スライド タイトルなし



Similar documents
untitled

tp2ps output file

IP IPv4-IPv6

IPv4aaSを実現する技術の紹介

BSD Unix IPv6 WIDE Project / ( ) All rights reserved. Copyright(c)2006 WIDE Project 1

IPv6における

2011 NTT Information Sharing Platform Laboratories

tcp/ip.key

1 IPv6 WG OS SWG PCOSIPv6 Windows Vista 2 3 KAMEUSAGIMacOSX IPv6 2

橡c13.PDF

ict2-.key

T8_4-shirasaki.PDF

集中講義 インターネットテクノロジー 第5回

IPv6 IPv IETF IPv6 2

AirMac ネットワーク構成の手引き

AirMac ネットワーク for Windows

IPv6 IPv6 IPv4/IPv6 WG IPv6 SWG

今からはじめるIPv6 ~IPv6標準化最新動向編~

Agenda IPv4 over IPv6 MAP MAP IPv4 over IPv6 MAP packet MAP Protocol MAP domain MAP domain ASAMAP ASAMAP 2

untitled

橡sirahasi.PDF

untitled

wide93.dvi

オペレーティングシステムとネットワークプログラミング 担当 : 吉藤英明 yoshfuji+camp2008 AT wide.ad.jp セキュリティ & プログラミングキャンプ /08 OS プロトコルスタック (C)2008 YOSHIFUJI Hideaki,

Microsoft PowerPoint - ie ppt

IP IP DHCP..

1

IPv6 トラブルシューティング ホームネットワーク/SOHO編

IPv6 IPv6 IPv4/IPv6 WG IPv6 SWG

Teradici Corporation # Canada Way, Burnaby, BC V5G 4X8 Canada p f Teradici Corporation Teradi

ルータ(IPv6)掲示用池田.PDF

JANOG14-コンバージェンスを重視したMPLSの美味しい使い方

untitled

IP 2.2 (IP ) IP 2.3 DNS IP IP DNS DNS 3 (PC) PC PC PC Linux(ubuntu) PC TA 2

MPLS-Japan_Esaki_2001.PDF

IIJ Technical WEEK SEILシリーズ開発動向:IPv6対応の現状と未来

Microsoft PowerPoint - tokyo6to4_interop_2009.pptx

I / 9, 10 5 IPv6 IPv4 (cont.) IP IPv6 IPv4 (cont.) ARP NDP IPsec IP MobileIPv6 IPsec Explicit Multicast HOST Router HOST I / 9, 10 6 IPv6 - End-to-End

はじめに xsp のルータにおいて設定を推奨するフィルタの項目について の IPv6 版 最低限 設定することが推奨されるフィルタ について まず議論したい 接続形態に変化はないので IPv6 対応をメインに IETF draft RIR でproposal 進行中のものについては今回の検討外とした

情報ネットワーク演習 2007 年 10 月 11 日 ( 木 )

untitled

total.dvi

LAN

ループ防止技術を使用して OSPFv3 を PE-CE プロトコルとして設定する

JPRS JANOG13 1. JP DNS Update 2. ENUM (ETJP) 3. JP ( ) 3 1. JP DNS Update

All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 1

SRX300 Line of Services Gateways for the Branch

Microsoft PowerPoint ppt [互換モード]

2 1: OSI OSI,,,,,,,,, 4 TCP/IP TCP/IP, TCP, IP 2,, IP, IP. IP, ICMP, TCP, UDP, TELNET, FTP, HTTP TCP IP

untitled

ヤマハ ルーター ファイアウォール機能~説明資料~

第1回 ネットワークとは

LAN LAN LAN LAN LAN LAN,, i

Mac OS X Server QuickTime Streaming Server 5.0 の管理(バージョン 10.3 以降用)

第1回 ネットワークとは

試験問題での表記規格 標準の名称験午前Ⅱ 問題文中で共通に使用される表記ルール 各問題文中に注記がない限り, 次の表記ルールが適用されているものとする. JIS Q 9001 JIS Q JIS Q JIS Q JIS Q JIS Q 2700

Microsoft PowerPoint - ykashimu_dslite_JANOG26_rev

橡3-MPLS-VPN.PDF

帯域を測ってみよう (適応型QoS/QoS連携/帯域検出機能)

BIND 9 BIND 9 IPv6 BIND 9 view lwres

MR1000 Webリファレンス

Dynamic VPN Dynamic VPN IPSec VPN PC SRX IPSec VPN SRX PC IPSec 2 Copyright 2010 Juniper Networks, Inc.

