At the Internet ON (ION) Conference in Toronto on November 14, 2011, Paul Andersen, President of EGATE Networks Inc. and Board member of CIRA and ARIN, led a panel discussion into deployment and operations issues with IPv6 and DNSSEC. The panelists all had actual deployment experience and brought a number of different viewpoints to this discussion. In this introductory slide set, Paul Andersen set the scene for the discussion and provided some basic info about IPv6 deployment, particularly in Canada. A video recording of the session will be available for viewing. Details will be posted at http://www.isoc.org/do/blog/ when the video is available. More information about the global series of ION conferences can be found at http://www.isoc.org/ion/

1. Panel Discussion: Challenges and Opportunities
in Deploying IPv6, DNSSEC, and Other Key
Technologies
October 5, 2011
Moderator: Paul Andersen, P. Eng
President EGATE Networks Inc.
Chair, Board of Directors – Canadian Internet Registration Authority
Treasurer, Board of Trustees – American Registry for Internet Numbers
www.internetsociety.org

2. Agenda
Agenda and Introduction to Panel You Are Here!
Quick Scene setting [moderator]
Initial panelist remarks
Discussion and Audience Q&A
2 The Internet Society 10/5/11

3. Panelists
Joe Abley: Director of DNS Operations, ICANN
Bill St. Arnaud: Green IT Consultant at St. Arnaud-
Walker and Associates Inc.
Jacques Latour: Director Information Technology,
Canadian Internet Registration Authority
John Sweeting: Director of Network Engineering, Time
Warner Cable
3 The Internet Society Nov 14, 2011

4. Scene-setting
www.internetsociety.org

5. Where does new technology come from…
Engineering / Open
Stds
Business Research
Operations Policy
5 The Internet Society Nov 14, 2011

6. DNSSEC: Rebuilding The Plane While In Flight…
• Serious flaws identified as far back as 1990
• Flaws publicized in 1995
• 1st Attempt at IETF (RFC 2065) started in 1997
• Attempts to implement lead to (RFC 2535) in 1999
• Scaling issues cause us back to drawing board to
develop DNSSEC-bis (RFC 4033) taking us to 2005
• Critical piece NSEC3 not formally defined until 2008
• Some TLD’s start to sign zones (.se, .cz, .org)
• Root Signed July 15th, 2010
• Comcast Deploys DNSSEC in October 18th, 2010
6 The Internet Society 10/5/11

7. IPv6: Two Railway Tracks – Different Rail Gauge
• 1990: Community sees there is a problem
• 1993: Design starts at IETF
• 1995: IPv6 First Defined by RFC 1883
• 1998: IPv6 Updated by RFC 2460
• 1999: Regional Internet Registries start allocating IPv6
• Feb 2011: IANA Hands Out Last Address Space
• April 2011: APNIC free pool reaches final /8
• June 2011: Happy World IPv6 Day!
7 The Internet Society 10/5/11

8. IPv6: Two Railway Tracks – Different Rail Gauge
Number of Major ISP’s in Canada
offering IPv6 Today on Broadband
?
8 The Internet Society 10/5/11

9. IPv6: Two Railway Tracks – Different Rail Gauge
Number of Major ISP’s in Canada
offering IPv6 Today on Broadband
1* - TekSavvy
(in beta)
* Source: What Paul has heard – if there are others you should probably be a bit more public about it…
9 The Internet Society 10/5/11

10. Opportunities
There is no central control of the Internet
 No need for “permission” to innovate.
– E.g., to create and deploy the World Wide Web!
The landscape can change dramatically when actors see
and seize opportunities
 Does anyone remember “AltaVista”?
10 The Internet Society Nov 14, 2011

11. Challenges
There is no central control of the Internet
 No “master upgrade plan”
Individual actors (operators, content providers, users,
etc) move at their own pace
 If an access provider has “no business case”, why invest in a new
technology?
So, the Internet needs IPv6 and DNSSEC, but getting all
the actors to move is a challenge.
Nov 14, 2011
11 The Internet Society

12. Panel discussion
12
www.internetsociety.org 10/5/11