[arin-ppml] The non-deployment of IPv6

[John Curran]

On Dec 9, 2009, at 4:48 PM, Chris Engel wrote:
> 
> Well,
> 
> If the time estimates I've seen put forward here are accurate....and I see no reason to assume they wouldn't be.... then it'll be 2-3 years minimum before we see anyone out there that can ONLY do IPv6.

I agree that looks like a lot of time, but there's quite a few assumptions in such an estimate and it could move up very quickly.  Additionally, there will be an increasing number of clients which will attempt to connect via IPv6 *first*, so you actually are impacting your performance if you don't do IPv6 soon.

> In that time frame I'd be looking for the same sort of solution for public facing servers in the DMZ as I would for the rest of my network....namely some sort of v4 to v6 gateway service that would act as a proxy for my 4 machines and allow them to communicate with IPv6 hosts.

Does your present firewall device support IPv6 NAT today?   In discussion this situation with other organizations, I'm generally finding that routers, firewalls, and load-balancers aren't what are not what breaks, but instead their tools such as help-desk system and configuration generators which simply don't know IPv6.  Finding these issues is a great reason to experiment with at least one public facing IPv6 server sooner rather than later.

/John