IPv6移行ガイドライン

untitled

wide97.dvi

untitled

TCP/IP Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.3 Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.4 2

1 OS OS OS Macintosh

NATディスクリプタ機能

Broadband Internet I / 1 1 I / 1 2

Microsoft PowerPoint pptx

Vol.54 No (June 2013) GSRAv2 1,a) 1,b) 1,c) 1,d) , IPsec-VPN SSL-VPN OpenVPN PacketiX VPN GSRA Group-based Secure Remote

NAT-f SIP NAT 1 1, 2 1 IP SIP NAT NAT NAT NAT-f NAT-free protocol NAT-f SIP Session Initiation Protocol NAT-f SIP NAT Researches on NAT traversal for

untitled

VNSTProductDes3.0-1_jp.pdf

1. 2. ( ) Secure Secure Shell ssh 5. (xinetd TCP wrappers) 6. (IPsec) 7. Firewall 2

tutorial.dvi

Microsoft PowerPoint - Amazon VPCとのVPN接続.pptx

$ cal ) ( cal $ cal cal cal 1. () ( clear) 2. ( cal) 3. ( man) \() ( ) --() +()

スライド 1

スライド 1

設定例集_Rev.8.03, Rev.9.00, Rev.10.01対応

橡C14.PDF


IW2002-B5 1 Internet Week ( ) 9:30 12:30 ( ) Copyright 2002 All Rights Reserved, by Seiji Kumagai ADSL FTTH 24 IP LAN

2008, 2009 TOSHIBA TEC CORPORATION All rights reserved

Mac OS X Server Windows NTからの移行

FirePass Edge Client TM Edge Client LAN Edge Client 7.0 Edge Client Edge Client Edge Client Edge Client Edge Client Edge Client LAN Edge Client VPN Wi

設定手順

28 NTMobile Java Proposal and Implementation of Java Wrapper for NTMobile ( : ) :

untitled

IPSEC-VPN IPsec(Security Architecture for Internet Protocol) IP SA(Security Association, ) SA IKE IKE 1 1 ISAKMP SA( ) IKE 2 2 IPSec SA( 1 ) IPs

SCREENOS NAT ScreenOS J-Series(JUNOS9.5 ) NAT ScreenOS J-Series(JUNOS9.5 ) NAT : Destination NAT Zone NAT Pool DIP IF NAT Pool Egress IF Loopback Grou

ScreenOS 5.0 ScreenOS 5.0 Deep Inspection VLAN NetScreen-25/-50/-204/-208 HA NetScreen-25 HA Lite NetScreen-25 NetScreen-50) ALG(Application Layer Gat

,,, J-SOX ISMS PCIDSS,, IM/VoIP/VoD Copyright 2008 Juniper Networks, Inc. 2

DNS DNS(Domain Name System) named(bind), tinydns(djbdns), MicrosoftDNS(Windows), etc 3 2 (1) ( ) IP IP DNS 4

IPSJ SIG Technical Report * Wi-Fi Survey of the Internet connectivity using geolocation of smartphones Yoshiaki Kitaguchi * Kenichi Nagami and Yutaka

,,.,,., II,,,.,,.,.,,,.,,,.,, II i

Inter-IX IX/-IX 10/21/2003 JAPAN2003 2

Transcription:

IP version 6 1

CIDR NAT Peer-to-Peer / End-to-End & IP IPv6 2

3

Internet end-to-end model End system End system Internet Routers in the middle 4

What happen if.. nd system End system? Internet? Internet Intermediate nodes Proxy server Firewall Protocol translator 5 Dial-up

