IPv6 Adoption Will Grow With Smart Grid Adoption, Hopes Cisco

darthcamaro writes "A lot of people in the US have not seen a use case for the use of IPv6 yet, since we've got plenty of IPv4 addresses. But what happens when the entire electrical grid gets smart? The so-called Smart Grid will need a networking transport mechanism that will connect potentially hundreds of millions of people and devices. Networking giant Cisco sees IP (internet protocol) as the right transport and IPv6 as the logical choice for addressing. 'Pv6 is an interesting discussion and one that occupies a lot of bandwidth at Cisco,' Marie Hattar, Cisco's vice president of network systems and security solutions marketing said. 'Some people say that for smaller deployments, we could get away with IPv4, but the smart grid has a number of parts. The point is that if you're looking to build this [smart grid] out, why not build it out on the scalable protocol from the get-go?'"

Comments

Re:oh the headache ...

[Locke2005]

when can we stop talking about IPv6? Just as soon as the IPv7 standard is released?

Translation

[Locke2005]

Companies will soon actually have a reason to throw out their old routers and buy new ones, hopes Cisco.

Re:Translation

[FireFury03]

throw out routers? haven't ciscos been ipv6-capable for at least a decade now?

Pretty much (although you might have to buy a firmware upgrade... but then if you aren't running a recent firmware you're probably infested with security holes anyway).

those that aren't probably don't NEED to be, anyway.

That's rather untrue though. If you're going to deploy IPv6-only systems then *all* the routers on the network need to do IPv6. Yes, this even includes the home DSL routers, most of which currently on the market *still* have absolutely no IPv6 support, even though we only have about 2 years until IANA runs out of IPv4 addresses. Anything else is going to involve kludging things to work through IPv4 to IPv6 gateways, or tunnelling IPv6 over IPv4 to bypass the non-compliant devices.

The whole IPv4 address exhaustion problem is a really good example of people sticking their heads in the sane and hoping the problem goes away - most ISPs seem to not be interested in preparing their networks for IPv6 at all (PlusNet told me that they had no plans to roll out *any* IPv6 support over the next few years and EntaNet seem to have halted their IPv6 trials). Some time towards the end of 2011 there will be a "sky falling" moment similar to what we saw at Y2K when ISPs realise they are basically screwed and are going to have to do an expensive rush-job of deploying IPv6 over their networks in just a few short months.

not everything needs a world-wide public address. NAT 'security' is actually a Good Thing(tm).

Argh! Please will people stop spreading this crap. There is practically *no* security provided by a NAT. You get security from stateful packet inspection. NAT requires stateful packet inspection to work, but there is no significant security advantage (and many really serious operational disadvantages) provided by running NAT instead of just a stateful firewall. Also, most home NAT routers provide no stateful firewalling, only the limited stateful tracking required to make NAT work, and can therefore easily be bypassed by anyone on the upstream segment (which may be a few hundred random members of the public in the case of some cable setups).

Security is better served by doing proper stateful firewalling, and this is probably best achieved by removing NAT from the equation so that people don't have a false sense of security. Removing NAT also solves a lot of operational problems, as there are an increasing number of protocols that can't be made to work well through NAT (and whilst many people regard this as a flawed protocol design, there are sound reasons for designing these protocols in this way).

Re:oh the headache ...

[TheRaven64]

When everyone's deployed it and it's boring.

Wishful thinking

[Locke2005]

NAT/IP Masquerade has worked well for scaling IPv4 in every conceivable application to date... what makes them think it won't work for the "smart grid"? Or to put it differently, do you really want every appliance in your house directly addressable from anywhere in the world? After all, what could possibly go wrong?

Re:Wishful thinking

[solevita]

NAT/IP Masquerade has worked well for scaling IPv4 in every conceivable application to date

Except, of course, that isn't really true. I've had to try and run a VPN endpoint on a NAT'd host because our ISP wasn't giving us what they'd advertised. That wasn't fun and if more people are going to want to run VPNs in the future, we're going to need more IP addresses.

Re:Wishful thinking

[hardburn]

NAT/IP Masquerade has worked well for scaling IPv4 in every conceivable application to date

Much the same way that up to Aug 28, 2005, the New Orleans leeves were successful in holding back every conceivable rise in water level.

