Home > Ask the Security Experts > Platform Security Questions & Answers > How to test IPv6 infrastructures
Ask The Security Expert: Questions & Answers
EMAIL THIS

How to test IPv6 infrastructures

Michael Cobb, featured expert EXPERT RESPONSE FROM: Michael Cobb, featured expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 04 March 2009
Some OSes allow you to build a test IPv6 infrastructure. Is that worth doing?

>
Most definitely, and I suggest you test the IPv6 infrastructure sometime this year. Here's why: Internet Protocol version 4 (IPv4) lies at the core of the Internet and is by far the most widely deployed Internet Layer protocol. The problem, however, is that it only supports around four billion IP addresses. Even with the current economic slowdown, we're likely to run out of the remaining unused addresses in the next two to three years. The growth of mobile and IP telephony services and the development of IP-based monitoring and control devices across many different industries mean there's a constant demand for addresses across the globe.

IPv6 is the next-generation Internet Layer protocol and is intended to solve the address problem and make the Internet more scalable, mainly by using a 128-bit address to support about 3.4× 1038 addresses. This number of addresses eliminates the need for Network Address Translation, a referral technique for delaying IPv4 address exhaustion. Other benefits include stateless address auto configuration and network renumbering, while network security is integrated into the design of the IPv6 architecture.

The reason you need to familiarize yourself with IPv6 and build a test IPv6 infrastructure is that the move to an IPv6-based Internet will start to happen quickly. I know it's been talked about for years, but so was Y2K, and look what a last-minute panic that turned out to be.

So why not be prepared this time around and plan for IPv6 in order to make your transition a smooth and cost-effective one? IPv6 brings many new capabilities that network teams need to become familiar with in order to get the most out of them. By building a test infrastructure, you can examine IPv6 firsthand, test how it affects various applications, research what router and other network configuration changes are needed, and find out how suppliers or partners are preparing. If you've got Windows Vista and Windows Server 2003 or 2008, you already have operating systems that enable you to build a test IPv6 infrastructure. Apple's OS X has supported IPv6 since 2004, and so have most of the Linux and Unix OSes.

Obviously there will be costs involved in introducing IPv6 into your network, but for most network hardware and software upgrades, they're considered to be negligible. Many required upgrades can be done as part of your routine upgrade cycles. A recent study conducted by the Department of Commerce concluded that for every $1 invested in IPv6 you can expect a $10 return in cost savings.

Auto-configuration will save costs in managing and renumbering networks, particularly in mobile and ad-hoc networks. The costs of managing and working around NAT will disappear, while remote monitoring and support services can reduce service and support costs and increase product life expectancy. The bulk of the investment outlay will come from leveraging these and other advantages of IPv6.

Security as well as address management are both areas in which careful IPv6 planning is required, but by building a test IPv6 infrastructure now, you can complete your education and research and create a good transition plan for your network. By being ahead of the game, you can upgrade your network step by step without the time pressure that may come later on.


BROWSE BY TAG
Platform Security,   Operating System Security,   Application and Platform Security,   Windows Security: Alerts, Updates and Best Practices,   Network Protocols and Security,   Enterprise Network Security,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Platform Security
Should developers create libraries of common cryptographic algorithms?
How to secure USB ports on Windows machines
What is the best database patch management process?
What is an encryption collision?
What are new and commonly used public-key cryptography algorithms?
Should management processes change based on a patch release schedule?
Does an EULA make it truly illegal to decompile software?
Should businesses delay Windows Vista adoption and just buy Windows 7?
Why should we place data files on a separate partition than the OS?
Should Windows Mobile updates come from Microsoft?

Windows Security: Alerts, Updates and Best Practices
Exploit code targets Internet Explorer zero-day display flaw
Windows 7 DoS flaw allows hackers to freeze Microsoft's newest OS
Microsoft patches serious Windows kernel flaws
Microsoft to address flaws in Windows, Office for Mac
Microsoft fixes security update that breaks Internet Explorer
What is the best database patch management process?
Microsoft addresses critical SMBv2 flaw, fixes record number of flaws
Microsoft to address SMB zero-day, IIS FTP Service vulnerabilities
Microsoft releases temporary fix for SMB2 zero-day vulnerability
Microsoft issues SMB vulnerability advisory, patch pending

Network Protocols and Security
Expert calls SSL protocol vulnerability a non issue
How to prevent phishing attacks with social engineering tests
How SSL-encrypted Web connections are intercepted
DNSSEC deployment challenges can be overcome
Microsoft issues SMB vulnerability advisory, patch pending
Microsoft repairs Windows media, TCP/IP vulnerabilities
DNSSEC deployments gain momentum since Kaminsky DNS bug
Kaminsky interview: DNSSEC addresses cross-organizational trust and security
How to create secure Windows FTP automation
PCI compliance requirement 4: Encrypt transmissions

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
BotHunter  (SearchSecurity.com)
principle of least privilege (POLP)  (SearchSecurity.com)
security identifier  (SearchSecurity.com)
trusted computing  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Find Security Solutions for Your Business
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts