A presentation given at APRICOT 2015 during the IPv6 Readiness Measurement BoF and APIPv6TF session.

1. Update on IPv6 activity
in CERNET2
APAN39, Fukuoka
BUPT and BII
5 March, 2015
Update on IPv6 activity
in CERNET2
APAN39, Fukuoka
BUPT and BII
5 March, 2015

2. 20's Anniversary of CERNET
• China Education and Research Network
• Over 2000 member university and educational institute
• CNGI-CERNET2 is running with pure IPv6 backbone, over 600 member
universities connected since 2003
• IPv6 related research and experiment conducted on CERNET2
• Close collaboration with device manufacture, service provider and other
Internet Industry community to promote IPv6
20's Anniversary of CERNET
China Education and Research Network - CERNET project started in 1994
Over 2000 member university and educational institute
CERNET2 is running with pure IPv6 backbone, over 600 member
IPv6 related research and experiment conducted on CERNET2
Close collaboration with device manufacture, service provider and other
Internet Industry community to promote IPv6

3. CERNET Optical Fiber
Transmission Network
CERNET-IXI
CERNET-HKIX
2.5GxN
Other Links
in China
Other Internet Links
A
CERNET
100G Backbone
(IPv4)
CERNET Optical Fiber
Transmission Network
CNGI-CERNET2
10G Backbone
(IPv6)
HKIXI
Orient Plus
10G
Internet2
10G
2.5GxN GEANT2/TEIN4
Other Links
in China
APAN
A
CNGI-6IXI

4. IPv6 CNGI－CERNET2 BackboneCERNET2 Backbone
• Pure IPv6 Backbone
• 25 PoPs in 20 cities
• Bandwidth 2.5G /10G
• Over 400 IPv6 acce
networks, most of the
/48 IPv6 addresses
• 4M end users

5. Some measurement stats
in Jan.2015
Some measurement stats
in Jan.2015

6. CNGI-6IX connection availability ratio
CNGI-6IX核心链路可用率
98.6
98.8
99
99.2
99.4
99.6
99.8
100
SW1-CERNET2
SW1-中国电信
SW1-中国联通
SW1-中国网通
SW1-中国移动
SW1-中国铁通
SW1-CERNET
SW1-NSFCNET
SW1-CSTNET
SW1-RS1
RS1-RS2
6IX connection availability ratio
核心链路可用率
RS1-RS2
RS1-HK
RS1-Compass
Compass-CERNET
RS2-TEIN3_1
RS2-TEIN3_2
RS2-GEANT
HK-HKIX
HK-KREONet2
HK-APAN-JP
RS2-US

7. Backbone outbound traffic
北邮
北航
西安
厦门
沈阳大连
长春北大
北京
哈尔滨
同济
复旦
兰州
重庆
成都
长沙
杭州
合肥
Backbone outbound traffic
上海
济南
沈阳大连
广州
北京
武汉
南京
天津
郑州
北京 武汉 广州
南京 上海 郑州
天津 济南 沈阳
大连 长春 哈尔滨
北大 北邮 北航
西安 成都 重庆
兰州 合肥 杭州
厦门 长沙 复旦
同济

8. Traffic origin by AS
AS
PKTS
SRC
PKTS
DST
OCTS
SRC
OCTS
DST
786 900.8M 0 1.2T 0
789 382.9M 0 568.3G 0
1103 305.0M 0 273.7G 0
137 293.1M 0 270.7G 0
680 237.8M 0 236.7G 0
70 101.6M 0 140.0G 0
2200 107.5M 0 137.1G 0
513 327.2M 0 102.1G 0
34878 39.5M 0 47.2G 0
194 27.7M 0 41.4G 0
Other 934.0M 3.7G 949.7G 3.6T
0
0
0
0
0
0
0
0
0
0
3.6T