End system Enclosure by the intermediate nodes End system Internet Private Closed Network 6

For web: Client/Server Architecture is breaking Sufficient to have clients in private address spaces access servers in global address space down Global Addressing Realm Private Address Realm Private Address Realm Telephones need an address when you call them, and are therefore servers in private realm 7

Need an end to end naming and addressing architecture Global Addressing Realm Implication: IP Version 6 deployment required for continued development of Internet in Mobile Networks, 8 Developing Countries

NAT(Network Address Translation) IP (src_ip) (src_port) IP (RFC1631) (1) Private Global -DNS NAT IP - (dst_ip) (src_ip, src_port) (2) Global Private - (src_ip, src_port) (dst_ip) (*) (src_port) (i) src_ip (ii) dst_ip 9

NAT A NAT C AC AC N C N C 10

11 Traditional NAT NAT C A C C C C

Bi-directional NAT A NAT C C C 12

Twice NAT A NAT C? Nl1 Ng1 Nl1 Ng1 13

25 Business Internet Access 20 Users (Millions) 15 10 5 Fiber Fixed Wireless T1 DSL Satelitte Dial-up 0 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 Source: Banc of America Securities LLC, Industry sources, 1998 14

IP (Internet Protocol) IP : 32 bits 4x10 9 (40 ) ( 60 ) 13 Digits 1 10 Digits 10 9 Digits 1 ( ) 2x8 Digits 2,000 10 Digits 10. We Need Further Addresses x N (N=?) >> 15

IP (Internet Protocol) IP : 32 bits 4x10 9 (40 ) ( 60 ) 13 Digits 1 10 Digits 10 9 Digits 1 ( ) 2x8 Digits 2,000 10 Digits 10. We Need Further Addresses x N (N=?) >> >> 16

17

VoIP Polycomm Messenger (MS & AOL) Interactive Game Etc 19

New Object Hooked to the Internet (Nomadic / Mobile) (Wareable / Mobile) New Topological Regions Hooked to the Internet 20

GS Personal Area Network LAN ) (ITS) 21

22

23

Millions 1,400 1,200 1,000 800 600 400 200 Mobile Internet Outlook More handsets than PCs connected to the Internet by the end of 2003! Projected PCs connected to the Internet (Dataquest 10/ 98) Projected cellular subscribers (Nokia 1999) Projected Web handsets (Nokia 1999) 0 1996 1997 1998 1999 2000 2001 2002 2003 2004 2005 24

Head-mount Display for a Single Eye Single-hand Keyboard Wearable Computer By courtesy of Nikkei BP Inc. Portions where a wearable computer can be attached 25

MDF 26

SensIT Project at DARPA 27

IPv6 28

IPv6 IPv4 128bit 32bit 128bit 4,294,967,296 (40 ) 340,282,366,920,938,463,463,374,607,431,768,211,456 29

IPv6 IPv4 (cont.) IP HOST Router HOST 30

IPv6 IPv4 (cont.) ARP -> NDP IPsec IP MobileIPv6 IPsec Explicit Multicast 31

32

IPv6 128bit 16 4 : 3ffe:501:100c:e320:2e0:18ff:fe98:936d 0 3ffe:0501:100c:e320:0000:0000:0000:0001 3ffe:501:100c:e320::0001 33

IPv6 ID ( 64bit) ID ( 64bit) EUI-64 Ethernet MAC 34

IPv6 (cont.) Network Prefix Interface ID 64bit 64bit N+I Network IPv6 : 2001:218:1800::/48 IPv4 : 45.0.0.0/8 2001:218:1800:e100::/64 2001:218:1800:e200::/64 45.0.1.0/24 35

Unicast Address Anycast Address Multicast Address 36

Anycast HOST 2001::1 HOST HOST HOST 2001::1 2001::1 37

(cont.) Loopback Address ::1 IPv4 ::IPv4 address ::203.178.142.1 IPv4 ::ffff:ipv4 address ::ffff:203.178.142.1 IPv4 38

