ie8 fix
madison

Networking

Steven J. Vaughan-Nichols

Too Little, Too Late: The Feds call for IPv6

By | September 29, 2010, 12:11pm PDT

Summary: Yes, we certainly should be switching over to IPv6, but the Federal government calling for it now is a case of too little, too late.

I had an interesting conversation with my Web-hosting company the other day. They told me that American Registry of Internet Numbers (ARIN) has told them that they need to start restricting IPv4, ala Internet, addresses. The long-predicted IPv4 number drought effects are finally being felt.

Lucky us. That’s why I look with more than a little bit of cynicism at people declaring that Federal CIO Vivek Kundra issuing a memo (PDF Link) requiring all federal agencies to upgrade their public-facing Web services to native IPv6 by September 30, 2012 is a “Game Changer.” The game has already changed, and the Feds are two-steps behind.

Kundra’s memo also establishes a second deadline of September 30, 2014 for federal agencies to upgrade internal client applications that communicate with public Internet servers to use native IPv6. All Federal agencies will also be required to designate an IPv6 transition manager to direct IPv6-related activities, and, of course, they must also have network hardware and software that complies with IPv6.

Sounds great. Where’s the money going to come from to make all that happen? It’s one thing to say we need to address a problem. Talk is cheap. It’s another thing entirely to actually do something about the problem.

We’re already behind in addressing the coming Internet address shortage, and I don’t see issuing a memo with deadlines changing that problem one bit for the Federal government. After all, just now when I checked the IPv4 Address Report, we’ll run out of all IPv4 Internet addresses on January 22, 2012—seven months ahead of the Federal government’s first deadline.

When we ‘run out’ of IPv4 addresses, it’s not going to be like we just run into a wall. This will be a slow-motion crash as heretofore ‘free’ static Internet Protocol (IP) addresses become valuable commodities. But, since your enterprise or your government agency can still get just as hurt in this kind of smash-up as a fast one, I’d advise you to start putting spending money now to switch over to a hybrid Internet IPv4/IPv6 interface with the Internet.

If you do wait until the problem becomes critical, and that seems to be what the Federal government is planning, you’ll only end up spending even more in the long run.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Steven J. Vaughan-Nichols, aka sjvn, has been writing about technology and the business of technology since CP/M-80 was the cutting edge, PC operating system

Disclosure

Steven J. Vaughan-Nichols

Steven J. Vaughan-Nichols is a freelance writer. He does not own stocks or other investments in any technology company.

Biography

Steven J. Vaughan-Nichols

Steven J. Vaughan-Nichols, aka sjvn, has been writing about technology and the business of technology since CP/M-80 was the cutting edge, PC operating system; 300bps was a fast Internet connection; WordStar was the state of the art word processor; and we liked it.

His work has been published in everything from highly technical publications (IEEE Computer, ACM NetWorker, Byte) to business publications (eWEEK, InformationWeek, ZDNet) to popular technology (Computer Shopper, PC Magazine, PC World) to the mainstream press (Washington Post, San Francisco Chronicle, BusinessWeek).

37
Comments

Join the conversation!

Just In

RE: Too Little, Too Late: The Feds call for IPv6
FAULKNE 13th Oct
Good day to confirm this comment I would appreciate T h e b e s t o f Z D N e t d e l i v e r e d your website very nice to everyone Yes, Oracle is the only one with shared-disk architecture, but that is there advantage. It means you can add or remove nodes and the database lives on. In a shared nothing architecture, if you lose a node, you lose the system. I'm sure Oracle appreciates EMC highlighting their advantage.I also desire to signal in your RSS feeds. Thank you as soon as once again and maintain up the great operate Awesome post! Thank you very much || thanks for nice content this is really benefit to me.
0 Votes
+ -
Feds are only part of the problem...ISP's are the real culprit here. They should be issuing IPv6 statics now for orgs that want static IP's. This would force the adaptation to actually happen.
0 Votes
+ -
@htotten
As the NetAdmin for an ISP, I'm going to correct your misconception. If any client of mine asked for an IPv6 static address, I'd find a way to give it to them. However, not one has asked for one. They all specifically want IPv4 addresses.
0 Votes
+ -
To be fair, the VAST majority of your customers probably don't know or care what kind of address you give them, as long as it works. They pay you for "internet service", not "internet addresses" and don't care (and perhaps shouldn't need to care) about the relationship between the two.

