DRG
DRG IPv6 Insight Day
2011-06-08

In the spirit of contributing to the Internet Society sponsored World IPv6 Day, we are pleased to bring you our IPv6-specific contribution.

The Dragon Research Group web site has been IPv6 connected since October 2010. Nearly 400 unique IPv6 addresses have accessed http://dragonresearchgroup.org since October 2010. Less than 5% of those that did so used both HTTP and HTTPS, the vast majority were HTTP only. For the month of June 2011 there have been over 2500 IPv6 unique HTTP GET requests from nearly 40 unique IPv6 sources thus far. The top 10 countries by the routed origin of the covering IPv6 prefix for those sources since 2010 accessing dragonresearchgroup.org were:

country code % of total IPv6 visitors
US 60%
JP 7%
CN 5%
NL 4%
GB 4%
FR 3%
BR 3%
DE 2%
CH 1%
AU 1%

We have seen over 650 unique visitors to the DRG IPv6 test page. Of those, only about 5% actually came from an IPv6 source address.

The DRG Distro Network is a global monitoring network that contains UNIX hosts running application listeners for a few key well known services such as DNS, HTTP and SSH on otherwise unused address space. About one third of the DRG Distro Network has globally routed IPv6 addresses in almost ten different countries. As of today, all but one of the DRG Distro Network installations can successfully send ICMPv6 echo request messages to a well known remote IPv6 connected host and receive ICMPv6 echo responses. All DRG Distro Network installations with IPv6 connectivity are using a /64 network mask by default except for one that is a /126.

The DRG Distro Network has seen only a single IPv6-based SSH connection attempt from Japan. The DRG Distro Network has never seen a SSH password-based authentication attempt over IPv6. The DRG Distro Network has only ever seen a single 'HTTP GET /' request, also from Japan, but from a different source address than the SSH connection attempt. The DRG Distro Network has never seen any unsolicited DNS messages overs IPv6.

The DRG Distro Network has witnessed hundreds of thousands of lame delegation conditions involving IPv6-based DNS name servers. Lame delegation events occurr for a variety of reasons, including deficient IPv6 connectivity in the path between the DRG Distro Network resolvers and authoritative servers. In fact, over 99% of all IPv6-related lame delegations the DRG Distro Network sees are due to a network reachability issue. In some cases a DRG Network Distro pod that purports to have global IPv6 connectivity is actually unreachable by hosts outside of it's local network.

A key interest and long term objective for the DRG is to better understand IPv6 connectivity issues and to help develop tools and insight that better address the needs and challenges to manage the new network layer.

While the community celebrates World IPv6 Day and continues to roll out the next-generation IP protocol, we here at DRG are striving to help. Stay tuned for enhanced IPv6 insight from DRG over the coming months. In the meantime, we would love for you to help us do the research by joining DRG or running a pod.

posted at 12:00 am | permanent link



DRG is expanding, join us!
2011-06-02

Put simply, we need more talented heroes to help fulfill the growing cache of research and projects. At present, we are especially interested in volunteers who might have a particular set of capabilities and want to make best use their skills to help develop some exciting new research for the Internet community. If you are ready to join us, Visit our Apply to DRG page today and contact us with details. We need you.

We are especially interested in volunteers who possess the following skills:

FreeBSD and GNU/Linux system administration
We are seeking volunteers who are proficient in managing FreeBSD and GNU/Linux systems. Ideally the candidate will be familiar and comfortable setting up and using common monitoring tools, log management applications, system auditing processes, configuration management and modest shell scripting solutions to common tasks. Database administration experience is a plus.
IPv6 end host configuration and internetworking
We are seeking volunteers who understand IPv6 transition technologies, addressing and routing. Ideal candidates will have experience setting up and utilizing IPv6 on Linux and FreeBSD systems.
Technical writing
We are seek volunteers who have a breadth of information security experience, excellent written skills and a desire to publish research reports, white papers and refereed journal articles on behalf of DRG and its associated research. Ideal candidates will also possess web authoring skills.
Tool development
We are seeking volunteers who are proficient in developing small to medium sized security tools. Proficiency with Perl Python, Ruby, C, shell scripting and similar languages common to a UNIX platform are most applicable. The ideal candidate should be able to write small network applications, log parsing scripts, work with SQL databases and be generally capable of manipulating data to produce interesting insight. Web development skills are a plus.
Outreach and public relations evangelizing
We are seeking volunteers who are well connected in the security community and can help interface with the Internet community to bridge needs and projects between the community and DRG. Ideal candidates should be highly respected and frequent participants in various Internet security community forums, proficient with social networking applications and regular guests at in-person community events.

posted at 12:00 am | permanent link



About DRG

Apply to DRG

Host a DRG Distro Pod

Insight & Analysis

Tools

Weekend Reads

Challenges

Security Innovation Grant

Mailing lists

DRG PGP public key

Follow us on Twitter Follow DragonResearch on Twitter


Feedback: dragon@dragonresearchgroup.org

Archives: