Bang Rajan Learn

To Share Over All The World

Archive for the ‘Networking’ Category

Security networking

IT Consolidation with Linux

Posted by petanidigital on January 22, 2008

White Paper
Table of contents
Overview
Why Consolidate with Linux?
Risks
Benefits
Linux Consolidation Methods
HP Utility Data Center
Running Linux on HP Integrity Superdome
VMware .
Wine and Bochs
Ensim .
Workload Management
TCO studies
Comparing Linux/Mainframe to Linux/Intel
Case Studies
Conclusion
For More Information

Recent press leads some to believe that Linux is too risky for the enterprise data center. Hogwash. Linux is more than ready to go, and waiting means only one thing: cheating your company of the savings that come from moving
UNIX workloads to Linux on Intel. Ted Schadler, Linux Is More Than Ready for the Enterprise, Forrester Research Inc., June 24, 2003iii Overview
If your company exhibits these symptoms, you may need a more adaptive enterprise and a flexible infrastructure. HP s vision of the adaptive infrastructure enables your Companies today are struggling with how to grow their enterprise to become more responsive to changing businesses, drive new revenue streams and compete while business conditions by creating a dynamic IT environment dealing with merg ers, acquisitions, divestitures and
that fits with your evolving needs, reduces risk and
economic downturn. They are seeking ways to optimize
complexity and delivers real-world return on your informa-
and revitalize their internal IT infrastructures, making them
tion technology investments. This allows you to drive
more simple with improved service levels and able to
business responsiveness and focus more on your business
adapt quickly to changing business conditions. They must
issues.
consciously balance the levels of risk and costs associated
A consolidated environment that is easier to manage fits
with any change and ensure the quickest possible return
this bill nicely. IT consolidation has become a way to
on investment. In addition, they must also deal with the IT
reach your goals, cut costs, increase agility, align your IT
challenge of �server sprawl� � the proliferation of
with your business goals and move toward an adaptive
individual, geographically distributed, single-purpose
enterprise. IT consolidation is the reduction or centraliza-
servers throughout the enterprise. In many distributed
tion of disparate hardware and software to decrease
environments, applications are deployed on multiple
operating costs and improve business continuity, security
systems, each of which requires an operating system,
and manageability; it seeks to reduce the hidden costs of
application software and support. In addition, each
configuring, managing and supporting distributed
application typically requires a development and test
environments. Companies dealing with a patchwork of
server environment, further increasing cost and
hardware, software and operating systems�such as those
complexity. When each hardware unit is dedicated to a
that have recently undergone a merger or acquisition�
specific application, with its own gigabytes of storage,
are particularly good candidates for IT consolidation, as
utilization levels are low. There may be servers that sit idle
are organizations with geographically distributed systems
until application maintenance or testing is required, as
and multiple data centers. However, any company with
well as terabytes of underused storage on hundreds of
isolated or task-specific servers or multiple, distributed
servers that other applications cannot access. As a result,
storage systems should consider consolidation�s potential
what�s needed is improved manageability, reduced costs,
benefits.
increased agility and proof that IT investments will have a
favorable return.
3

�Every OS environment has a set of accelerators and
inhibitors to its deployment. When the inhibitors
overwhelm the accelerators, environments eventually
fade and die. In the case of Linux, the accelerators
currently in importance and value outstrip the inhibitors.
We have not perceived any major obstacles to Linux.�
�George Weiss, Gartner Symposium/ITxpo, October 2003
Why consolidate with
systems current capabilities. The issue of support for Linux
continues to be debated. Because Linux is maintained
and enhanced by a community of loosely coupled
Linux?
developers, it may be difficult to receive guaranteed
support. However, because the code is available to all,
Linux, with its flexibility, scalability and cost savings, can
anyone can provide support, and self-support becomes a
help overcome the obstacles and yield lasting infrastruc-
lower-cost and more viable option. There are other risks
ture improvements. In building for the future, Linux is an
involving the management of intellectual property
architect�s dream: It is reliable, adaptable, cost-effective
because you may need to establish new business
and open. Standing alone or mixed with other operating
processes. Some companies do provide support; HP
systems, Linux architecture is a solid foundation for
provides Linux support at a level as high as its critical
building an adaptive enterprise.
systems support.
According to a recent surveyi, IDC expects worldwide
Many companies are discovering that managing these
server market revenue to remain relatively flat, with a
risks responsibly is well worth the economic returns that
slight decline of 0.3 percent in 2003 to about $49.2
Linux brings. Along with the risks, open source brings a
billion. The five-year CAGR from 2002 through 2007 is
wealth of new opportunities to increase productivity and
expected to be 2.8 percent to $56.6 billion at the end of
refocus your energy to the core value you bring to your
the forecast period. This represents a period of modest
customers. Moreover, HP is reducing these risks by selling
growth in factory revenue for the overall server market,
and supporting the major distributions.
although some market segments, such as the Linux,
Benefits
Windows� and blade server market segments, are
expected to grow at faster rates. In particular, IDC
There are many significant benefits to using Linux. One
forecasts that Linux will grow from its 2002 market share
benefit via the software licensing terms is the ability to
of 4.6 percent to 16.1 percent by the end of 2007 and its
access and modify the source code, which can be
revenue increase from 2002�s $2,295M to $9,128M by
important if you need to make changes to fit your needs.
the end of 2007 � a 31.8 percent CAGR.ii
The fact that Linux can be freely copied, subject to reason-
able license terms, without payment of royalties is one of
Risks
the main business advantages of Linux. Affordability is a
Linux is just twelve years old, and with its relative newness
key factor; even though the initial negligible price of Linux
comes some risks and the question �Is it enterprise
software puts it in a class by itself, initial price isn�t the
ready?� � which translates into �Does it have the broad
only consideration. Ongoing operational expenses,
range of tools and capabilities to manage large environ-
licensing fees and support costs can make the initial costs
ments available with UNIX� or Windows?� HP and other
seem insignificant. The open source code makes Linux
hardware and software vendors are working diligently to
simple to administer, users have no licensing fees to pay
increase Linux features and tools to meet other operating
and support can be inexpensive via the experts or the
4

Linux Consolidation
Linux community or by fixing it on your own through the
open source code. Many argue that Linux is backed by
expert support and can be easily customized to meet
Methods
specific operating needs. In the enterprise, Linux has a
proven track record when it comes to solid availability in
IT consolidation takes many different forms, depending on
areas such as web serving and edge services, at a much
the existing infrastructure and business objectives.
lower cost than other environments. Servers running Linux
Because of its flexibility, you can apply Linux to any of
have been known to run for months, even years, without
several different types of consolidation:
needing to reboot.
� Collocation. Gathering widely distributed systems into
Control is another notable benefit. Because Linux
fewer locations is often the quickest way to realize the
resembles UNIX, the transition to Linux can be an easy
financial benefits of consolidation. Management and
and welcome one. And while security on any system
operation costs decrease while security, usage and
depends on the IT staff�s attentiveness and oversight, Linux
availability increase.
excels as a secure operating system, due to the many
additional security related software packages bundled
� Hardware, application and data integration. Server inte-
with it. For maximum security and performance, you can
gration reduces the number of systems when more
custom-tailor services and even the operating system
powerful servers of the same architecture host a single
kernel itself with minimal effort.
application or multiple instances of a single application.
Centralizing storage and reducing the number of servers
With limited resources, companies are often reluctant to
enables you to lower operating costs while improving
allocate money for large-scale projects that don�t show
performance and maximizing the availability of applica-
clear and immediate ROI. Linux consolidation can provide
tions and data. Switching from numerous applications
additional savings that can help justify your consolidation
accessing multiple databases to Linux solutions running
project, and the savings on software licensing fees can
on fewer servers can help you standardize systems and
bolster the business case for IT consolidation.
applications. Combining different workloads on one
Established in June 2001, The Shared Hierarchical
server can reduce your total cost of operation (TCO)
Academic Research Computing Network (SHARCNET) is
and combining data of different formats onto Linux can
Canada�s largest high-performance computing (HPC)
reduce hardware needs.
research facility. SHARCNET is a consortium of five
� IT utility. Self-configuring components and the dynamic
Southwestern Ontario universities and two community
allocation of resources can dramatically boost server
colleges that provides HPC resources, at no cost, to the
and storage utilization for maximum cost-effectiveness.
Canadian and international research community. In
January 2003, SHARCNET implemented a 64-bit two-
Additionally, HP offers unique consolidation options that
way Intel� Itanium� 2 processor cluster with Linux, to
combine some of the above consolidation methods. HP
meet the demands for cluster computing of a growing
can help you build an infrastructure for an adaptive
research community, which is producing increasingly
enterprise by simplifying, streamlining and optimizing IT
larger, more complex sets of data. Based on positive
environments, making them more agile and able to adapt
results, and premised on a successful proposal to the
dynamically. The result is a more powerful, flexible
Canada Foundation for Innovation, SHARCNET plans to
platform that provides continuous and secure operations
implement an Itanium-based XC solution across its
and lowers the cost of managing change.
computing sites.
HP Utility Data Center
�We wanted to maintain a 64-bit architecture because
research applications, especially those with large,
The HP Utility Data Center (UDC) is a highly integrated
complex data sets, are better suited to this for floating-
and consolidated environment that you can efficiently
point operations,� said Gary Molenkamp, system
manage to furnish IT services on demand. Data center
administrator, SHARCNET. �The implementation of the
virtualization via HP�s UDC offers a higher-level abstrac-
Itanium 2-based servers provided an excellent migration
tion of resources in which groups of servers, storage and
path from the Alpha-based technology upon which
network elements can be provisioned or reallocated on
SHARCNET�s original compute infrastructure was established.
the fly to meet the needs of a new IT service or handle
The Alpha is now an end-of-life technology, and, since
dynamically changing workloads and reduce operational
many high-end UNIX servers (such as HP Superdome
costs. The HP UDC is unique in offering a master software
systems) are migrating to the Itanium processor, the
environment, known as Utility Controller Software, which
implementation of this cluster allows researchers to
can manage all of the virtualized environments � server,
develop and test code on this platform now, instead of
storage and networking � in a coherent and integrated
two years from now. For SHARCNET, the Itanium 2-based
manner. The HP UDC with Utility Controller Software
HP solution was one of forwarding thinking.�
creates and runs virtual IT environments as a highly
5