3ffe:501::/32 ISP B ISP A 3ffe:500::/24 TLA ID NLA ID A 3ffe:501:1000:/48 B 3ffe:501:2000:/48 SLA ID 39

3ffe:500::/24 ISP A 3ffe:501::/32 ISP B CC ISP D ISP E 3ffe:501:1000::/48 3ffe:501:2000::/48 3ffe:501:3000::/48 40

90000 80000 70000 60000 50000 40000 30000 20000 10000 0 Growth in BGP Route Table Source: http//www.telstra.net/ ops/bgptable.html But they cannot be relied on forever Projected routing table growth without CIDR/NAT Moore s Law and NATs make routing work today Deployment Period of CIDR 41 Jun-88 Dec-88 Jun-89 Dec-89 Jun-90 Dec-90 Jun-91 Dec-91 Jun-92 Dec-92 Jun-93 Dec-93 Jun-94 Dec-94 Jun-95 Dec-95 Jun-96 Dec-96 Jun-97 Dec-97 Jun-98 Dec-98 Jun-99 Dec-99

ISP1 Multi-Home Network 3ffe:501:1000::/48 ISP2 2001:218:1800::/48 3ffe:501:1000:1000::/64 2001:218:1800:1000::/64 42

43

IPv4 Ver HL TOS Total Length Identification Flag Fragment Offset TTL Protocol Header Checksum Source Address Destination Address Options Padding IPv6 IPv4 44

IPv6 Ver Traffic Class Payload Length Flow Label Next Hop Limit Header Source Address Destination Address IPv4 IPv6 45

IPv6 Header Next Header = TCP IPv6 Header Next Header = EXT TCP Header EXT Header Next Header = TCP TCP Header IPv6 Header EXT Header EXT Header TCP Header Next Header = EXT Next Header = EXT Next Header = TCP 46

NDP (Neighbor Discovery Protocol) 47

NDP ARP(Address Resolution Protocol) NDP(Neighbor Discovery Protocol) ICMP IP Multicast 48

NDP (cont.) 49

50

Stateless Address Auto Configuration NDP EUI-64 DNS (DHCP, Anycast) Router RA Host Host 51

draft-ietf-ipngwg-router-renum-10 52

DHCPv6 DHCP Dynamic Host Configuration Protocol IPv6 DHCP Address prefix allocation DNS 53

54

e.g., IEEE1394, Ethernet, USB, etc MPLS IP IP SOHO SOHO 55

56

IPsec keyed MD5 DES CBC 3 57

2 AH Authentication Header ESP Encapsulating Security Payload 58

DNS 59

DNS for IPv6 RFC1886, RFC2874 IPv6 AAAA A6 DNAME Inverse zone Ip6.int. (nibble boundary) Ip6.arpa. (bitlabel boundary) RR 60

61

getaddrinfo gethostbyname IPv4/IPv6 int getaddrinfo(const char *nodename, const char *servname, const struct addrinfo *hints, struct addrinfo **res) nodename: servname: ( ) hints: addrinfo res: addrinfo 62

getnameinfo gethostbyaddr IPv4/IPv6 int getnameinfo(const struct sockaddr *sa, socklen_t salen, char *host,size_t hostlen, char *serv, size_t servlen, int flags); sockaddr 63

Microsoft XP, Windows2000, Windows CE, WMT Sun Microsoft Solaris 8 Apple MAC OS X Second Edition BSD UNIX Powered by KAME NetBSD, FreeBSD, OpenBSD Linux Powered by USAGI Embedded OS TRON@ Access, KASAGO@Elmic 64

IPv6 IETF IPng WG http://playground.sun.com/ipng/ 6bone http://www.6bone.net/ IPv6.org http://www.ipv6.org/ 6bone-JP http://6bone.v6.wide.ad.jp/ KAME BSD http://www.kame.net USAGI Linux http://www.linux-ipv6.org/ Freenet6 http://www.freenet6.net/ 65

66

IPv6 ( ) End-to-End 67