Malaysian IPv6 Initiative How it’s done in Malaysia Professor Dr. Sureswaran Ramadass Director National Advanced IPv6 (NAv6) Centre Universiti Sains Malaysia (USM) sures@nav6.usm.my | +604.653.3006 | http://www.nav6.usm.my Copyright © 2011 NAv6, Universiti Sains Malaysia IPv4: What happened on 4th February 2011 Source : http://www.bbc.co.uk/news/technology-12306573 IPv4 address depletion is a reality News: Difficulties obtaining IPv4 Source : http://www.circleid.com/posts/20110214_ipv6_the_high_volteage_telephony_generator/ News: Difficulties obtaining IPv4 Source : http://www.circleid.com/posts/20110214_ipv6_the_high_volteage_telephony_generator/ The world is moving to IPv6..fast Drastic measures by USG Upgrade public/external facing servers and services (e.g. web, email, DNS, ISP services, etc) to operationally use native IPv6 by the end of FY 2012; Upgrade internal client applications that communicate with public Internet servers and supporting enterprise networks to operationally use native IPv6 by the end of FY 2014; Designate an IPv6 Transition Manager and submit their name, title, and contact information to IPv6@omb.eop.gov by October 30, 2010. The IPv6 Transition Manager is to serve as the person responsible for leading the agency’s IPv6 transition activities, and liaison with the wider Federal IPv6 effort as necessary; and, Ensure agency procurements of networked IT comply with FAR requirements for use of the USGv6 Profile and Test Program for the completeness and quality of their IPv6 capabilities. Drastic measures by USG Release Date: February 2010 The purpose of Guidelines for the Secure Deployment of IPv6 is to provide information security guidance to organizations that are planning to deploy IPv6 technologies or are simply seeking a better understanding of IPv6. The scope of this document encompasses the IPv6 protocol and related protocol specifications. IPv6-related security considerations are discussed with emphasis on deployment-related security concerns. The document also includes general guidance on secure IPv6 deployment and integration planning. Malaysia’s Deployment Timeline • Ministry of Energy, Water and Communications (MEWC @ KTAK)1 had initiated the establishment of National IPv6 Council in 2004 • NAv6 Centre was also established in 2005 as experts to advice and guide the government. • The National IPv6 Council of Malaysia has stated2: ISPs by 2006 Public Sector by 2013 1 2 Malaysia by 2015 – Now know as Ministry Of Information, Communication And Culture (MICC) @ (KPKK) – The timeline has been revised by the Government in 2010 Malaysia’s IPv6 initiative IPv6 – 1 of 8 main components of the MYICMS886 blueprint IPv6 - 1 of 3 technologies being prioritize under 9MP (under MEWC) MYREN network was made dualstack. Connecting Universities and Research centers 2 IPv6 Pilot Projects was executed (KTAK & MAMPU) IPv6 Deployment in Malaysia National IPv6 Roadmap & National IPv6 Transition Guideline Government’s Initiative: MyICMS886 Strategy 1- Malaysian Information, Communications and Multimedia Services 886 IPv6 is identified as 1 of 8 key Infrastructure areas under MyICMS1 886 strategy NAv6’s Roles & Responsibilities • Core R & D – Continuous research, experiment and development of new applications and porting existing applications to IPv6. • Training & Human Resources – To train and nurture IPv6 experts for Malaysia and the region. • Monitoring & Audit – To study and monitor the IPv4 to IPv6 transition in Malaysia as well as monitoring the regional development. • Awareness and Promotion – To promote awareness on IPv6. National Strategic IPv6 Roadmap • Introduction – – – – – Overview IPv6 Worldwide Initiatives Role of ICANN in the Deployment of IPv6 Why IPv6 is gaining momentum