CalPERS: Building a model adaptive
meeting capacity needs with a service approach rather
than a box approach through IT consolidation with HP
infrastructure
Superdome technology.
With assets of more than $150 billion, the California Pub-
When the decision was made to host new front-end web
lic Employees Retirement System (CalPERS) is the nation�s
applications on the Linux Red Hat operating system,
largest pension fund, providing retirement and health
CalPERS�s new adaptive infrastructure made it easy to roll
benefits to 1.4 million members and more than 2,500
this cost-effective platform on HP ProLiant servers. With
employees. Its clients are active and retired employees
some fine-tuning for Linux, CalPERS could use most of the
and their families from state and local government, school
standards, processes and procedures already established
districts, and public agencies.
for the HP-UX environment. With a streamlined, more
As with many distributed enterprises, CalPERS had man-
manageable infrastructure and a highly professional IT
aged growth by adding servers for each new major
service operation, CalPERS has kept staff and costs at a
application. When the data center reached the limits of
minimum while improving service levels, increasing
capacity and floor space with eight HP-UX T600 and
uptime and supporting roughly three times the number of
three K-class systems, HP recommended a new strategy�
applications that it did five years ago.
Running Linux on HP Integrity
automated service. Simplified delivery of that service
optimizes asset utilization and reduces staffing loads.
Superdome
Once wired, your infrastructure can be reconfigured
As early as 2002, HP demonstrated its Intel Itanium 2-
flexibly and dynamically with minimum effort to respond
based HP Superdome server running multiple operating
quickly to windows of market opportunity. Total cost of
environments � HP-UX, Windows and Linux � concur-
ownership is reduced dramatically through process
rently within a single system in three separate partitions.
automation, standardization, simplification and improved
This highlights HP�s ability to deliver multi-OS functionality
resource utilization. And overall QoS improvements are
on the industry-standard Intel Itanium architecture to meet
realized through rapid, automated resource provisioning.
the diverse customer workload requirements typical of
The HP UDC�s simple design allows you to wire your
today�s enterprise computing environments. As businesses
infrastructure just once. Any reallocation of resources can
look to improve operational efficiencies and reduce costs,
now be done with drag-and-drop simplicity. As a result,
consolidating applications and workloads on their
this new programmable data center approach lets you
enterprise servers represents an effective means for
manage more IT resources with less IT staff. The HP UDC
increasing the return on their technology investments. By
with Utility Controller Software reduces costs and
allowing multiple applications and operating systems to
improves IT flexibility through:
run in a partitioned environment, the highly available HP
Superdome server provides the benefits of better manage-
� Virtualized network resources, permitting drag-and-drop
ability, scalability and flexibility. A 64-way HP
�rewiring� of servers and related assets to create entire
Superdome system can run HP-UX 11i, Windows and
virtual IT environments.
Linux operating environments concurrently in three
� Virtualized storage resources, for secure, effective stor-
different hardware partitions. The configuration of the
age partitioning.
server includes:
� Advanced data center management software, allowing
� Four-way partition running HP-UX 11i with the Oracle�
resources to be automatically reassigned in response to
9.2 database and HP-UX Systems Administration
changing business and IT requirements.
Manger.
� Twenty-way partition running an RC2 version of
Microsoft� Windows .NET Server 2003 Data center
Edition, 64-bit Microsoft SQL Server Enterprise Edition,
and Windows System Resource Manager.
� Four-way partition running Linux with Linux desktop
applications.
6

First Trust Corporation: Threefold performance improvement for rapid growth
database administrator for First Trust. �They allow us to
As one of the nation�s largest independent trust
deploy databases faster and to scale up quickly as our
companies for self-directed retirement plans, First Trust
business demands it.�
Corporation handles transactions equaling millions of dol-
lars per day on behalf of financial intermediaries. �At First
Another major advantage of moving to the HP, Red Hat,
Trust, we process transactions for financial intermediaries
and Intel solution is that it provides an industry-standard
that have extremely high expectations for service levels,�
architecture that can accommodate the multiple solutions
says Jeff Knight, vice president of technology and vendor
First Trust needs to deploy. A standard Itanium 2�based
relations for First Trust. �High availability and the ability
platform allows the company to choose from a broad
to recover in seconds are absolute requirements for
range of software, solutions and components. The ability
remaining competitive and ensuring client satisfaction.�
to run multiple operating systems on a single platform by
taking advantage of the unique Intel Itanium 2
First Trust�s business is expanding rapidly, especially in
microarchitecture is also benefiting First Trust. The compa-
the area of equities transaction processing. The company
ny uses VMware virtualization software on Windows for
wanted to improve the performance and scalability of its
development and quality assurance for its transaction pro-
trading support system to accommodate more
cessing system, but its production environment is Linux. As
transactions and more clients. In addition to these require-
a result, First Trust is able to achieve a higher return on
ments, uptime was critical to ensure 24×7 customer
investment by moving to a single hardware platform for
support, security and failover capabilities. To remain com-
both testing and quality assurance. �With the HP and
petitive with other financial services organizations, one of
Intel solution, we can consolidate our development and
First Trust�s requirements was having a cost-effective solu-
deployment processes onto one standard platform, reduc-
tion to meet its immediate and long-term goals.
ing costs and simplifying development and system
To create a state-of-the-art equity and mutual fund trans-
administration,� explains Garner.
action processing system, First Trust deployed a cluster of
In the financial services world, many companies are mov-
four 2-way HP Integrity rx2600 servers running Oracle9i
ing toward real-time computing to deliver information to
Real Application Clusters (RAC) and Red Hat Enterprise
customer service representatives and customers over the
Linux AS. The new industry standards�based system has
Web. Knight also sees mobile communications and the
exceeded expectations, delivering 99.99 percent uptime
ability for employees and customers to access information
and a threefold performance improvement over the com-
from anywhere, at any time, using wireless devices
pany�s previous IBM RISC-based trading system running
becoming more important. �In the near future, First Trust
on AIX.
will need to become even more responsive to employees
Using Oracle9i RAC systems has also helped First Trust
and clients, and in new, innovative and more convenient
improve the uptime of the solution. �Oracle9i RAC
ways,� says Knight. �HP Integrity servers will be a factor
clusters on Itanium 2�based HP Integrity servers running
in our future strategies.�
Linux helps us be competitive,� says Bill Garner, lead
VMware
Ideally suited to corporate IT and service provider data
centers, VMware ESX Server works by partitioning
HP and VMware have teamed up to provide VMware�s
physical servers into secure virtual servers. Different
ESX Server software on HP servers and blades, helping
operating systems and applications are isolated within
companies not only to implement server consolidation, but
their own virtual servers and can safely coexist on a
also to streamline development and testing, to improve
single HP server. Hardware resources are dynamically
availability and disaster recovery and to facilitate the
allocated to the virtual machine �as required by its
coexistence of multiple operating systems � including
workload or as specified by its administrator. The result is
Linux, Windows and NetWare � on one physical server.
a level of infrastructure control more typical of a
With the introduction of Virtual Center� and VMotion�,
mainframe, at a fraction of the cost.
joint customers can now also centrally manage their
virtual compute resources and dynamically move
HP servers running VMware�s virtual infrastructure
workloads across ESX Servers without service interrup-
technology create secure, fault-resistant partitions with
tions. Virtualization is defined as an approach to IT that
guaranteed performance levels. Companies can reduce
pools and shares resources so utilization is optimized and
operational expenses and capital costs by running
supply automatically meets demand.
services and applications on virtual machines instead of
7

on dedicated hardware. Integrated with HP�s ProLiant
hardware devices and memory. This allows you to run
Essentials software, VMware ESX Server simplifies server
operating systems and software within the emulator on
infrastructure by partitioning and isolating server
your workstation � similar to having a machine inside of
resources so they can be remotely managed and
a machine.
automated. Because VMware runs natively on the
Ensim
hardware without a host operating system for ultimate
performance, ESX Server should run on compatible HP
Ensim� and HP offer joint hosting management solutions
hardware (as outlined in VMware�s compatibility guide on
for service providers. Ensim�s award-winning solutions for
www.VMware.com.)
Linux and Windows offer fully automated hosting
management. Ensim WEBppliance has four interfaces to
Consolidation doesn�t have to mean homogenization. For
delegate administration to specific user roles and a
many companies, a combined Linux/Windows environ-
common interface for Linux and Windows-based testing. It
ment makes the most sense. With VMware software, HP
is designed for a range of HP ProLiant servers. Joint
ProLiant servers can run heterogeneous versions of Linux
solutions components include Ensim Virtual Private Server,
and Windows on a single server.
Ensim server manager and HP ProLiant Servers.
Partitioning also helps VMware ESX Server to bolster HP
Workload Management
servers� already strong data protection capabilities by
allowing critical data to be secured in isolated virtual
The type or makeup of the workload that you envision
machines. You can use these virtual machines to mirror
migrating to Linux not only will have a large impact on
physical servers or act as failover servers to increase
the hardware resources needed, but it will also affect the
availability. VMware ESX Server also helps streamline
possible economics of reduced personnel resources.
and economize development and testing processes. Using
Therefore, identify workloads accurately as early as
virtual rather than physical machines enables developers
possible. The classic environments typically slated for
to execute realistic simulations and tests of sophisticated
migration to Linux are:
systems without acquiring new hardware.
� File and print, monitoring basic network functions such
The benefits of the HP/VMware solution should not come
as file sharing and remote printing.
at the price of restricting future growth. With VMware
� E-mail, including SMTP mail and authentication.
VirtualCenter and VMotion, a system can be moved easily
and quickly to a larger or dedicated computer when your
� Web/Internet, ranging from simply serving static web
needs grow beyond the capacity of a hardware platform,
pages to ostensibly delivering a customized Web site to
and migrations and maintenance can occur without
every user.
interruption to users.
� Firewall/Other I/O bound applications, including fire-
Wine and Bochs
walls, LDAP directories and other applications that
access data across multiple systems.
In addition to VMware, other applications have been
designed to enable Microsoft Windows- based applica-
� Business intelligence, including applications such as
tions to run on the Linux operating system.
data warehousing that typically are I/O bound.
The Wine project does its job by forming a layer between
� Other CPU bound applications, including calculation-
the Microsoft Windows application and the Linux
intensive applications such as CAD/CAM and statistical
operating system, behaving more as an interpreter than a
packages.
full emulator. Think of Wine as a Windows compatibility
layer that does not require Microsoft Windows. More than
� Mixed workload, servers that are running more than
1,000+ applications run under Wine. With Wine, you
one application.
can take advantage of all the UNIX strong points such as
stability, flexibility and remote administration while still
using the Windows applications you depend upon. Wine
is open source software, so you can extend it to suit your
needs.
Bochs is a PC emulation package written in C++ that can
run many Microsoft Windows applications. Currently,
Bochs can run most operating systems inside the
emulation, including Linux, Windows 95, DOS and
Windows NT 4. Bochs can be compiled and used in a
variety of modes. The typical use of Bochs is to provide
complete x86 PC emulation, including the x86 processor,
8