9. Traffic by protocol type
Protocol
PKTS
IN
PKTS
OUT
PKTS
ALL
OCTS
IN
OCTS
OUT
6/TCP 2.8G 2.6G 5.5G 3.0T 2.4T
17/UDP 506.7M 403.0M 909.7M 391.2G 167.4G
41/IPV6 261.6M 154.5M 416.0M 223.5G 65.9G
47/GRE 21.4M 19.2M 40.6M 14.5G 5.8G
50/ESP 15.4M 11.6M 26.9M 12.2G 7.3G
1/ICMP 11.7M 16.3M 27.9M 646.9M 4.8G
103/PIM 1.6K 0 1.6K 238.4K 0
2/IGMP 5.6K 0 5.6K 153.6K 0
4/IPIP 0 1.1K 1.1K 0 92.3K
51/AH 1 53 54 1.5K 8.2K
Other 1 50 51 304 7.8K
Traffic by protocol type
OCTS
ALL
2.4T 5.4T
167.4G 558.6G
65.9G 289.3G
5.8G 20.3G
7.3G 19.5G
4.8G 5.4G
0 238.4K
0 153.6K
92.3K 92.3K
8.2K 9.6K
7.8K 8.1K

10. Inbound traffic from RS2RS2-GEANT_10G (TB)

11. Traffic stats, Jan.2015Traffic stats, Jan.2015
Aggregated traffic
Over 40Gbps
Aggregated traffic
Over 40Gbps
Traffic in BUPT POP
10Gbps, sometimes congested
Traffic in BUPT POP
10Gbps, sometimes congested
Traffic in Xi’An POPTraffic in Xi’An POP

12. Traffic with in CERNET6
International partners
Traffic with in CERNET6-6IX with
International partners
Traffic with HK-IXTraffic with HK-IX
Traffic with Internet2
4Gbps around
Traffic with Internet2
4Gbps around
Traffic with ChinaTelecoTraffic with ChinaTeleco

13. he (very) uneven
stribution of DNS root
ervers on the Internet
The number of Root server
limited to 13 due to
echnical reason (IPv4 MTU)
400+Anycast Root instance,
nly 4 in China（I,J,L）
The Current Distribution of DNS Root ServerThe Current Distribution of DNS Root Server
China：
0.2B/per si
The Current Distribution of DNS Root ServerThe Current Distribution of DNS Root Server

14. Why not increase more Root serverWhy not increase more Root server
• The number of Root server is limited to 13 due
to technical reason
• 512B limitation on packets size in RFC1035 (20+
years ago in IPv4 MTU specification RFC791)
• Performance consideration(UDP/ query&response
pattern)
• Anycast Root instance development heavily relies on BGP networking which is based
on autonomous system and policy
“it (root scaling issue) could be regarded as a byproduct of a single hierarchical name space, the
centralization of root information in the DNS is operationally problematical and does not cleanly fit
within a distributed and decentralized peer model of a network architecture
Why not increase more Root serverWhy not increase more Root server
The number of Root server is limited to 13 due
512B limitation on packets size in RFC1035 (20+
query&response
Anycast Root instance development heavily relies on BGP networking which is based
be regarded as a byproduct of a single hierarchical name space, the
centralization of root information in the DNS is operationally problematical and does not cleanly fit
within a distributed and decentralized peer model of a network architecture.” --- Geoff Huston

15. WaysWays to Scale the Root systemto Scale the Root system
• Increase the capability of the system (more machines)
– More anycast root instance
– Slave the root by Localized cache
• http://datatracker.ietf.org/doc/draft-ietf-dnsop
– Universal Anycast (unowned anycast like AS112)
• https://tools.ietf.org/html/draft-lee-dnsop-scalingroot
• Increase the “letter” (more Root operators)
– Priming exchange via TCP or Http (break the limitation of 512B)
• http://datatracker.ietf.org/doc/draft-song
– More Root server for pure IPv6 network (experimental)
• http://tools.ietf.org/id/draft-davey-sunset4
to Scale the Root systemto Scale the Root system
Increase the capability of the system (more machines)
dnsop-root-loopback/
like AS112)
scalingroot-00
Increase the “letter” (more Root operators)
Priming exchange via TCP or Http (break the limitation of 512B)
song-dnsop-tcp-primingexchange/
More Root server for pure IPv6 network (experimental)
sunset4-ipv6onlydns-00.txt