globally? Summary: IPv6 A Worldwide Perception • Current IPv6 Status in Malaysia – – – – – MyICMS 886 Strategy Government’s Initiatives in RMK-9 IPv6 and MYREN Current ISP and Cellular Communication Providers Status Summary: Current IPv6 Deployment Status in Malaysia National Strategic IPv6 Roadmap • Benefits of IPv6 to the People and Country – – – – – • Technical Benefits Benefits for the Education Sector Financial Benefits Benefits for the Government Summary: Economic Growth due to IPv6 Technology Cost Estimation for Transition – – – – – – – – – Hardware, software and supporting services vendors ISPs Private Sector Organizations Public Organizations Overall Costs for the Transition to IPv6 Case-Study – Implementing IPv6 in MEWC Social Impact Human Resource Impact Summary: Cost and Impact National Strategic IPv6 Roadmap • Recommendations and Guidelines – – – – IPv6 Strategy for Malaysia Stakeholders and their Roles R&D Areas in IPv6 for Malaysia to focus on Summary: The Recommendations list • Success Indicators and Contingency – Success Indicators – Contingency Plan – Summary: Moving Forward • Overall Summary NAv6’s roles as stated in the Roadmap • To act as technical advisor to all stakeholders. • To coordinate all IPv6 R&D nation-wide so that pertinent issues are addressed and that there is no R&D overlap resulting in inefficient use of funding. • To provide IPv6 training and ‘train the trainers’ so that knowledge and expertise can proliferate. • To organize conferences, research meetings and workshops for Malaysian researchers, facilitating the sharing and dissemination of knowledge. • To prepare detailed plans, strategies and guidelines as a result of this Roadmap to enable implementation at all levels. NAv6’s roles as stated in the Roadmap (cont.) • To work with MOSTI with respect to R&D funding and work with MOHE with respect to human resource requirements. • To assist MAMPU by providing technical guidelines appropriate for government agencies for the transition to IPv6. • To assist MEWC in IPv6 rollout for the nation. • To assist government agencies and private organizations in migrating to IPv6. Malaysia’s IPv6 initiative: IPv6 Pilot Projects • • • • The Pilot Project was introduced in accordance with the National IPv6 Council’s vision of an IPv6-enabled Malaysia by 2010 (now revised to 2012) One of the major milestones of the timeline is to have the Public Sector IPv6-Ready by 2008 (now revised to 2011) NAv6 was contracted as a consultant to carry out these projects. Two agencies was selected for the pilot project: The Pilot Project will be pioneering the deployment of IPv6 in Malaysia This IPv6 Pilot project will be used as reference and guidelines for parties interested in implementing IPv6 in their network, mainly focusing on the Malaysian government agencies Malaysia’s IPv6 initiative: IPv6 Pilot Projects IPv6 Pilot Project Objectives Establish basic IPv6 capability in within the agency’s network. Basic IPv6 capability is defined here as being able to transport and route in dual-stack (IPv4 and IPv6) and that all devices that are configured in dual-stack must be able to interoperate with each other. Malaysia’s IPv6 initiative: IPv6 Pilot Projects • The IPv6 deployment was done in a gradual manner adopting several well recognized transition mechanisms Translation • The step by step approach was taken to ensure that the migration would be free of any technical glitches or security issues. • The project comprise of 4 phases Isolated deployment Expanding the infrastructure Tunneling Dual-Stack Production Implementation Commercial Services (Web & DNS) 20 Areas of Focus of the Pilot Project Networking Infrastructure Address Planning Information Security Transition Mechanisms Standards