TCO studies
new applications and ongoing maintenance of those
custom applications. Other factors can also affect the
TCO calculation, such as the kind of hardware (and how
IT consolidation should be an ongoing approach to
much of it) you�re using, whether you�re transitioning from
making your business more cost-efficient and improving
Windows or UNIX or starting from the ground up and if
the alignment between business and IT. Application and
your IT staff has any experience with a UNIX-like OS.
data reconfiguration, security, access rights, storage
Analyst firm IDC forecasts that as the entire Linux server
management, performance and maintenance are only a
market matures, TCO costs will come down due to wider
few of the issues that must be handled correctly. Another
availability of package applications for Linux servers and
obstacle is that obtaining funding for a consolidation
greater numbers of programmers and systems administra-
project is difficult without a clearly demonstrable and
tors with skill sets relating to the Linux server platform.
timely ROI.
A recent Gartner Group studyiv shows that enterprises that
Although Linux servers, especially small ones, can be less
tend to install Linux on client desktops will save $80 in
expensive than many traditional UNIX/RISC servers, it�s
hardware acquisition costs and an average of $74 per
important to take into account the total cost of ownership
user per year on office automation software. Table 1
(TCO). To determine whether long-term ownership of Linux
presents a TCO comparison using the typical numbers of
servers is truly less expensive than entry-level UNIX or
ten servers, 3,000 GB of storage, 5,000 users, and an
Windows servers, you�ll need to examine all aspects of
average transaction value per hour of 258,250.
ownership, including custom programming, deployment of
Table 1. A value calculator from
TCO Comparison: Sun Solaris vs. HP Linux ProLiant
Alineanv, the IT value experts, esti-
mates the potential TCO savings
Sun Solaris
HP Linux ProLiant
Savings with HP Linux
and benefits of migrating from your
current business computing platform
Hardware
$178,531
$70,130
$108,401
to Linux on HP ProLiant servers.
Software
$120,000
$66,000
$54,000
IT Operations
$620,116
$181,913
$438,203
IT Administration
$49,797
$29,175
$20,622
Facilities and Overhead
$50,000
$20,000
$30,000
Downtime
$46,485
$104,592
$-58,107
TCO Summary
$1,064,929
$471,810
$593,119
Savings with HP Linux
56%
TCO per System
$106,493
$47,181
$59,312
TCO per User
$213
$94
$119
9

To accomplish an accurate TCO analysis for a Linux
mainframe. These include increasingly high cost of
migration, detailed cost data must be available for
ownership as skills become scarcer and legacy applica-
hardware, software, IT operations, IT administration, facili-
tions and hardware need to be maintained and a lack of
ties and overhead and downtime (as Table 1 shows). It
flexibility/new applications, which would inhibit growth
may also be relevant to include storage and networking
and limit server utilization. Counterintuitive as it may
costs as well as support and maintenance.
seem, some companies are running Linux on their
mainframes. If you are considering running Linux on your
It is only after you examine all of the cost categories that
mainframe, be aware of these limitations:
you can fully appreciate the economic impact that Linux
may have. For example, Table 2 gives the estimated
� To run Linux on a mainframe, you�ll need to run a Linux
budgeted TCO of a mainframe versus Linux on an Intel
partition, and you will still need a mainframe OS to give
system is as follows:
you the LPAR partitioning functionality.
� Only three of the 265 available Linux versions today are
Costs of Linux on an Intel System
specially designed for the mainframe. To date, these
include special mainframe versions of SuSE, TurboLinux,
Cost Category
Linux/Intel
New Mainframe
and Red Hat (32-bit only).
Hardware
$497,822
$5,700,041
� If you currently have fewer than 20 Linux/Intel (Lintel)
Storage
$124,807
$156,009
servers, consolidating onto the mainframe will not pro-
Software
$776,700
$1,163,600
vide a cost advantage.
Services
$188,496
$227,290
� All but one vendor (IBM) has exited the mainframe mar-
ket.
Network
$449,987
$839,987
� Linux on a mainframe supports only a few hundred ISV
Facilities
$209,752
$225,185
applications, compared to the thousands that run on Lin-
Personnel
$1,759,498
$1,199,658
tel. This does not provide the same investment protection
as Linux on Intel Itanium 2 Superdome.
Downtime
$1,234,800
$749,146
� The mainframe does not work well with UNIX and other
Support and Maintenance
$577,379
$777,113
server lines.
Total Cost of Ownership
$5,819,242
$11,038,028
� The initial entry costs and ongoing maintenance are
For example, to make a traditional purchase decision
expensive.
Table 2. This presents your budget-
ed cost of ownership over the life of
based on an acquisition price (hardware and software),
your analysis length, showing raw
� There are hidden software, maintenance and hardware
Table 2 indicates that a Linux/Intel based solution would
cost data before adjusting for tax
component costs.
be the winner. Yet those costs rarely amount to as much
and present value effects. It summa-
rizes the amount you will need to
as 40 percent of the TCO. As a result, acquisition costs
� The technology � and certified mainframe technicians
budget to your Linux migration over
can be deceiving at best and, at worst, can lead to
� are aging.
the time span you have chosen.vi
dismal platform decisions.
� Only about 250 Linux applications are supported on the
However, note that many factors � which may not be
mainframe vs. thousands on Intel.
easily foreseen or controlled � can affect TCO calcula-
tions and realizations. A recent Gartner symposium
Case Studies
indicates that most of the financial benefits of Linux are
HP�s proven commitment to both Linux and IT consol-
clearly cost acquisition-driven and could be affected to
idation is evident not only in its record of success
some degree by your IT organization in ongoing
working with partners, but also in its own IT
operational efficiencies, which may be directly or tangen-
infrastructure: HP reduced its own data centers from
tially a result of Linux. For example, poor provisioning,
153 to just 7, lowering costs by 40 percent. No ven-
management and server utilization could counter the
reduced license, maintenance and capital costs of the
dor has more experience helping companies do
hardware.vii
more with less, and HP continues to consolidate and
optimize its infrastructure as a matter of course.
Comparing Linux/Mainframe to
Linux/Intel
While other companies might specialize in one or two
areas of consolidation, HP�s consolidation experts can
While the mainframe does provide certain advantages
handle your entire consolidation project or execute any
and strengths, there are many reasons to migrate off of a
10

gies. Itanium 2 can, on Linux and HP-UX, provide more
part of it, including assessment, design, planning, testing,
freedom of choice and more flexibility with IA vs. RISC.
piloting and installment. That might be one reason HP
was ranked number one in a 2002 IDC customer server
Lower Saxony Police: Access anywhere
and storage consolidation study.
Lower Saxony police needed to be able to deal with
Key partnerships with software leaders such as Oracle,
crime and emergencies around the clock in Germany�s
SAP and Brocade help HP provide end-to-end consolida-
second largest state. Its applications are mission critical
tion solutions. Only HP supplies a complete storage
and data intensive; they include operative, administrative
solution for Linux environments, including consulting and
and statistical and management information tasks. In the
support services, SAN infrastructure, disk arrays, manage-
past, individual police forces in the area had separate,
ment solutions with integration into enterprise
incompatible IT systems at 600 police stations that were
management tools and value-added programs such as
not connected, creating cost overheads, operational ineffi-
Instant Capacity on Demand. HP makes Linux consolida-
ciencies and delays in the fight against crime.
tion easy with a comprehensive program of consulting
The solution was IT consolidation with Linux, with a
services, including data migration, backup integration
balanced, distributed architecture with unified information
and SAN integration.
system for criminal records, investigative data and
HP�s comprehensive Porting and Migration Services
administrative needs, with Intel Itanium 2-based HP
maximize the benefits of IT consolidation, enabling a
ProLiant Servers (20 at the headquarters and 100 at
smooth transition from legacy environments to HP servers.
stations). The solution includes BEA WebLogic Server 8.1
HP can protect investments in legacy systems by migrating
and WebLogic JRockit, a central database repository
applications, data or both to the HP Linux platform.
based on Oracle9i*, Red Hat Linux and HP-UX operating
During an initial feasibility phase of a consolidation
systems, and Intel Pentium� 4 processor-based PCs for
project, HP consultants help companies evaluate the best
information access. �In the area of central servers, the
options for their needs.
Intel Itanium 2-based HP servers reduce the complexity in
our customers� IT environments. With HP Itanium 2-based
Platform implementation and optimization services�
servers, we can run on a single hardware architecture,
rehosting, refronting and rebuilding�help ensure a
even though more than one OS is required,� said Roland
smooth, low-risk, cost-optimized transition, while
von Bethusy-Huc, senior manager, Mummert Consulting.
operational management assistance and remote
monitoring address resourcing and project management
�We�re using HP servers based on the Intel Itanium 2
concerns. Educational consulting, mentoring and skills
processor in our central environment. That allows us to
management support IT and development staff throughout
administer and operate different operating systems on
the transition.
similar hardware architecture at a low cost,� said Axel
K�hler, project manager, Lower Saxony Police.
All these services help lower TCO by reducing staffing
and training requirements for hardware and software,
The results are rapid access to criminal proceedings,
accelerating the introduction of new features and services
investigations and administration info throughout the state,
and enabling the implementation of data center best
exceptional performance and rapid response times for the
-practices.
11,600 distributed users, lower cost of ownership and
capital expenses by running HP-UX and Linux on a
The BMW Group: Two to three times performance
common platform and outstanding reliability for mission-
BMW is an internationally renowned manufacturer of
critical computing.
prestigious cars, recognized around the world. The BMW
Group uses its motto �Driving ahead� both as an aspira-
Conclusion
tion and a motivation. The company�s will to be ahead is
the result of a passion for mobility and a continued drive
for improvement. From this aspiration flows the energy
IT consolidation solves many of the problems prevalent in
that makes the company successful.
today�s data center, and Linux offers an attractive
package of flexibility, scalability and reliability. As you
The BMW Group in Europe needed to simulate large car
build for the future, make sure you have the right master
models on NASTRAN and had a high demand for large
plan. Then lay a strong foundation with the three Linux
I/O bandwidth and performance in a CAE supercom-
pillars: HP hardware platforms, HP enterprise software
puter data center. Its solution was 12 x 4 way HP Itanium
and HP services. In addition, be sure to partner with the
2-based servers and Nastran (MSC), Pamcrash (ESI) and
right builder � one who can help you achieve maximum
Linux.
return on IT investment.
BMW reported results of two to three times more perform-
IT consolidation and Linux are both means to the same
ance than the fastest RISC systems. It showed the best I/O
end: doing more with less�which makes Linux a good
bandwidth with HP servers of all tested server technolo-
choice for consolidation efforts.
11

