DRG IPv6 Insight Day
In the spirit of contributing to the Internet Society sponsored World IPv6 Day, we are pleased to bring you our IPv6-specific contribution.
The Dragon Research Group web site has been IPv6 connected since October 2010. Nearly 400 unique IPv6 addresses have accessed http://dragonresearchgroup.org since October 2010. Less than 5% of those that did so used both HTTP and HTTPS, the vast majority were HTTP only. For the month of June 2011 there have been over 2500 IPv6 unique HTTP GET requests from nearly 40 unique IPv6 sources thus far. The top 10 countries by the routed origin of the covering IPv6 prefix for those sources since 2010 accessing dragonresearchgroup.org were:
We have seen over 650 unique visitors to the DRG IPv6 test page. Of those, only about 5% actually came from an IPv6 source address.
The DRG Distro Network is a global monitoring network that contains UNIX hosts running application listeners for a few key well known services such as DNS, HTTP and SSH on otherwise unused address space. About one third of the DRG Distro Network has globally routed IPv6 addresses in almost ten different countries. As of today, all but one of the DRG Distro Network installations can successfully send ICMPv6 echo request messages to a well known remote IPv6 connected host and receive ICMPv6 echo responses. All DRG Distro Network installations with IPv6 connectivity are using a /64 network mask by default except for one that is a /126.
The DRG Distro Network has seen only a single IPv6-based SSH connection attempt from Japan. The DRG Distro Network has never seen a SSH password-based authentication attempt over IPv6. The DRG Distro Network has only ever seen a single 'HTTP GET /' request, also from Japan, but from a different source address than the SSH connection attempt. The DRG Distro Network has never seen any unsolicited DNS messages overs IPv6.
The DRG Distro Network has witnessed hundreds of thousands of lame delegation conditions involving IPv6-based DNS name servers. Lame delegation events occurr for a variety of reasons, including deficient IPv6 connectivity in the path between the DRG Distro Network resolvers and authoritative servers. In fact, over 99% of all IPv6-related lame delegations the DRG Distro Network sees are due to a network reachability issue. In some cases a DRG Network Distro pod that purports to have global IPv6 connectivity is actually unreachable by hosts outside of it's local network.
A key interest and long term objective for the DRG is to better understand IPv6 connectivity issues and to help develop tools and insight that better address the needs and challenges to manage the new network layer.
While the community celebrates World IPv6 Day and continues to roll out the next-generation IP protocol, we here at DRG are striving to help. Stay tuned for enhanced IPv6 insight from DRG over the coming months. In the meantime, we would love for you to help us do the research by joining DRG or running a pod.
posted at 12:00 am | permanent link
Apply to DRG
Host a DRG Distro Pod
Insight & Analysis
Security Innovation Grant
DRG PGP public key
Follow us on Twitter