NAT works as long as you have simple networking needs--nothing much more than web and email. As soon as you need to use VPN, or VoIP, or try to get two or more people to play the same game behind the same firewall, it becomes readily apparent what a pain NAT is. In some cases, the application is doing all sorts of trickery to try to keep the user from noticing the issue. In others, the user is left on their own to deal with it. That doesn't even count a bunch of potential applications where the developers realized that they wouldn't be able to get around NAT, and thus never built it at all or simply toiled in obscurity.

Or to put it differently, do you really want every appliance in your house directly addressable from anywhere in the world?

NAT != Firewall. The only thing NAT provides you with over a packet filter is hiding your network topology. There is some use in that, but it comes at the expense of everything mentioned above. On balance, NAT comes out wanting. If you still really want to hide your topology, you can still use NAT on IPv6, but this should be the exception, not the rule.

Re:Wishful thinking

[FireFury03]

NAT/IP Masquerade has worked well for scaling IPv4 in every conceivable application to date...

Except it hasn't, NAT is a kludge that happens to work with simplistic client/server protocols in common use (such as HTTP). It doesn't even work well with some old standard protocols, such as FTP, without protocol-specific packet mangling.

NAT breaks pretty much all peer-to-peer protocols, which are rapidly becoming more common. Want to do VoIP, or start a direct file transfer between 2 IM clients? If you have NATs in the way then that gets unreliable. STUN makes things work a lot of the time, but even the STUN RFC admits that it is not, and cannot be, reliable. Systems like Skype try to hide these problems by abusing unfirewalled clients to route traffic between NATted clients (often without the unfirewalled user's knowledge), but the problems still exist and such "solutions" start to fall to pieces as the proportion of unfirewalled hosts dwindles.

what makes them think it won't work for the "smart grid"?

I'm guessing that the electricity supplier is going to want to be able to talk directly to your electricity meter, etc. Having a NAT in the way makes this less reliable since they won't be able to talk to it unless the meter has already initiated the connection through the NAT.

Or to put it differently, do you really want every appliance in your house directly addressable from anywhere in the world?

Do not confuse global addressability with global reachability. Assigning every device a globally unique address is valuable, even if it is on an isolated network. It makes it easier to connect 2 isolated networks together when you realise that you actually need them to not be so isolated from each other.

That said, I can think of a number of appliances that I wouldn't mind being globally reachable: My MythTV system is already globally reachable - if someone mentions a TV programme that sounds interesting, I can use the web browser on my phone to tell it to record that programme. I wouldn't mind my oven to be internet addressable, so I could remotely ask it to turn on and cook my dinner in time for me getting home. Being able to turn my heating on when I'm at the airport after coming back from holiday would be useful. Taking things a bit further, if I could ask my fridge what I'm running out of when I'm in the supermarket, I could save some hassle.

After all, what could possibly go wrong?

There are obviously security concerns to be addressed. But at the same time, designing a network so it *can't* be extended in the future seems somewhat short sighted.

Re:Wishful thinking

[techno-vampire]

Router's don't drop requests, at least not by default. Firewalls do. Best Buy has never sold a single router, no matter what it says on the box.

I have a home LAN, with a router. In order to get bittorrent working correctly, I had to set up this machine with a static IP on the LAN, and tell my router to forward all rquests on the appropriate ports to that IP. I have my own domain, and I've used dynamic DNS to let me use SSH to connect to my home machine when I'm away from home. Again, I had to tell the router where to send incoming requests on Port 22. Now, you may prefer to call that a "residential gateway" as Wikipedia does, but most people would look at you funny if you called it anything other than a router.

Get a Clue!

[refactored]

I waded through the replies with a fist full of mod points hoping to mod the cluefull up... but there weren't any!

The internet and especially all the Linux nodes on the internet are designed from the ground up to have a static IP addresses and IP names and be their own DNS and own Mail smarthost and web server and ....

Between the control freaks, the clueless, and the bean counters in Microsoft and the ISP's we have an internet with...

• an artificial scarcity of ip numbers and ip names that the ISP's can rort a fortune out of their users for a service that costs them less to provide than the cost of billing their customers for it.
• the vast majority of machines being dumb emasculated drones begging for content from the big media industries.
• an a tightly controlled web where peer to peer traffic is being squeezed out.

IPv6 will _never_ be allowed into the current mix.