Endnotes
iv Gartner Group, Linux on the Desktop: The Whole Story
http://www.gartner.com/DisplayDocument?id=40645
9, August 8, 2003.
i Mark Melenovsky, Stephen L. Josselyn, Matthew East-
v Hewlett-Packard Company and Alinean, Value calcula-
wood, Thomas Meyer, Ricardo Villate, Masahiro
tor: The Value of Linux on HP
Nakamura, Avneesh Saxena, Rajnish Arora, Roman
http://h10018.www1.hp.com/wwsolutions/linux/dow
Mace.ka, Alan Freedman, Greg Ambrose, Jean S. Boz-
nload/tco/HPLinuxTCOCalculator.html, Copyright
man, IDC MARKET ANALYSIS Worldwide and U. S.
2002-2003.
Server Forecast Update, 2002-2007, October 2003,
page 9.
vi CIOview Corp, The Financial Impact of Migrating to
Linux, www.cioview.com, Copyright 2002. Page 3.
ii Mark Melenovsky et al., IDC MARKET ANALYSIS
Worldwide and U.S. Server Forecast Update, 2002-
vii George Weiss, The March of Linux in the Enterprise:
2007, October 2003, page 35.
How Far, How Fast, 41A, SYM13, AE, Gartner Sympo-
sium/ITxpo 2003, Lake Buena Vista, Florida, 20-24
iii Ted Schadler with Charles Rutstein, Forrester Research
October 2003, Walt Disney World.
Inc. WholeView TechStrategy Research: Linux is More
Than Ready for the Enterprise, June 24, 2003, page 1.
To learn more about HP�s offering, visit www.hp.com/linux.
� 2004 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP
products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as
constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.
Intel and Itanium are trademarks or registered trademarks of Intel Corporation in the U.s. and other countries and are used under license. Linux� is a
registered trademark of Linux Torvalds.
5982-3629EN, 02/2004

Posted in Linux, Networking, Opetaring System | Leave a Comment »

Quicky Setup – Linux and Windows XP/2000 dual bootLinux Pengiun Installing Dual boot Windows XP/2000 and Linux? & Chain-loading Windows XP/2000 and Linux using Grub

Posted by petanidigital on January 20, 2008

  1. Use fdisk to partition your drive properly.
  2. Download an burn 3 Mandrake 8.2 CDs or your favorite distro
  3. Install Windows XP/2000 on the first partition, make sure you use fat 32 as your file system, not xp ntfs
  4. Start your Linux Installation and install the /root directory into the second partition.
    Install GRUB into the first sector of your boot partition (usually /boot) and not in the MBR. (Note there are reported problems with lilo)
  5. Make a boot disk during the Linux installation if possible so that you can boot into it.
  6. Now boot into Linux and copy the boot image from the boot sector. To do this run:
    dd if=/dev/hdan of=/bootsect.lnx bs=512 count=1
    , where /dev/hdan is the location of /boot and /bootsect.lnx is the Linux boot image.
  7. Copy this bootsect.lnx file to a safe location where you can reach it using Windows.
  8. Reboot into Windows XP/2000 and copy this bootsect.lnx file into the root directory (C:\).
  9. Edit c:\boot.ini and append the following line: c:\bootsect.lnx=”Linux”.
  10. Reboot your system and boot directly from the hard disk.
  11. The Windows XP/2000 boot loader should now give you the option of booting into either Windows XP/2000 or Linux.
  12. Try booting into both of them to see if you were successful.

    See linux docs for more info

    Troubleshooting

    What to do if if the actual boot code is *not* installed in /boot, but in the MBR?
    When the system gets ready to make the boot sector, it creates a file in /boot
    called boot.xxxx where xxxx is some number. (In his case, it was 0300 again IIRC.) This file is 512 bytes long to match the boot sector size. Copy this file into the bootsect.lnx
    and boot into Linux.

    Your Master Boot Record (MBR) is toast
    type: lilo -u /dev/hda in linux to remove lilo
    Boot to MS-DOS and type fdisk /mbr

    How to use Grub to Chainload XP Professional or Windows 2000

The trick is to preformat the drives . By preallocating all four primary partition slots, you ensure windows xp installs on a primary partition instead of a logical drive.

To do this you must first either use fdisk (dos boot disk) to format the drives or linux.

  1. One way of doing this is to first install linux. Boot Red Hat 7.2/Mandrake 8.2 install CD, use its partition management to wipe all existing partitions and set up the partition set,including a primary partition for WinXP (which you mark as type fat32 or EXT2).
  2. Boot Windows XP install CD. It will refuse to reformat the partition made in step 1, so it instead deletes and recreates that partition as an Win32 partition. Then finish the install normally.
  3. Again boot Mandrake/RH install CD; and tell it to install GRUB in the boot partition, not on the MBR; complete the install.
  4. This leaves you with a working system that will autoboot into Windows,
    since Windows had set the partition table to mark its own partition as
    active (bootable). Then use sfdisk to mark the boot partition as active
    (sfdisk -A1 /dev/hda) and you have a working dual-boot system.
  5. There is no evidence that the Windows installer mucks with the other
    partitions. It does, however, mark its install partition as active,
    so make sure you make a Linux boot floppy so you can get back into Linux
    to run sfdisk.

Again: GRUB can chain to WinXP’s boot code when WinXP is in a primary partition, but not when it’s in a logical partition. And you must make sure to reinstall grub after windows XP.

Posted in Networking, Opetaring System | Leave a Comment »

IPv6 or IPng (IP Next generation):

Posted by petanidigital on January 20, 2008

IPv6 is short for “Internet Protocol Version 6″. IPv6 is the “next generation” protocol designed by the IETF (The Internet Engineering Task Force) to replace the current version Internet Protocol, IP Version 4 (“IPv4″). The IP v 6 specifications are in rfc2460.Most of today’s internet uses IPv4, which is now nearly twenty years old. IPv4 has been remarkably resilient in spite of its age, but it is beginning to have problems. Most importantly, there is a growing shortage of IPv4 addresses, which are needed by all new machines added to the Internet.

IPv6 fixes a number of problems in IPv4, such as the limited number of available IPv4 addresses. It also adds many improvements to IPv4 in areas such as routing and network autoconfiguration. IPv6 is expected to gradually replace IPv4, with the two coexisting for a number of years during a transition period.

Contents 1 Introduction
2.0 Key Issues
3.0 History of the IPng Effort
4.0 IPng Overview
5.0 IPng Header Format
6.0 IPng Extensions
7.0 IPng Addressing
8.0 IPng Routing
9.0 IPng Quality-of-Service Capabilities
10. IPng Security
11. IPng Transition Mechanisms
12. Why IPng?


1. Introduction
This paper presents an overview of the Next Generation Internet Protocol (IPng). IPng was recommended by the IPng Area Directors of the Internet Engineering Task Force at the Toronto IETF meeting on July 25, 1994, and documented in RFC 1752, “The Recommendation for the IP Next Generation Protocol” [1]. The recommendation was approved by the Internet Engineering Steering Group on November 17, 1994 and made a Proposed Standard.The formal name of this protocol is IPv6 (where the “6″ refers to it being assigned version number 6). The current version of the Internet Protocol is version 4 (referred to as IPv4). This overview is intended to give the reader an overview of the IPng protocol. For more detailed information the reader should consult the documents listed in the reference section.

IPng is a new version of IP which is designed to be an evolutionary step from IPv4. It is a natural increment to IPv4. It can be installed as a normal software upgrade in internet devices and is interoperable with the current IPv4. Its deployment strategy was designed to not have any “flag” days. IPng is designed to run well on high performance networks (e.g., ATM) and at the same time is still efficient for low bandwidth networks (e.g., wireless). In addition, it provides a platform for new internet functionality that will be required in the near future.

This paper describes the work of IETF IPng working group. Several individuals deserve specific recognition. These include Paul Francis, Bob Gilligan, Dave Crocker, Ran Atkinson, Jim Bound, Ross Callon, Bill Fink, Ramesh Govindan, Christian Huitema, Erik Nordmark, Tony Li, Dave Katz, Yakov Rekhter, Bill Simpson, and Sue Thompson.

2.0 Key Issues
There are several key issues that should be considered when reviewing the design of the next generation internet protocol. Some are very straightforward. For example the new protocol must be able to support large global internetworks. Others are less obvious. There must be a clear way to transition the current large installed base of IPv4 systems. It doesn’t matter how good a new protocol is if there isn’t a practical way to transition the current operational systems running IPv4 to the new protocol.


2.1 Growth Growth is the basic issue which caused there to be a need for a next generation IP. If anything is to be learned from our experience with IPv4 it is that the addressing and routing must be capable of handling reasonable scenarios of future growth. It is important that we have an understanding of the past growth and where the future growth will come from.Currently IPv4 serves what could be called the computer market. The computer market has been the driver of the growth of the Internet. It comprises the current Internet and countless other smaller internets which are not connected to the Internet. Its focus is to connect computers together in the large business, government, and university education markets. This market has been growing at an exponential rate. One measure of this is that the number of networks in current Internet (40,073 as of 10/4/94) is doubling approximately every 12 months. The computers which are used at the endpoints of internet communications range from PC’s to Supercomputers. Most are attached to Local Area Networks (LANs) and the vast majority are not mobile.