As an ISP, your focus IMHO (beyond immediate quarterly reporting) should be to insure you are capable of fulfilling that mission into the foreseeable future, and at the very least that you can do so for the current 2-5 year planning cycle. ISPs who don't do / haven't done so will be "punished" by the market, forced to pay more to catch up or to be restricted to an ever-shrinking (albeit, slowly shrinking for the first year or three) pool of IPv4-only networks.
0 Votes
+ -
IPv4 exhaust: very slow train wreck
mrjude Updated - 29th Sep 2010
We studied this at Stratecast and modeled the impact. It is likley that IPv4 has quite a bit of life left in it since the only thing tht will happen once the /8 blocks are exhausted is that router table fragmentation will occur. Most large enterprises and all of the ISPs have lots of IPv4 addresses left. Additionally, the creative use of NAT will likley extend the life time of IPv4 for most user communities. We see IPv6 being applied initially to things like content networks that want some separation from the common herd anyway.
0 Votes
+ -
Too complicated. Start with:
"IPV4"nn.nn.nn.nn:"IPV4"nn.nn.nn.nn
addresses turning every IPV4 address potentially into millions. Or use it to directly address clients currently NAT-ed.

Then go the full monty when that shoe pinches.
0 Votes
+ -
Am I missing something here? Why do we need to switch to IPv6 for internal networks? I mean, aren't most internal networks NATTed through a set of primary IPs anyway? Most of the the SMBs that I know of use the non-route-able IPs (generally in the 10.X.X.X or the 192.168.X.X range) and NAT their internal IPs through an IP block that they purchase from their ISP.
So say that a small company purchases an IP from their ISP, 200.200.200.201 (I don't know who owns this IP, just using it for illustration purposes) and all their internal IPs are in the 10.X.X.X range. If their ISP suddenly says that they need to switch to an IPv6 IP, all the small company needs to do is purchase a router that can handle IPv6 IP, right? None of the internal IPs need to be changed...they will all go through the new router that now has a WAN IP as an IPv6 IP.
0 Votes
+ -
@tech_ed@... No, there is a lot more to it than that. An IPv4 client won't be able to reach IPv6 pages and applications on the internet, because it doesn't have v6 DNS and can't cope with all the other v6 protocols.

But it's actually a lot easier to do v6 INSIDE the corporation first, if you give it a bit of thought. Your clients run dual stack (Windows 7 does this by default and Linux isn't hard), and can reach the whole world.

BTW, Europe and the Far East will run out long before the US. Some European phone companies are planning how to roll out v6 address to their broadband consumers within the next year.

Perhaps the Feds are worried that all the IPv6 expertise and good practice will emerge elsewhere in the world, and the US will be left behind?
0 Votes
+ -
@tech_ed@...
In theory, we could just do NAT-PT (Network Address Translation - Protocol Translation) the same as we did for IPv4. However, we keep being told that many IPv6 applications, such as VoIP, will break if we use NAT-PT. If this is so, a lot of stuff is going to end up broken no matter which way you go.
0 Votes
+ -
Broken is a relative term ... we can make most things work through NAT/NAPT (PT or no). It is a question of trying to make IPv6 _more capable_ than IPv4, not simply solving the address problem but also enabling novel uses of our networks in the future - things that NAT-PT may prevent, and it may be costly to undo that damage.

Furthermore, in short - NAT-PT has all the problem of NAT _plus_ related problems _plus_ entirely new problems. It is, IMHO, far easier to deploy IPv6 natively than to deploy widespread NAT-PT ... especially if you give yourself a year or three to do this in phases, normal tech refresh, etc.
0 Votes
+ -
The feds have been working this issue for long time. They have had guidance to the field mandating any new networking equipment must be IPV6 compatible. Don't get me wrong, there are issues. Just don't want people to think that the government has not been doing anything.
0 Votes
+ -
Agreed. I do wish they had done this a year or two sooner, but they have been making progress. At the very least, this mandate means they will need to support "real" IPv6 traffic / capabilities - vs the "less than real" tunneled pings of OMB522.
0 Votes
+ -
I don't understand how a country like China has IPV6 already fully implemented. While America sits on it's laurels twiddling it's thumbs. Apparently it really does come back down to the ISP's not wanting to spend the bucks and government unwilling to make them. I guess that'll be our next bailout plan to take taxpayers for another ride!

But if the ISP's would have been actively seeking better faster services for it's customers we'd actually be competitive with these 3rd world nations and progressive countries like Japan, S. Korea, Europe, etc!!! .....oh well, the ISP's would rather spend it on lobbying Washington to not make them come up to the 21st Century. That the rest of the World is living in, besides us. Instead they'll wait to make it even more expensive and difficult for America to advance in favor of their own pocketbooks instead. Lots of CEO's and Government Officials retiring you know and they need it to maintain their high flying lifestyles!
0 Votes
+ -
@i2fun@...

Judging by the Chinese way of living? They are NOT in the 21st century, unless you call serfdom 21st century way of living.
0 Votes
+ -
@i2fun@...

