a big deal. The big problem is that IPv6 just doesn't provide a sensible migration path from IPv4. The idea that we're all going to wake up one day and switch off IPv4 at once just doesn't cut it. More precisely, an IPv4 node just has no way of talking to an IPv6 node. If we built some sort of standardized IPv4-to-IPv6 NAT technology that was invisible to existing IPv4 nodes, then IPv6 could be adopted gradually and incrementally with minimal cost (the cost could be rolled into the cost of general network gear upgrades).
Are you adequate?
If the Pope declares ex cathedra that thou shalt use IPv6, I will convert to Catholicism immediately.
Go green: turn off your refrigerator.
Just a couple of months ago, there was a huge to-do about NAT and IPv6. "IPv6 is a world without NAT". The hell it is. My internal routers don't get publicly routable IP addresses, even if I have to NAT back to IPv4.
I agree with the sentiment - however, it's one of policy, not mechanism. NAT is a pretty poor substitute for a router that implements policy (known as a firewall). NAT has literally an all-or-nothing granularity. For instance, I might want to specify that an internal host can enable BitTorrent via UPnP, but under no circumstances can CIFS be allowed through - in either direction. An internal host sending a CIFS solicitation out does not mean a pinhole should be opened and some set of hosts (depending on cone of restriction) free to respond. NAT is just not a practical policy tool. It's an address space recovery tool. Reverse NAT, however, has some redeeming qualities for load balancing and failover - I'm not versed well enough in IPv6 to understand how they'd be implemented without NAT. (Anycast addressing, I suppose.)
But you can implement NAT in IPv6 just as much as in IPv4 if you wish. A router could appear to have a single interface ID and translate to/from that. It's largely unnecessary though since instead of a handful of IPv4 addresses you have an entire 64-bit space to yourself (and maybe even the SLN prefix, not sure about that).
IPv6 really is a major cleanup and simplification from IPv4. I'm slightly disconcerted by the increased dependency on DNS however.
I manage two /48 IPv6 netblocks. I can remember them just as easily as I do v4 addresses. While autoconfiguration is the preferred method for v6 devices, you can assign addresses manually. So, the host that I have on (my.ip.prefix).20, is also (my.ipv6.prefix)::20.
Why couldn't we just add another octect.
Because if we're going to completely break networking, we might as well switch to something that fixes a lot of IPv4's problems (such as, say, IPv6).
Dewey, what part of this looks like authorities should be involved?
Actually I've just read a report from Netcraft that shows that IPv4 is dying!
Again, the problem is hoarding of unused IPv4 addresses.
We'd be just fine if it weren't for folks like MIT that have way more IP's than they need.
Of course, when a resource gets tight, the folks who have it become kings. You can bet your behind no company is going to give up it's v4's without a fight.
I'm glad that IPv6 is based upon a stewardship model rather than an ownership model. And also that the v6 guys are leaving 87 percent of the potential v6 namespace unallocated
When IPv6 was announced, one of the benefits was that everything could have its own IP address; even your toaster!
Wait a minute... Is IPv6 just a clever marketing scheme for NetBSD?
I'd argue there is never going to be a killer app for IPv6 because it is nothing more than window dressing on the same old, boring protocols. The true killer app will be on a protocol that is nothing like TCP/IP... say a working mesh protocol where there is no notion ports, IP addresses or any of that nonsense. Where you don't care where the data you get comes from as long as it is authentic. That is the future. Bit torrent is the closest we have to that future and bit-torrent is nothing but a hack of TCP/IP. If the protocol stack was built from the ground up to not care about the source of data, only that it is authentic, *then* you'd have a killer app.
IPv6 is boring and it isn't even mainstream. How about we cook up something new. Remember when TCP/IP was the new kid on the block and most games had dual or tri-network stacks (TCP/IP, IPX/SPX, Netbeui)? It only took like a few years before all that nonsense went away and we all settled on TCP/IP. Basically, overnight. The same thing *will* happen again. Only it will *not* be IPv6. Mark my words. We've outgrown what IP gives us... The mesh is the future.
Nobody will adopt IPv6 because it is just a larger tree. It doesn't scale the way we are now using it. The way we are starting to use our network is peer-2-peer--dare I even say "cloud-like"?
We dont care where the information comes from, only that it is the real deal. It could come from some data center, some server pool, a microwave, the cell phone, the car stereo, or your neighbors TV... doesn't matter. As long as I know the data is authentic, the source doesn't matter. That is exactly what bit-torrent is about. Only bit-torrent needs a tracker because of the deficenies of TCP/IP. If the network was all about data and how to get to it, rather than maintaining connections between two devices, we wouldn't need trackers or bit-torrent. And when you think about it, this is how it needs to be. Otherwise all the traffic has to aggrigate through larger and larger "central" links--down the tree and back up the tree to the other side. That is what we have now--it is the mindset of IP... you start and the edge node and work in than out to another edge... This doesn't scale and it gives a lot of power to the guys with the big pipes (i.e. your cable company or mega-ISP). Bit-torrent is really a mesh of interconnected goo. That is how it should be--only as a fundamental feature of the network. Focus on the data, not on end to end connections.
IPv6 is more of the same. The fact that it is hierarchical is a bug, not a feature.
"IPv6 is a world without NAT". The hell it is. My internal routers don't get publicly routable IP addresses, even if I have to NAT back to IPv4.
Hi. You're ignorant. Let me educate you.
RFC3513 gives us Link-Local (fe80::/10) IPV6 addresses.
http://tools.ietf.org/html/rfc3513#section-2.5.6
These are addresses that *must not* be routed to the outside world.
RFC4193 gives us Site-Local (fc00::/7) IPV6 addresses.
http://tools.ietf.org/html/rfc4193#section-3
These are addresses that you *may* choose to not route to the outside world.
You don't need NAT. :)
...they keep saying that in $SMALL_NUM years we'll be out of IP addresses, and $SMALL_NUM years goes by without incident. The sky persistently fails to fall.
Call it the peril of poor predictions, but I'm now officially not worried because the claims have so often been false.