The next phase of growth will probably not be driven by the computer market. While the computer market will continue to grow at significant rates due to expansion into other areas such as schools (elementary through high school) and small businesses, it is doubtful it will continue to grow at an exponential rate. What is likely to happen is that other kinds of markets will develop. These markets will fall into several areas. They all have the characteristic that they are extremely large. They also bring with them a new set of requirements which were not as evident in the early stages of IPv4 deployment. The new markets are also likely to happen in parallel with one another. It may turn out that we will look back on the last ten years of Internet growth as the time when the Internet was small and only doubling every year. The challenge for an IPng is to provide a solution which solves todays problems and is attractive in these emerging markets.

Nomadic personal computing devices seem certain to become ubiquitous as their prices drop and their capabilities increase. A key capability is that they will be networked. Unlike the majority of todays networked computers they will support a variety of types of network attachments. When disconnected they will use RF wireless networks, when used in networked facilities they will use infrared attachment, and when docked they will use physical wires. This makes them an ideal candidate for internetworking technology as they will need a common protocol which can work over a variety of physical networks. These types of devices will become consumer devices and will replace the current generation of cellular phones, pagers, and personal digital assistants. In addition to the obvious requirement of an internet protocol which can support large scale routing and addressing, they will require an internet protocol which imposes a low overhead and supports auto configuration and mobility as a basic element. The nature of nomadic computing requires an internet protocol to have built in authentication and confidentiality. It also goes without saying that these devices will need to communicate with the current generation of computers. The requirement for low overhead comes from the wireless media. Unlike LAN’s which will be very high speed, the wireless media will be several orders of magnitude slower due to constraints on available frequencies, spectrum allocation, error rates, and power consumption.

Another market is networked entertainment. The first signs of this emerging market are the proposals being discussed for 500 channels of television, video on demand, etc. This is clearly a consumer market. The possibility is that every television set will become an Internet host. As the world of digital high definition television approaches, the differences between a computer and a television will diminish. As in the previous market, this market will require an Internet protocol which supports large scale routing and addressing, and auto configuration. This market also requires a protocol suite which imposes the minimum overhead to get he job done. Cost will be the major factor in the selection of an appropriate technology.

Another market which could use the next generation IP is device control. This consists of the control of everyday devices such as lighting equipment, heating and cooling equipment, motors, and other types of equipment which are currently controlled via analog switches and in aggregate consume considerable amounts of electrical power. The size of this market is enormous and requires solutions which are simple, robust, easy to use, and very low cost. The potential pay-back is that networked control of devices will result in cost savings which are extremely large.

The challenge the IETF faced in the selection of an IPng is to pick a protocol which meets today’s requirements and also matches the requirements of these emerging markets. These markets will happen with or without an IETF IPng. If the IETF IPng is a good match for these new markets it is likely to be used. If not, these markets will develop something else. They will not wait for an IETF solution. If this should happen it is probable that because of the size and scale of the new markets the IETF protocol would be supplanted. If the IETF IPng is not appropriate for use in these markets, it is also probable that they will each develop their own protocols, perhaps proprietary. These new protocols would not interoperate with each other. The opportunity for the IETF is to select an IPng which has a reasonable chance to be used in these emerging markets. This would have the very desirable outcome of creating an immense, interoperable, world- wide information infrastructure created with open protocols. The alternative is a world of disjoint networks with protocols controlled by individual vendors.

2.2 Transition At some point in the next three to seven years the Internet will require a deployed new version of the Internet protocol. Two factors are driving this: routing and addressing. Global internet routing based on the on 32-bit addresses of IPv4 is becoming increasingly strained. IPv4 address do not provide enough flexibility to construct efficient hierarchies which can be aggregated. The deployment of Classless Inter- Domain Routing [2] is extending the life time of IPv4 routing by a number of years, the effort to manage the routing will continue to increase. Even if the IPv4 routing can be scaled to support a full IPv4 Internet, the Internet will eventually run out of network numbers. There is no question that an IPng is needed, but only a question of when.The challenge for an IPng is for its transition to be complete before IPv4 routing and addressing break. The transition will be much easier if IPv4 addresses are still globally unique. The two transition requirements which are the most important are flexibility of deployment and the ability for IPv4 hosts to communicate with IPng hosts. There will be IPng- only hosts, just as there will be IPv4-only hosts. The capability must exist for IPng-only hosts to communicate with IPv4-only hosts globally while IPv4 addresses are globally unique.

The deployment strategy for an IPng must be as flexible as possible. The Internet is too large for any kind of controlled roll out to be successful. The importance of flexibility in an IPng and the need for interoperability between IPv4 and IPng was well stated in a message to the sipp mailing list by Bill Fink, who is responsible for a portion of NASA’s operational internet. In his message he said:

“Being a network manager and thereby representing the interests of a significant number of users, from my perspective it’s safe to say that the transition and interoperation aspects of any IPng is *the* key first element, without which any other significant advantages won’t be able to be integrated into the user’s network environment. I also don’t think it wise to think of the transition as just a painful phase we’ll have to endure en route to a pure IPng environment, since the transition/coexistence period undoubtedly will last at least a decade and may very well continue for the entire lifetime of IPng, until it’s replaced with IPngng and a new transition. I might wish it was otherwise but I fear they are facts of life given the immense installed base.”Given this situation, and the reality that it won’t be feasible to coordinate all the infrastructure changes even at the national and regional levels, it is imperative that the transition capabilities support the ability to deploy the IPng in the piecemeal fashion… with no requirement to need to coordinate local changes with other changes elsewhere in the Internet…

“I realize that support for the transition and coexistence capabilities may be a major part of the IPng effort and may cause some headaches for the designers and developers, but I think it is a duty that can’t be shirked and the necessary price that must be paid to provide as seamless an environment as possible to the end user and his basic network services such as e-mail, ftp, gopher, X-Window clients, etc…

“The bottom line for me is that we must have interoperability during the extended transition period for the base IPv4 functionality…”

Another way to think about the requirement for compatibility with IPv4 is to look at other product areas. In the product world, backwards compatibility is very important. Vendors who do not provide backward compatibility for their customers usually find they do not have many customers left. For example, chip makers put considerable effort into making sure that new versions of their processor always run all of the software that ran on the previous model. It is unlikely that Intel would develop a new processor in the X86 family that did not run DOS and the tens of thousands of applications which run on the current versions of X86’s.

Operating system vendors go to great lengths to make sure new versions of their operating systems are binary compatible with their old version. For example the labels on most PC or MAC software usually indicate that they require OS version XX or greater. It would be foolish for Microsoft come out with a new version of Windows which did not run the applications which ran on the previous version. Microsoft even provides the ability for windows applications to run on their new OS NT. This is an important feature. They understand that it was very important to make sure that the applications which run on Windows also run on NT.

The same requirement is also true for IPng. The Internet has a large installed base. Features need to be designed into an IPng to make the transition as easy as possible. As with processors and operating systems, it must be backwards compatible with IPv4. Other protocols have tried to replace TCP/IP, for example XTP and OSI. One element in their failure to reach widespread acceptance was that neither had any transition strategy other than running in parallel (sometimes called dual stack). New features alone are not adequate to motivate users to deploy new protocols. IPng must have a great transition strategy and new features.

3.0 History of the IPng Effort
The IPng protocol represents the evolution of many different IETF proposals and working groups focused on developing an IPng. It represents over three years of effort focused on this topic. A brief history follows:By the Winter of 1992 the Internet community had developed four separate proposals for IPng. These were “CNAT”, “IP Encaps”, “Nimrod”, and “Simple CLNP”. By December 1992 three more proposals followed; “The P Internet Protocol” (PIP), “The Simple Internet Protocol” (SIP) and “TP/IX”. In the Spring of 1992 the “Simple CLNP” evolved into “TCP and UDP with Bigger Addresses” (TUBA) and “IP Encaps” evolved into “IP Address Encapsulation” (IPAE).

By the fall of 1993, IPAE merged with SIP while still maintaining the name SIP. This group later merged with PIP and the resulting working group called themselves “Simple Internet Protocol Plus” (SIPP). At about the same time the TP/IX Working Group changed its name to “Common Architecture for the Internet” (CATNIP).

The IPng area directors made a recommendation for an IPng in July of 1994. This recommendation, from [1], includes the following elements:

  • Current address assignment policies are adequate.
  • There is no current need to reclaim underutilized assigned network numbers.
  • There is no current need to renumber major portions of the Internet.
  • CIDR-style assignments of parts of unassigned Class A address space should be considered.
  • “Simple Internet Protocol Plus (SIPP) Spec. (128 bit ver)” [3] be adopted as the basis for IPng.
  • The documents listed in Appendix C be the foundation of the IPng effort.
  • An IPng Working Group be formed, chaired by Steve Deering and Ross Callon.
  • Robert Hinden be the document editor for the IPng effort.
  • An IPng Reviewer be appointed and that Dave Clark be the reviewer.
  • An Address Autoconfiguration Working Group be formed, chaired by Dave Katz and Sue Thomson.
  • An IPng Transition Working Group be formed, chaired by Bob Gilligan and TBA.
  • The Transition and Coexistence Including Testing Working Group be chartered.
  • Recommendations about the use of non-IPv6 addresses in IPv6 environments and IPv6 addresses in non-IPv6 environments be developed.
  • The IESG commission a review of all IETF standards documents for IPng implications.
  • The IESG task current IETF working groups to take IPng into account.
  • The IESG charter new working groups where needed to revise old standards documents.
  • Informational RFCs be solicited or developed describing a few specific IPng APIs.
  • The IPng Area and Area Directorate continue until main documents are offered as Proposed Standards in late 1994.
  • Support for the Authentication Header be required.
  • Support for a specific authentication algorithm be required.
  • Support for the Privacy Header be required.
  • Support for a specific privacy algorithm be required.
  • An “IPng framework for firewalls” be developed.