Lemme break it down for you: China implemented it faster for three reasons...

1.) It's a whole lot easier to implement newer technology when you start later. Sure, China has had computer systems for nearly as long as the USA, but PCs and mobile phones weren't as plentiful in the general populous until more recently. They had less inertia to deal with.

2.) It's much easier to do when you don't have a legislature and huge political barriers. China may be less communist/dictatorial than they used to be, but there's still a guy on top who can make stuff happen quicker than President Obama can.

3.) China had fewer IP blocks to begin with, thus they hit the ceiling faster than we did.

Make more sense now?

Joey
0 Votes
+ -
@voyager529

Also, let's keep some fairness here. Many if not most ISPs have reserved IPv6. They just aren't foisting it on people. Facebook and Google for instance, that I know of, have gone ahead and are residing on both already. So, we need not beat up on the ISPs too much.

As for China, well, yes, they supposedly have IPv6 in place, but they also only really wired up Shanghai and Beijing. Also, they control most of the hosted content, and accordingly, there isn't so much of it. So, fail as the US has been on this, China is still not the model to emulate.
0 Votes
+ -
RE: Too Little, Too Late: The Feds call for IPv6
jcurranarin Updated - 29th Sep 2010
Steve - I'd have to disagree with the characterization of "Too Little, Too Late". First and foremost, it's important to recognize that this is not about setting up a new project in each agency, it's about including IPv6 in the normal system planning and development process that already occurs. Agencies are continuing work on their systems; the OMB guidance tells them to plan on IPv6 in addition to IPv4 traffic. This is sage advice, since ISPs have no choice but to make use of IPv6 to connect new customers once we run out of available IPv4 addresses in 2011. The Federal government isn't telling agencies to "wait and see"; the dates of 2012 and 2014 are very realistic given timeframes that system deployment and refresh can take in the federal government.

Secondly, suggesting "game has already changed, and the Feds are two-steps behind" would imply that they already should have their public servers reachable via IPv6. Now, I agree that those who have known about this for years should already have their web sites on both IPv4 and IPv6 (e.g. ARIN or IETF, both of which are IPv6 reachable). Major content sites also should be reachable via IPv6 or working on it (for example, Google, YouTube, and Facebook are all reachable via IPv6). Before suggesting that the Feds are two steps behind here, perhaps you could outline ZDNET's plans for IPv6 support for its content? One of the major items discussed at yesterday's workshop was the importance of having clear public announcement of IPv6 plans, and from my perspective that places the Feds a step ahead of your blog.

/John

John Curran
President and CEO
ARIN
0 Votes
+ -
Contributr
@jcurranarin "First and foremost, it's important to recognize that this is not about setting up a new project in each agency, it's about including IPv6 in the normal system planning and development process that already occurs. " Here's my problem with your statement. They've been including IPv6 in their normal system planning for ages. The problem continues to be not 'planning;' not issuing memos saying that it must be done; but actually making it happen and that's where I see the government, along with everyone else, still failing to make the grade.

Steven
0 Votes
+ -
@sjvn@... "They've been including IPv6 in their normal system planning for ages." Time to get precise. In 2005, OMB issued guidance regarding networks being IPv6 capable. Agencies had to meet this goal in mid-2008. There's been no additional specific dates or functionality from OMB until the memo released earlier this week. Also, note that some agencies have made remarkable progress even prior to this guidance: DoD's DREN network and NASA's research network are both "making it happen" by being reachable via IPv6 today.
0 Votes
+ -
I've been contracting to DoD for 4 yrs now and asked the first day on the job what their plan was for IPV6 implementation. Four years later it's still being "planned." I predict the Feds will delay this until Chicken Little turns it into another Y2K spending spree; contractors will be called in at the 11th hour and get paid premium prices to meet the Feds' self-induced "crisis" deadlines.
0 Votes
+ -
RE: Too Little, Too Late: The Feds call for IPv6
jcurranarin Updated - 30th Sep 2010
@JohnBoyNC One of the most important items out of the workshop was the very practical example given by DoD's DREN of upgrading not just their external servers but entire infrastructure to IPv6 without additional budget or staff. (Read http://fcw.com/Articles/2010/09/28/Kundra-sets-new-IPv6-deadlines.aspx, page 3 for coverage of this point). The point is that IPv6 needs to be considered in existing programs going forward, including specific functionality by specific date. Agencies/contractors waiting a for a windfall are going to be quite disappointed.
0 Votes
+ -
Oh yeah, this is infrastructure, and the free market avoids spending money on infrastructure like the plague. They just throw up their hands and beg government to pay for it, complain about how big government is getting and then whine about any conditions placed upon them for their sucking on the government teat. In other words, business as usual.
0 Votes
+ -
@jasonp@...