16. Recent WorkshopRecent Workshop on DNS Future Root Serviceon DNS Future Root Service
• Held at the start of December 2014 in Hong Kong, Looking at means
to enable further scaling of the root server system
• Reference: http://www.potaroo.net/ispcol/2014
• IEEE work on root server scaling
• 1）http://datatracker.ietf.org/doc/draft
• 2）https://tools.ietf.org/html/draft-
• 3）http://datatracker.ietf.org/doc/draft
on DNS Future Root Serviceon DNS Future Root Service
Held at the start of December 2014 in Hong Kong, Looking at means
to enable further scaling of the root server system
http://www.potaroo.net/ispcol/2014-12/futureroots.html
http://datatracker.ietf.org/doc/draft-ietf-dnsop-root-loopback/
-lee-dnsop-scalingroot-00
http://datatracker.ietf.org/doc/draft-song-dnsop-tcp-primingexchange/

17. AA Testbed on IPv6 DNS Root SystemTestbed on IPv6 DNS Root System
A research Rootest & Experiment environment
AA Pure IPv6 environment for Root and ResolvePure IPv6 environment for Root and Resolve
Testbed on IPv6 DNS Root SystemTestbed on IPv6 DNS Root System
research Root testbed in IPv6 L-Root instance
Pure IPv6 environment for Root and ResolvePure IPv6 environment for Root and Resolve

18. IPv6 DNS Root SystemIPv6 DNS Root System
ConnectivityConnectivity
BII
ZDNS
CSTNET
IPv6 Forum
China
IPv6 DNS Root SystemIPv6 DNS Root System TestbedTestbed
ConnectivityConnectivity
CERNET2/B
UPT
CSTNET
China
Unicom
WIDE
ISC
南加州ISI

19. The paralleled Root Zones operation
Running paralleled Root zones and root scaling schemes to expand
of root server beyond 13 root (13 to infinity)
 Pervasive deployment of Root services via Universal
 IPv6-only experiment and operation research
The paralleled Root Zones operation
zones and root scaling schemes to expand the num
of root server beyond 13 root (13 to infinity)
Pervasive deployment of Root services via Universal Anycast
research

20. IPv6 Root Service MonitoringIPv6 Root Service Monitoring

21. AA Testbed on IPv6 DNS Root SystemTestbed on IPv6 DNS Root System
• A flexible testbed to verify newly proposed
implementation and operation
• Provides test cases, data, analysis for research and specifications
on new ideas on IPv6 and DNS Root scaling issue
– Root operation and IPv6-ony experiments
• An open platform collect insights from the very group of people
and make effort to contribute the internet
Testbed on IPv6 DNS Root SystemTestbed on IPv6 DNS Root System
newly proposed protocol,
implementation and operation practice on DNS Root
Provides test cases, data, analysis for research and specifications
on new ideas on IPv6 and DNS Root scaling issue
ony experiments
An open platform collect insights from the very group of people
and make effort to contribute the internet

22. Conclusion
•Proportion of websites having
low
•Much work has been done in education network
•The IPv6 users mainly in large cities
•IPv6 DNS root testbed and research on the way
•More work is needed on IPv6
having AAAA in China is still
Much work has been done in education network
The IPv6 users mainly in large cities
and research on the way
is needed on IPv6

23. Future Plan
•Improve the solution: test the HTTP latency
verifying the website has AAAA record
•Gathering of statistical data for a long time to
trends
•Contribute the tools as open
•Collaborate with the community
Improve the solution: test the HTTP latency after
verifying the website has AAAA record
data for a long time to spot
open source
Collaborate with the community