 
4.0 IPng Overview
IPng is a new version of the Internet Protocol, designed as a successor to IP version 4 [4]. IPng is assigned IP version number 6 and is formally called IPv6 [5].IPng was designed to take an evolutionary step from IPv4. It was not a design goal to take a radical step away from IPv4. Functions which work in IPv4 were kept in IPng. Functions which didn’t work were removed. The changes from IPv4 to IPng fall primarily into the following categories:

  • Expanded Routing and Addressing CapabilitiesIPng increases the IP address size from 32 bits to 128 bits, to support more levels of addressing hierarchy and a much greater number of addressable nodes, and simpler auto-configuration of addresses.

    The scalability of multicast routing is improved by adding a “scope” field to multicast addresses.

  • A new type of address called a “anycast address” is defined, to identify sets of nodes where a packet sent to an anycast address is delivered to one of the nodes. The use of anycast addresses in the IPng source route allows nodes to control the path which their traffic flows.
  • Header Format SimplificationSome IPv4 header fields have been dropped or made optional, to reduce the common-case processing cost of packet handling and to keep the bandwidth cost of the IPng header as low as possible despite the increased size of the addresses. Even though the IPng addresses are four time longer than the IPv4 addresses, the IPng header is only twice the size of the IPv4 header.
  • Improved Support for OptionsChanges in the way IP header options are encoded allows for more efficient forwarding, less stringent limits on the length of options, and greater flexibility for introducing new options in the future.
  • Quality-of-Service CapabilitiesA new capability is added to enable the labeling of packets belonging to particular traffic “flows” for which the sender requests special handling, such as non-default quality of service or “real- time” service.
  • Authentication and Privacy CapabilitiesIPng includes the definition of extensions which provide support for authentication, data integrity, and confidentiality. This is included as a basic element of IPng and will be included in all implementations.

The IPng protocol consists of two parts, the basic IPng header and IPng extension headers.

5.0 IPng Header Format

   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |Version| Prior |                       Flow Label              |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |         Payload Length        |  Next Header  |   Hop Limit   |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                                                               |
   +                                                               +
   |                                                               |
   +                         Source Address                        +
   |                                                               |
   +                                                               +
   |                                                               |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                                                               |
   +                                                               +
   |                                                               |
   +                      Destination Address                      +
   |                                                               |
   +                                                               +
   |                                                               |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Ver
4-bit Internet Protocol version number = 6.
Prio
4-bit Priority value. See IPng Priority section.
Flow Label
24-bit field. See IPng Quality of Service section.
Payload Length
16-bit unsigned integer. Length of payload, i.e., the rest of the packet following the IPng header, in octets.
Next Hdr
8-bit selector. Identifies the type of header immediately following the IPng header. Uses the same values as the IPv4 Protocol field [6].
Hop Limit
8-bit unsigned integer. Decremented by 1 by each node that forwards the packet. The packet is discarded if Hop Limit is decremented to zero.
Source Address
128 bits. The address of the initial sender of the packet. See [7] for details.
Destination Address
128 bits. The address of the intended recipient of the packet (possibly not the ultimate recipient, if an optional Routing Header is present).

6.0 IPng Extensions
IPng includes an improved option mechanism over IPv4. IPng options are placed in separate extension headers that are located between the IPng header and the transport-layer header in a packet. Most IPng extension headers are not examined or processed by any router along a packet’s delivery path until it arrives at its final destination. This facilitates a major improvement in router performance for packets containing options. In IPv4 the presence of any options requires the router to examine all options.The other improvement is that unlike IPv4 options, IPng extension headers can be of arbitrary length and the total amount of options carried in a packet is not limited to 40 bytes. This feature plus the manner in which they are processed, permits IPng options to be used for functions which were not practical in IPv4. A good example of this is the IPng Authentication and Security Encapsulation options.

In order to improve the performance when handling subsequent option headers and the transport protocol which follows, IPng options are always an integer multiple of 8 octets long, in order to retain this alignment for subsequent headers.

The IPng extension headers which are currently defined are:

Routing Extended Routing (like IPv4 loose source route).
Fragmentation Fragmentation and Reassembly.
Authentication Integrity and Authentication. Security
Encapsulation Confidentiality.
Hop-by-Hop Option Special options which require hop by hop processing.
Destination Options Optional information to be examined by the destination node.

7.0 IPng Addressing
IPng addresses are 128-bits long and are identifiers for individual interfaces and sets of interfaces. IPng Addresses of all types are assigned to interfaces, not nodes. Since each interface belongs to a single node, any of that node’s interfaces’ unicast addresses may be used as an identifier for the node. A single interface may be assigned multiple IPv6 addresses of any type.There are three types of IPng addresses. These are unicast, anycast, and multicast. Unicast addresses identify a single interface. Anycast addresses identify a set of interfaces such that a packet sent to a anycast address will be delivered to one member of the set. Multicast addresses identify a group of interfaces, such that a packet sent to a multicast address is delivered to all of the interfaces in the group. There are no broadcast addresses in IPv6, their function being superseded by multicast addresses.

IPng supports addresses which are four times the number of bits as IPv4 addresses (128 vs. 32). This is 4 Billion times 4 Billion times 4 Billion (2^^96) times the size of the IPv4 address space (2^^32). This works out to be:
340,282,366,920,938,463,463,374,607,431,768,211,456

This is an extremely large address space. In a theoretical sense this is approximately 665,570,793,348,866,943,898,599 addresses per square meter of the surface of the planet Earth (assuming the earth surface is 511,263,971,197,990 square meters).

In more practical terms the assignment and routing of addresses requires the creation of hierarchies which reduces the efficiency of the usage of the address space. Christian Huitema performed an analysis in [8] which evaluated the efficiency of other addressing architecture’s (including the French telephone system, USA telephone systems, current internet using IPv4, and IEEE 802 nodes). He concluded that 128bit IPng addresses could accommodate between 8×10^^17 to 2×10^^33 nodes assuming efficiency in the same ranges as the other addressing architecture’s. Even his most pessimistic estimate this would provide 1,564 addresses for each square meter of the surface of the planet Earth. The optimistic estimate would allow for 3,911,873,538,269,506,102 addresses for each square meter of the surface of the planet Earth.

The specific type of IPng address is indicated by the leading bits in the address. The variable-length field comprising these leading bits is called the Format Prefix (FP). The initial allocation of these prefixes is as follows:

Allocation			Prefix(binary)	Fraction of Address Space

Reserved			0000 0000	1/256
Unassigned			0000 0001	1/256

Reserved for NSAP Allocation	0000 001	1/128
Reserved for IPX Allocation	0000 010	1/128

Unassigned			0000 011	1/128
Unassigned			0000 1		1/32
Unassigned			0001		1/16
Unassigned			001		1/8

Provider-Based Unicast Address	010		1/8

Unassigned			011		1/8

Reserved for
Neutral-Interconnect-Based
Unicast Addresses		100		1/8

Unassigned			101		1/8
Unassigned			110		1/8
Unassigned			1110		1/16
Unassigned			1111 0		1/32
Unassigned			1111 10		1/64
Unassigned			1111 110	1/128
Unassigned			1111 1110 0 	1/512

Link Local Use Addresses	1111 1110 10 	1/1024

Site Local Use Addresses	1111 1110 11 	1/1024

Multicast Addresses		1111 1111	1/256

This allocation supports the direct allocation of provider addresses, local use addresses, and multicast addresses. Space is reserved for NSAP addresses, IPX addresses, and neutral-interconnect addresses. The remainder of the address space is unassigned for future use. This can be used for expansion of existing use (e.g., additional provider addresses, etc.) or new uses (e.g., separate locators and identifiers). Note that Anycast addresses are not shown here because they are allocated out of the unicast address space.

Approximately fifteen percent of the address space is initially allocated. The remaining 85% is reserved for future use.

7.1 Unicast Addresses There are several forms of unicast address assignment in IPv6. These are the global provider based unicast address, the neutral-interconnect unicast address, the NSAP address, the IPX hierarchical address, the site-local-use address, the link-local-use address, and the IPv4-capable host address. Additional address types can be defined in the future.

7.2 Provider Based Unicast Addresses Provider based unicast addresses are used for global communication. They are similar in function to IPv4 addresses under CIDR. The assignment plan for unicast addresses is described in [9] and [10]. Their format is:

     | 3 |  n bits   |  m bits   |   o bits    | p bits  | o-p bits |
     +---+-----------+-----------+-------------+---------+----------+
     |010|REGISTRY ID|PROVIDER ID|SUBSCRIBER ID|SUBNET ID| INTF. ID |
     +---+-----------+-----------+-------------+---------+----------+

The first 3 bits identify the address as a provider- oriented unicast address. The next field (REGISTRY ID) identifies the internet address registry which assigns provider identifiers (PROVIDER ID) to internet service providers, which then assign portions of the address space to subscribers. This usage is similar to assignment of IP addresses under CIDR. The SUBSCRIBER ID distinguishes among multiple subscribers attached to the internet service provider identified by the PROVIDER ID. The SUBNET ID identifies a specific physical link. There can be multiple subnets on the same physical link. A specific subnet can not span multiple physical links. The INTERFACE ID identifies a single interface among the group of interfaces identified by the subnet prefix.

7.3 Local-Use Addresses A local-use address is a unicast address that has only local routability scope (within the subnet or within a subscriber network), and may have local or global uniqueness scope. They are intended for use inside of a site for “plug and play” local communication and for bootstrapping up to the use of global addresses [11].There are two types of local-use unicast addresses defined. These are Link-Local and Site-Local. The Link-Local-Use is for use on a single link and the Site-Local-Use is for use in a single site. Link-Local- Use addresses have the following format:

     |   10     |
     |  bits    |        n bits           |       118-n bits           |
     +----------+-------------------------+----------------------------+
     |1111111010|           0             |       INTERFACE ID         |
     +----------+-------------------------+----------------------------+

Link-Local-Use addresses are designed to be used for addressing on a single link for purposes such as auto-address configuration.

Site-Local-Use addresses have the following format:

     |   10     |
     |  bits    | n bits  |    m bits     |       118-n-m bits         |
     +----------+---------+---------------+----------------------------+
     |1111111011|    0    |   SUBNET ID   |       INTERFACE ID         |
     +----------+---------+---------------+----------------------------+

For both types of local use addresses the INTERFACE ID is an identifier which much be unique in the domain in which it is being used. In most cases these will use a node’s IEEE-802 48bit address. The SUBNET ID identifies a specific subnet in a site. The combination of the SUBNET ID and the INTERFACE ID to form a local use address allows a large private internet to be constructed without any other address allocation.