Re:Get a Clue!

[tsotha]

• an artificial scarcity of ip numbers and ip names that the ISP's can rort a fortune out of their users for a service that costs them less to provide than the cost of billing their customers for it.
• the vast majority of machines being dumb emasculated drones begging for content from the big media industries.
• an a tightly controlled web where peer to peer traffic is being squeezed out.

Only your first point has anything to do with IPv6. Switching to a new protocol isn't going to make your machine any less "emasculated", and P2P is being suppressed over bandwidth costs (though I'm not even sure how much that's true - I use bittorrent all the time). People who aren't running some kind of web service aren't going to see any benefit from IPv6.

The last thing we need is for the power grid

[antifoidulus]

to become self-aware AND connected to the internet. It will spend the whole day looking at ionic porn instead of providing power.

"ooh baby, I can see your net positive charge, come put it in my net negative charge..ooh, you like like bonding....yeah baby...ooh, you want to get kinky and go 3 atom covalent?"

Re:The last thing we need is for the power grid

[Cheesetrap]

Wouldn't you be putting your net negative charge in the net positive charge?

Hey don't push your politics on me, man!

Re:I know my utility meters can be read remotely.

[oasisbob]

I doubt its IPv6, but it would be a logical thing to do simply because of network addressing.

They might be using IPv6 soon enough, check out 6lopan, an IETF group working towards getting IPv6 working on low-power networking devices like Xbee modems, etc. IEEE 802.15 transceivers are low-power, will mesh easily, and are very common in power meters.

Having global addressability saves a lot of hassle, and should not be confused with global reachability. Seems to make a lot of sense to me.

Can't Wait

[sexconker]

I can't wait to DDoS your fridge, then call you up (over VoIP) and ask you if your fridge is running.

the Linux desktop will drive ipv6

[Trepidity]

IPv6 adoption, I predict, will increase markedly in The Year of the Linux Desktop.

Re:NEGATIVE! Seperate it from public!

[FooAtWFU]

Don't worry! You see, by using IPv6 you can guarantee that no normal host on the Internet is ever going to be capable of reaching it! :)

If it's so interesting...

[Gerald]

"IPv6 is an interesting discussion and one that occupies a lot of bandwidth at Cisco."

So why can't I get to www.cisco.com via IPv6?

The smart grid doesn't need public IPs

[Desert Tripper]

Most grid control systems are on private (192.168 style) networks not connected to the general Internet for obvious reasons, and "smart-grid" meter-reading systems that are currently implemented or planned use other methods of addressing (packet-radio protocols, etc.) So, the "smart grid" argument in the article is misguided at best.

Re:I know my utility meters can be read remotely.

[FireFury03]

Also think about it. Do you realllllllllllllllllllly want your power grid to be tied to the real internet?

Well, maybe not, but there are still big advantages with using IPv6 even if it isn't on the public network. For example, you can use addresses that are guaranteed to be globally unique - this means no readdressing problems when you suddenly decide 2 completely independent networks need to talk to each other.

This is what has stunned me about the telephone industry - they are spending billions on replacing their antiquated SS7 networks with IMS networks. The IMS protocols were _designed_ to be run over IPv6 (but of course, IPv4 and IPv6 are so similar that they have actually been made to work on both), but most of the telcos are rolling out IPv4 networks. Nothing like spending vast amounts of money to replace one obsolete network with another.

IPv6 is an established and proven technology, there really aren't many good reasons not to use it in a new network.

IPV6 is a waste of time in the 'utility' market.

I'm not sure how it can be described as a "waste of time" since that would imply it would take longer to implement than an IPv4 network. If you're starting from scratch and not having to interoperate with the existing internet, an IPv6 network takes no more time to implement and is a bit of a no-brainer (getting a much more future-proofed network at almost the same cost). Unfortunately it seems that a lot of people in charge of such projects do indeed have no brains.

Re:oh the headache ...

[0100010001010011]

In perspective, IPv6 is 5Ã--10^28 addresses for every man womand and child alive. 70kg human has around 7*10^27 atoms in their body. Or about 7 IP addresses per atom.

Each 1.020144 * 10^-14 sq meter of Earth could have an IP address.

It's 252 addresses for every known sun in the observable sky.

Not making any 640k statements, but damn that's a lot of addresses.