The "free market" means the companies like Google have ALREADY DONE IT. Your job as a MEMBER OF A FREE MARKET is to appreciate that, and scorn those that have not.

Secondly, everyone waits for the federal government to get INTERSTATE infrastructure done, because that's the federal government's JOB. In the past, when ISPs for instance built their own infrastructure, the fed came in later and took them over.
Examples including but not limited to:
railroads
telephone lines(yes the fed CREATED the AT&T monopoly)
fiber optic networks
0 Votes
+ -
How? How? How?
petermat@... 29th Sep 2010
I keep reading articles - this must be the 20th - reminding me that I should do something about IPv6. I have not yet found anything giving real practical guidance on how to go abut this. Please stop soapboxing and provide some useful information!
0 Votes
+ -
IPv6 not ready to play nice
Get-Smart 4th Oct 2010
I agree. It makes for a nice sound bite, but truth is that IPv6 doesn't yet have widespread and reliable support. It has to be disabled so it doesn't interfere with working networks. We can't depend on it working yet, so the people doing the pontificating are those who are unaware of the negative consequences of their mandates. Of course, with our current government, that's the way they operate.
My experience has always been that any government on any continent on Earth is always playing the barbarian in Roman vs barbarian, covering the last place they got hit while a telegraphed punch to some other spot is on its way. Nothing new here, no, not since Rome or even Ancient Egypt.
0 Votes
+ -
Thanks for the insightful comments made here, they've helped me gain a better understanding of IPv6 and its implications. For anyone else like me looking to understand the fundamentals of IPv6, I suggest this free webinar on Oct. 14: http://bit.ly/CCMI-IPv6. John Curran, president and CEO of ARIN, is the speaker and following his presentation there will be some Q&A time.
This is an excellent article. The following publish supplies genuinely high quality info. My spouse and i?meters bound to check in it. Truly extremely helpful points are given listed here. Many thanks a great deal. Carry on favorable functions. vintage snapback hats best solid state drive
This is a really good read for me. Must admit that you are one of the best bloggers I have ever read. Thanks for posting this informative article. baby gifts for boys baby gifts for girls
I like the article you wrote here; it is very informative and useful for the internet users like me. I will come back to read more blog posts on your website and I have bookmarked your website as well Thank You know style clothing store girls clothing stores online
I also desire to signal in your RSS feeds. Thank you as soon as once again and maintain up the great operate! nccma cooler
I used to be more than happy to seek out this internet-site.I wanted to thanks in your time for this glorious read!! I positively enjoying each little bit of it and I have you bookmarked to check out new stuff you weblog post. this thread is amazing i like your work and i appreciate you that you have share a useful stuff thanks for sharing the i shop abatwa
I used to be more than happy to seek out this internet-site.I wanted to thanks in your time for this glorious read!! I positively enjoying each little bit of it and I have you bookmarked to check out new stuff you weblog post.Bookmarking now thanks please consider a follow up post. power sa shop
I think the representation of this article is actually superb one. This is my first visit to your site. Thanks a lot and keep sharing the information. Keep updating the information for all of us. Thanks ZDNet Government was launched as the brand's first industry vertical, with a mission to cater to IT professionals in the public secto I agree with your post. However, do you have any sources I can cite for my paper wheel car com bury
Well welcome, hopefully you can become a vital member of the community and really help to push far ahead of google. Which Im sure the development team would love. This will of course earn you alot points too and get you on the leaders board. z d n e t t h a n k Im not sure i come to an agreement with you on every level, howevor it absolutely was a good posting, many thanks for taking the time to put up your ideas.
This is my first visit to z d n e t site. Thanks a lot and keep sharing the information. Keep updating the information for all of us.how can i clean up, because i don???t know why it seems my skeen has to fat i get the glasses dirty every day.i search y a h o o Very good quality indeed. I surely recommend it. The template used in their site is also great.
Fantastic news about the new release.I positively enjoying each little bit of it and I have you b o o k m a r k e d to check out new stuff you weblog post.Im not sure i come to an agreement with you on every level, howevor it absolutely was a good posting, many thanks for taking the time to put up your ideas
Good day to confirm this comment I would appreciate T h e b e s t o f Z D N e t d e l i v e r e d your website very nice to everyone Yes, Oracle is the only one with shared-disk architecture, but that is there advantage. It means you can add or remove nodes and the database lives on. In a shared nothing architecture, if you lose a node, you lose the system. I'm sure Oracle appreciates EMC highlighting their advantage.I also desire to signal in your RSS feeds. Thank you as soon as once again and maintain up the great operate Awesome post! Thank you very much || thanks for nice content this is really benefit to me.

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix
Click Here
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix
ie8 fix