Local-use addresses allow organizations that are not (yet) connected to the global Internet to operate without the need to request an address prefix from the global Internet address space. Local-use addresses can be used instead. If the organization later connects to the global Internet, it can use its SUBNET ID and INTERFACE ID in combination with a global prefix (e.g., REGISTRY ID + PROVIDER ID + SUBSCRIBER ID) to create a global address. This is a significant improvement over IPv4 which requires sites which use private (non-global) IPv4 address to manually renumber when they connect to the Internet. IPng does the renumbering automatically.

7.4 IPv6 Addresses with Embedded IPV4 Addresses The IPv6 transition mechanisms include a technique for hosts and routers to dynamically tunnel IPv6 packets over IPv4 routing infrastructure. IPv6 nodes that utilize this technique are assigned special IPv6 unicast addresses that carry an IPv4 address in the low-order 32-bits. This type of address is termed an “IPv4-compatible IPv6 address” and has the format:

     |                80 bits               | 16 |      32 bits        |
     +--------------------------------------+--------------------------+
     |0000..............................0000|0000|    IPV4 ADDRESS     |
     +--------------------------------------+----+---------------------+

A second type of IPv6 address which holds an embedded IPv4 address is also defined. This address is used to represent the addresses of IPv4- only nodes (those that *do not* support IPv6) as IPv6 addresses. This type of address is termed an “IPv4-mapped IPv6 address” and has the format:

     |                80 bits               | 16 |      32 bits        |
     +--------------------------------------+--------------------------+
     |0000..............................0000|FFFF|    IPV4 ADDRESS     |
     +--------------------------------------+----+---------------------+

7.5 Anycast Addresses
An IPv6 anycast address is an address that is assigned to more than one interfaces (typically belonging to different nodes), with the property that a packet sent to an anycast address is routed to the “nearest” interface having that address, according to the routing protocols’ measure of distance.Anycast addresses, when used as part of an route sequence, permits a node to select which of several internet service providers it wants to carry its traffic. This capability is sometimes called “source selected policies”. This would be implemented by configuring anycast addresses to identify the set of routers belonging to internet service providers (e.g., one anycast address per internet service provider). These anycast addresses can be used as intermediate addresses in an IPv6 routing header, to cause a packet to be delivered via a particular provider or sequence of providers. Other possible uses of anycast addresses are to identify the set of routers attached to a particular subnet, or the set of routers providing entry into a particular routing domain.

Anycast addresses are allocated from the unicast address space, using any of the defined unicast address formats. Thus, anycast addresses are syntactically indistinguishable from unicast addresses. When a unicast address is assigned to more than one interface, thus turning it into an anycast address, the nodes to which the address is assigned must be explicitly configured to know that it is an anycast address.

7.6 Multicast Addresses A IPng multicast address is an identifier for a group of interfaces. A interface may belong to any number of multicast groups. Multicast addresses have the following format:

     |   8    |  4 |  4 |                  112 bits                   |
     +------ -+----+----+---------------------------------------------+
     |11111111|FLGS|SCOP|                  GROUP ID                   |
     +--------+----+----+---------------------------------------------+

11111111 at the start of the address identifies the address as being a multicast address.

+-+-+-+-+ FLGS is a set of 4 flags: |0|0|0|T| +-+-+-+-+

The high-order 3 flags are reserved, and must be initialized to 0.

T=0 indicates a permanently assigned (“well-known”) multicast address, assigned by the global internet numbering authority.

T=1 indicates a non-permanently assigned (“transient”) multicast address.

SCOP is a 4-bit multicast scope value used to limit the scope of the multicast group. The values are:

0 Reserved 8 Organization-local scope 1 Node-local scope 9 (unassigned) 2 Link-local scope A (unassigned) 3 (unassigned) B (unassigned) 4 (unassigned) C (unassigned) 5 Site-local scope D (unassigned) 6 (unassigned) E Global scope 7 (unassigned) F Reserved

GROUP ID identifies the multicast group, either permanent or transient, within the given scope.

8.0 IPng Routing
Routing in IPng is almost identical to IPv4 routing under CIDR except that the addresses are 128- bit IPng addresses instead of 32-bit IPv4 addresses. With very straightforward extensions, all of IPv4’s routing algorithms (OSPF, RIP, IDRP, ISIS, etc.) can used to route IPng.IPng also includes simple routing extensions which support powerful new routing functionality. These capabilities include:

  • Provider Selection (based on policy, performance, cost, etc.)
  • Host Mobility (route to current location)
  • Auto-Readdressing (route to new address)

The new routing functionality is obtained by creating sequences of IPng addresses using the IPng Routing option. The routing option is used by a IPng source to list one or more intermediate nodes (or topological group) to be “visited” on the way to a packet’s destination. This function is very similar in function to IPv4’s Loose Source and Record Route option.

In order to make address sequences a general function, IPng hosts are required in most cases to reverse routes in a packet it receives (if the packet was successfully authenticated using the IPng Authentication Header) containing address sequences in order to return the packet to its originator. This approach is taken to make IPng host implementations from the start support the handling and reversal of source routes. This is the key for allowing them to work with hosts which implement the new features such as provider selection or extended addresses.

Three examples show how the address sequences can be used. In these examples, address sequences are shown by a list of individual addresses separated by commas. For example:
SRC, I1, I2, I3, DST

Where the first address is the source address, the last address is the destination address, and the middle addresses are intermediate addresses.

For these examples assume that two hosts, H1 and H2 wish to communicate. Assume that H1 and H2’s sites are both connected to providers P1 and P2. A third wireless provider, PR, is connected to both providers P1 and P2.

                           ----- P1 ------
                          /       |       \
                         /        |        \
                       H1        PR        H2
                         \        |        /
                          \       |       /
                           ----- P2 ------

The simplest case (no use of address sequences) is when H1 wants to send a packet to H2 containing the addresses:H1, H2

When H2 replied it would reverse the addresses and construct a packet containing the addresses: H2, H1

In this example either provider could be used, and H1 and H2 would not be able to select which provider traffic would be sent to and received from.

If H1 decides that it wants to enforce a policy that all communication to/from H2 can only use provider P1, it would construct a packet containing the address sequence: H1, P1, H2

This ensures that when H2 replies to H1, it will reverse the route and the reply it would also travel over P1. The addresses in H2’s reply would look like: H2, P1, H1

If H1 became mobile and moved to provider PR, it could maintain (not breaking any transport connections) communication with H2, by sending packets that contain the address sequence: H1, PR, P1, H2

This would ensure that when H2 replied it would enforce H1’s policy of exclusive use of provider P1 and send the packet to H1 new location on provider PR. The reversed address sequence would be: H2, P1, PR, H1

The address sequence facility of IPng can be used for provider selection, mobility, and readdressing. It is a simple but powerful capability.

9.0 IPng Quality-of-Service Capabilities
The Flow Label and the Priority fields in the IPng header may be used by a host to identify those packets for which it requests special handling by IPng routers, such as non-default quality of service or “real-time” service. This capability is important in order to support applications which require some degree of consistent throughput, delay, and/or jitter. These type of applications are commonly described as “multi- media” or “real-time” applications.

9.1 Flow Labels The 24-bit Flow Label field in the IPv6 header may be used by a source to label those packets for which it requests special handling by the IPv6 routers, such as non-default quality of service or “real-time” service.This aspect of IPv6 is, at the time of writing, still experimental and subject to change as the requirements for flow support in the Internet become clearer. Hosts or routers that do not support the functions of the Flow Label field are required to set the field to zero when originating a packet, pass the field on unchanged when forwarding a packet, and ignore the field when receiving a packet.

A flow is a sequence of packets sent from a particular source to a particular (unicast or multicast) destination for which the source desires special handling by the intervening routers. The nature of that special handling might be conveyed to the routers by a control protocol, such as a resource reservation protocol, or by information within the flow’s packets themselves, e.g., in a hop-by-hop option.

There may be multiple active flows from a source to a destination, as well as traffic that is not associated with any flow. A flow is uniquely identified by the combination of a source address and a non- zero flow label. Packets that do not belong to a flow carry a flow label of zero.

A flow label is assigned to a flow by the flow’s source node. New flow labels must be chosen (pseudo-)randomly and uniformly from the range 1 to FFFFFF hex. The purpose of the random allocation is to make any set of bits within the Flow Label field suitable for use as a hash key by routers, for looking up the state associated with the flow.

All packets belonging to the same flow must be sent with the same source address, same destination address, and same non-zero flow label. If any of those packets includes a Hop-by-Hop Options header, then they all must be originated with the same Hop-by-Hop Options header contents (excluding the Next Header field of the Hop-by-Hop Options header). If any of those packets includes a Routing header, then they all must be originated with the same contents in all extension headers up to and including the Routing header (excluding the Next Header field in the Routing header). The routers or destinations are permitted, but not required, to verify that these conditions are satisfied. If a violation is detected, it should be reported to the source by an ICMP Parameter Problem message, Code 0, pointing to the high-order octet of the Flow Label field (i.e., offset 1 within the IPv6 packet) [12].

Routers are free to “opportunistically” set up flow- handling state for any flow, even when no explicit flow establishment information has been provided to them via a control protocol, a hop-by-hop option, or other means. For example, upon receiving a packet from a particular source with an unknown, non-zero flow label, a router may process its IPv6 header and any necessary extension headers as if the flow label were zero. That processing would include determining the next-hop interface, and possibly other actions, such as updating a hop-by-hop option, advancing the pointer and addresses in a Routing header, or deciding on how to queue the packet based on its Priority field. The router may then choose to “remember” the results of those processing steps and cache that information, using the source address plus the flow label as the cache key. Subsequent packets with the same source address and flow label may then be handled by referring to the cached information rather than examining all those fields that, according to the requirements of the previous paragraph, can be assumed unchanged from the first packet seen in the flow.