Training Testing Cost of Transition Malaysia’s IPv6 initiative: IPv6 Pilot Projects Agencies connected with Putrajaya Campus Network (PCN) Pilot Project: How it’s done Snapshot of IPv6 traffic information monitored using iNetmon Servers, security & routing devices installed at MAMPU Pilot Project: How it’s done One of many networking equipment being configured during Phase-3 implementation Work done by NAv6 Engineers IPv6 Audit Services IPv6 Audit Service by NAv6 Senior Engineer for EPF IPv6 Implementation IPv6 Audit Service witness by EPF IT team Malaysia’s IPv6 initiative: IPv6 Transition Guideline for Public Sector Collaborative effort between KTAK, MAMPU, NAv6 and several key agencies. Made available to the public on 4th January 2010 http://www.mampu.gov.my/pdf/suratarahankp040110.pdf Document covers: • IPv6 implementation in Malaysia • Introduction to IPv6 • Management Structure • Recommended Phases of IPv6 implementation at agencies • Phase 1 • Phase 2 • Phase 3 Malaysia’s IPv6 initiative: ISP IPv6 Compliance Audit IPv6 Compliance Audit for ISPs Phase 1 :- Basic IPv6 Connectivity Phase 2 :- ISP Interconnectivity Phase 3 :- Implementation of IPv6 for Commercial Services Phase 2 Compliance Audit : 7 December until 21 December 2009 1.Celcom (M) Berhad 2.DiGi Telecommunications Sdn Bhd 3.Extreme Broadband Sdn Bhd 4.Global Transit Communications Sdn Bhd 5.JARING Communications Sdn Bhd 6.Maxis 7.NTT MSC Sdn Bhd 8.Optical Communication Engineering Sdn Bhd 9.Packet One Networks (M) Sdn Bhd 10.Telekom Malaysia Berhad 11.TT dotCom Sdn Bhd 12.TM Net Sdn Bhd Phase 1 Compliance ISP Audit executed on March 2007 Source: http://www.skmm.gov.my/link_file/tenders/pdf10/notification_IPv6_audit_phase2.pdf http://nav6.usm.my/Research/isp.php Malaysia’s IPv6 initiative: ISP IPv6 Compliance Audit Phase1: Phase 2: Basic connectivity, IPv6 Application functionality Transition mechanism Inter-ISP connectivity Phase 3: Commercial Network Services Advanced Network Services Broadband Services (WiFi, 3G etc.) Full Connectivity Note * - Phase 2 and Phase 3 are primarily focus for ISP Malaysia’s IPv6 initiative: IPv6 Compliance Audit Another achievement for the global IPv6 community. • • • • .MY Domain Registry is IPv6 enabled 1st Audit April 2008 The Malaysian .my Domain Registry has taken the initiative to undergo the Phase-1 IPv6 Compliance audit offered by NAv6 for their Secondary DNS Server on the 23rd April 2010. This is the 3rd audit conducted for .my Domain Registry. The 1st audit in April 2008 was to verify their network connectivity while the 2nd audit also in 2008 was done on their Primary DNS Server. NAv6 would like to extend our heartiest congratulations to .my Domain Registry for their initiatives and accomplishments as one of the global key organization spearheading the IPv6 implementations. 2nd Audit 2008 3rd Audit April 2010 Building Human Resource: Certified IPv6 Network Engineer (CNE6) [ http://nav6.usm.my/Academic/training.php ] The aim of this IPv6 training program is to give in depth information on the transition from IPv4 to IPv6 and expose the participants on the technical expertise needed in the deployment of IPv6 in the organizations network. CNE6 Level 1 Course Outline [ http://nav6.usm.my/Academic/training.php ] CNE6 Level 2 Course Outline [ http://nav6.usm.my/Academic/training.php ] CNE6 Training Schedule 10th – 13th December 2013 Venue: NAv6 Centre, USM, Penang 16th – 19th December 2013 Venue: NAv6 Centre, USM, Penang Awareness & Training INET KL 2009, 20 July ‘09 CNE6 Trainings CommunicAsia 2008~2013 Singapore 08, 09 & 2010 IPv6 Road shows PICC, Putrajaya Professional Certification •Certified Network Engineer in IPv6 (CNE6)Level 1 & 2 • Trained so far about 5000+ ICT personnel from the