A safe transition to IPv6

After years of discussion and planning, the transition to Internet Protocol version 6, or IPv6 finally began in earnest this year, and in Australia's case the move couldn't have come any faster. However, like most initiatives that come loaded with promise, the trick now is to ensure that the transition to IPv6 actually meets expectations.

The IPv6 is intended to succeed IPv4, which is the dominant communications protocol for most Internet traffic as of 2012. IPv6 was developed to deal with the long-anticipated problem of IPv4 running out of addresses and implements a new addressing system that allows for far more addresses to be assigned than with IPv4. In 2009, the Australian Federal Government brought forward its plan to ensure all of its agencies' systems are capable of IPv6 connectivity from 2015 to 2012. 

Organised by the Internet Society, the IPv6 day in June this year was designed to catalyse equipment and service providers around the world to permanently enable IPv6 for their offerings. While the rollout has only just begun, experts predict that within the next year 10 to 15 per cent of data worldwide will be delivered using IPv6.

In Australia internet providers like Telstra, Optus, iiNet, Internode and Pipe Networks have already upgraded to the new protocol and consumers and the NBN Co confirmed its network would be IPv6 capable. The move toward IPv6 in Australia is underscored with the strong imperative to ensure that all Australians are able to access these new parts of the internet that are now being built on top of IPv6, in line with key close markets such as China. 

No one questions the need for the transition as IPv4 addresses are depleted. IPv6 provides more than 340 trillion addresses and will carry our global economy and critical infrastructure into the future—connecting billions of people and a wide range of next-generation smart devices, from thermostats that enable remote management to mobile communications devices that support emergency response with integrated real-time video, voice and data.

Australia's transition to IPv6 has been slower than other key markets, such as China, and part of allaying concerns over transitions is a thorough understanding of the security implications of the shift. It is imperative that organisations take a critical look at the technologies you're relying on to enable these advances and ensure IPv6 “certified” solutions can deliver the same level of effectiveness and performance as their previous IPv4 versions. In order for these updated technologies to meet expectations, consistency is critical.

Consistency is particularly important when it comes to technologies to help secure your IPv6 infrastructure. While you may be taking a step forward by upgrading to the IPv6-enabled version of a security solution, you can't afford to take a step backwards in effectiveness or performance.

When it comes to security effectiveness look for solutions that:

• Demonstrate comparable effectiveness in identifying and blocking threats targeting IPv6 environments as those targeting IPv4 environments
• Enforce security policies around application and access control consistently across IPv4 and v6 traffic
• Recognise and protect a variety of tunnelling mechanisms that enable IPv6 hosts and routers to communicate over IPv4 networks during this transition period when both protocols must be supported

As for performance, understand if the solution:

• Handles IPv6 traffic in the same manner as it handles IPv4 traffic; for example, accelerating IPv4 traffic but failing to apply similar acceleration technologies to v6 traffic can result in severe performance degradation
• Has demonstrated interoperability with existing IT security infrastructure according to US federal government test requirements and certifications
• Is designed to adapt to the incredibly large number of IPv6 addresses available to search for vulnerabilities and not become bogged down by the volume of data

IPv6 promises a world full of new devices, new networks and new security challenges. As infrastructure continues to grow and the pace and complexity of the threat environment accelerates, consistent security effectiveness and performance is critical.

Organisations need to ensure that the IT security solutions they've trusted in an IPv4 world will continue to meet their expectations as they embrace IPv6 and the future it can enable.  

Chris Wood is the ANZ regional director of network security provider Sourcefire