Government alone. • Entire list certified so far can be found at www.nav6.usm.my •Certified Network Programmer in IPv6 (CNP6) - Setting Up ATC (Malaysia) • ATC in Malaysia – Three organizations were appointed as CNE6 Authorized Training Centre: 3/22/2016 35 Setting Up ATC (Sudan) Capacity building in IPv6 for requesting developing nations & organizations Sudan, spearheaded by National Telecom Corporation (NTC) of Sudan. Setting Up ATC (Singapore) • Singapore – An MoU with PROGRESO Networks (S) Pte. Ltd. to set an ATC in Singapore – PROGRESO’s engineers have been trained in CNE6 Professional Training & Certification at NAv6 – PROGRESO is currently one of the market leaders in IPv6 in Singapore, especially in the IPv6 Certification Training area. They are providing IPv6 training to both, the private and public sector, thus building IPv6 competency in Singapore. 3/22/2016 37 Setting Up ATC (Thailand) • Thailand 3/22/2016 38 Setting Up ATC (China) • Signed an MoU with Ruijie Networks Co. Ltd., China on April 2011 – Promote CNE6 within their 5000 educational centers and network in China – Supply networking hardware at subsidised rates 3/22/2016 39 Awareness & Training ITU Asia-Pacific Centre of Excellence: Online course on “Migration to IPv6” for the Asia Pacific Region. • This course will cover the key issues of migrating to IPv6. • It is aimed at assisting officials dealing with the policy, regulatory and administrative aspects of IPv6 migration. • Over the six weeks course. NAv6 Global Leadership Capacity building in IPv6 for requesting developing nations & organizations – Working with University of Mosul, Iraq to establish a Center of Excellence (CoE) in IPv6 in Iraq. – Working with universities in Indonesia establish Authorized Training Centre (ATC) in IPv6 – The above is carried out with US, Europe, Laos, Vietnam, Thailand, Singapore, India, Tanzania, Mexico and other Latin countries. NAv6 Global Leadership International Telecommunication Union (ITU) is one of the specialized agencies of the UN A study on IPv6 Address Allocation and Distribution - Commenced March 2009, completed on 31 July 2009 - Invited expert in IPv6 for ITU IPv6 Group. Conducted ASEAN IPv6 Workshop, 23-25 Feb 2009 Vietnam: Hanoi National University of Education (HNUE), signed MoA to establish a Training Centre on IPv6 (RM5 Million) Sultanate of Oman – Sharing our Roadmap and expertise on IPv6 deployment NAv6 Global Leadership Association of African Universities (AAU) The AAU: Established in 1967, Headquarters in Accra. 253 members from all African regions. • Established a strategic partnership with NAv6 in IPv6 deployment Nokia Siemens Networks (NSN) Professional Services provided to the Government on the ICT modernization • Creating framework/ guidelines for evolution to IPv6 in various ICT sectors NAv6 Global Leadership Internet Innovation Union Establishment Conferences & WorkshopHeld on the 21st September, 2012 in Beijing In collaboration with National Advanced IPv6 Centre, USM, Information Technology, Republic of Yemen and National Authority for Communication, Republic of Sudan and ITU had conducted and completed the IPv6 Workshop on 9th November 2013. NAv6 Global Leadership Participations on IPv6 talks worldwide (2010) • 1ST MEETING OF ITU IPV6 GROUP (ITU) • AI3 / SOI ASIA SPRING MEETING 2010 • INDONESIA IPV6 SUMMIT 2010 • 2ND INT'L CONFERENCE ON DISTRIBUTED FRAMEWORKS & APPLICATIONS 2010 (DFMA) • ASIA-PACIFIC ADVANCED NETWORK 30TH MEETING (APAN) 2010 • 2nd MEETING OF ITU IPv6 GROUP INTERNATIONAL TELECOMMUNICATION UNION • 2010 3rd IEEE INT'L CONFERENCE ON BROADBAND NETWORK & MULTIMEDIA TECHNOLOGY (IC-BNMT 2010) • AI3 & SOI-ASIA ANNUAL MEETING • MEETING ON IPv6 & JOINT WORKSHOP Prepared by Adil Hidayat @ 28 March 2011