9.2 Priority The 4-bit Priority field in the IPv6 header enables a source to identify the desired delivery priority of its packets, relative to other packets from the same source. The Priority values are divided into two ranges: Values 0 through 7 are used to specify the priority of traffic for which the source is providing congestion control, i.e., traffic that “backs off” in response to congestion, such as TCP traffic. Values 8 through 15 are used to specify the priority of traffic that does not back off in response to congestion, e.g., “real-time” packets being sent at a constant rate.For congestion-controlled traffic, the following Priority values are recommended for particular application categories:

0    Uncharacterized traffic
1    “Filler” traffic (e.g., netnews)
2    Unattended data transfer (e.g., email)
3    (Reserved)
4    Attended bulk transfer (e.g., FTP, HTTP, NFS)
5    (Reserved)
6    Interactive traffic (e.g., telnet, X)
7    Internet control traffic (e.g., routing protocols, SNMP)

For non-congestion-controlled traffic, the lowest Priority value (8) should be used for those packets that the sender is most willing to have discarded under conditions of congestion (e.g., high-fidelity video traffic), and the highest value (15) should be used for those packets that the sender is least willing to have discarded (e.g., low-fidelity audio traffic). There is no relative ordering implied between the congestion-controlled priorities and the non-congestion-controlled priorities.

10. IPng Security
The current Internet has a number of security problems and lacks effective privacy and authentication mechanisms below the application layer. IPng remedies these shortcomings by having two integrated options that provide security services [13]. These two options may be used singly or together to provide differing levels of security to different users. This is very important because different user communities have different security needs.The first mechanism, called the “IPng Authentication Header”, is an extension header which provides authentication and integrity (without confidentiality) to IPng datagrams [14]. While the extension is algorithm- independent and will support many different authentication techniques, the use of keyed MD5 is proposed to help ensure interoperability within the worldwide Internet. This can be used to eliminate a significant class of network attacks, including host masquerading attacks. The use of the IPng Authentication Header is particularly important when source routing is used with IPng because of the known risks in IP source routing. Its placement at the internet layer can help provide host origin authentication to those upper layer protocols and services that currently lack meaningful protections. This mechanism should be exportable by vendors in the United States and other countries with similar export restrictions because it only provides authentication and integrity, and specifically does not provide confidentiality. The exportability of the IPng Authentication Header encourages its widespread deployment and use.

The second security extension header provided with IPng is the “IPng Encapsulating Security Header” [15]. This mechanism provides integrity and confidentiality to IPng datagrams. It is simpler than some similar security protocols (e.g., SP3D, ISO NLSP) but remains flexible and algorithm-independent. To achieve interoperability within the global Internet, the use of DES CBC is being used as the standard algorithm for use with the IPng Encapsulating Security Header.

11. IPng Transition Mechanisms
The key transition objective is to allow IPv6 and IPv4 hosts to interoperate. A second objective is to allow IPv6 hosts and routers to be deployed in the Internet in a highly diffuse and incremental fashion, with few interdependencies. A third objective is that the transition should be as easy as possible for end- users, system administrators, and network operators to understand and carry out.The IPng transition mechanisms are a set of protocol mechanisms implemented in hosts and routers, along with some operational guidelines for addressing and deployment, designed to make transition the Internet to IPv6 work with as little disruption as possible [16].

The IPng transition mechanisms provides a number of features, including:

  • Incremental upgrade and deployment. Individual IPv4 hosts and routers may be upgraded to IPv6 one at a time without requiring any other hosts or routers to be upgraded at the same time. New IPv6 hosts and routers can be installed one by one.
  • Minimal upgrade dependencies. The only prerequisite to upgrading hosts to IPv6 is that the DNS server must first be upgraded to handle IPv6 address records. There are no pre-requisites to upgrading routers.
  • Easy Addressing. When existing installed IPv4 hosts or routers are upgraded to IPv6, they may continue to use their existing address. They do not need to be assigned new addresses. Administrators do not need to draft new addressing plans.
  • Low start-up costs. Little or no preparation work is needed in order to upgrade existing IPv4 systems to IPv6, or to deploy new IPv6 systems. The mechanisms employed by the IPng transition mechanisms include:
  • An IPv6 addressing structure that embeds IPv4 addresses within IPv6 addresses, and encodes other information used by the transition mechanisms.
  • A model of deployment where all hosts and routers upgraded to IPv6 in the early transition phase are “dual” capable (i.e. implement complete IPv4 and IPv6 protocol stacks).
  • The technique of encapsulating IPv6 packets within IPv4 headers to carry them over segments of the end-to-end path where the routers have not yet been upgraded to IPv6.
  • The header translation technique to allow the eventual introduction of routing topologies that route only IPv6 traffic, and the deployment of hosts that support only IPv6. Use of this technique is optional, and would be used in the later phase of transition if it is used at all.

The IPng transition mechanisms ensures that IPv6 hosts can interoperate with IPv4 hosts anywhere in the Internet up until the time when IPv4 addresses run out, and allows IPv6 and IPv4 hosts within a limited scope to interoperate indefinitely after that. This feature protects the huge investment users have made in IPv4 and ensures that IPv6 does not render IPv4 obsolete. Hosts that need only a limited connectivity range (e.g., printers) need never be upgraded to IPv6.

The incremental upgrade features of the IPng transition mechanisms allow the host and router vendors to integrate IPv6 into their product lines at their own pace, and allows the end users and network operators to deploy IPng on their own schedules.

12. Why IPng?


There are a number of reasons why IPng is appropriate for the next generation of the Internet Protocol. It solves the Internet scaling problem, provides a flexible transition mechanism for the current Internet, and was designed to meet the needs of new markets such as nomadic personal computing devices, networked entertainment, and device control. It does this in a evolutionary way which reduces the risk of architectural problems.

Ease of transition is a key point in the design of IPng. It is not something was added in at the end. IPng is designed to interoperate with IPv4. Specific mechanisms (embedded IPv4 addresses, pseudo- checksum rules etc.) were built into IPng to support transition and compatibility with IPv4. It was designed to permit a gradual and piecemeal deployment with a minimum of dependencies.

IPng supports large hierarchical addresses which will allow the Internet to continue to grow and provide new routing capabilities not built into IPv4. It has anycast addresses which can be used for policy route selection and has scoped multicast addresses which provide improved scalability over IPv4 multicast. It also has local use address mechanisms which provide the ability for “plug and play” installation.

The address structure of IPng was also designed to support carrying the addresses of other internet protocol suites. Space was allocated in the addressing plan for IPX and NSAP addresses. This was done to facilitate migration of these internet protocols to IPng.

IPng provides a platform for new Internet functionality. This includes support for real-time flows, provider selection, host mobility, end-to- end security, auto-configuration, and auto-reconfiguration.

In summary, IPng is a new version of IP. It can be installed as a normal software upgrade in internet devices. It is interoperable with the current IPv4. Its deployment strategy was designed to not have any “flag” days. IPng is designed to run well on high performance networks (e.g., ATM) and at the same time is still efficient for low bandwidth networks (e.g., wireless). In addition, it provides a platform for new internet functionality that will be required in the near future.

Posted in Networking, Opetaring System | Leave a Comment »

Linux bash syntax

Posted by petanidigital on January 20, 2008

  Parameters    Shell parameters
  Variables     Environment variables
  Arrays        Array Variables
  Redirection   Spooling to and from files
  Pipes         Redirect the output from one command as input for another

Looping constructs:

  IF THEN ELSE Conditional Execution
  if           Conditionally perform a command
  for          Expand words, and execute commands
  until        Execute commands (until error)
  while        Execute commands

The break and continue builtins may be used to control loop execution.

Evaluating expressions:

  Using brackets to Group and expand expressions
  Conditional expressions
  Arithmetic expressions
  Escape Chars, delimiters and Quotes
  Command Substitution

Working with the bash Shell:

  vi editor     A one page reference to the vi editor
  Keyboard      Cursor control - Cut & paste
  Job Control   Suspend and resume a process
  Prompt        Prompt variable
  ###           Comment / Remark
  Scripts       Writing Shell Scripts
  BashBangSplat Pronunciation guide for unix

Posted in Linux, Networking, Opetaring System | Leave a Comment »

UNIX / Linux Command Summary

Posted by petanidigital on January 20, 2008

access()
Used to check the accessibility of files

int
Access(pathname, access_mode)
Char* pathname;
int access-mode;
The access modes are.
04 read
02 write
01 execute (search)
00 checks existence of a file

& operator
execute a command as a background process.

banner
prints the specified string in large letters. Each argument may be upto 10 characters long.

break
is used to break out of a loop. It does not exit from the program.

Cal
Produces a calender of the current month as standard output. The month (1-12) and year (1-9999) must be specified in full numeric format.

Cal [[ month] year]

Calendar
Displays contents of the calendar file

case operator
The case operator is used to validate multiple conditions.

Case $string in

Pattern 1)
Command list;;
Command list;;

Pattern 3)
Command list;;
easc

cat
(for concatenate) command is used to display the contents of a file. Used without arguments it takes input from standard input <Dtrl d> is used to terminate input.

cat [filename(s)]
cat > [filename]
Data can be appended to a file using >>

 Some of the available options are :
Cat [-options] filename(S)
-s silent about files that
cannot be accessed
-v enables display of non printinging characters (except tabs, new lines, form-

feeds)
-t when used with –v, it causes tabs to be printed as ^I’s
-e when used with –v, it causes $ to be printed at the end of each line
The –t and –e options are ignored if the –v options is not specified.

cd
Used to change directories

chgrp
Changes the group that owns a file.
Chgrp [grou –id] [filename]

chmod
Allows file permissions to be changed for each user. File permissions can be changed only by the owner (s).
Chmod [+/-][rwx] [ugo] [filename]

chown
Used to change the owner of a file.
The command takes a file(s) as source files and the login id of another user as the target.
Chown [user-id] [filename]

cmp
The cmp command compares two files (text or binary) byte-by-byte and displays the first occurrence where the files differ.
Cmp [filename1] [filename2] -1 gives a long listing

comm.
The comm command compares two sorted files and displays the instances that are common. The display is separated into 3 columns.
Comm. filename1 filename2
first displays what occurs in first files but not in the second
second displays what occurs in second file but not in first
third displays what is common in both files

continue statement
The rest of the commands in the loop are ignored. It moves out of the loop and moves on the next cycle.

cp
The cp (copy) command is used to copy a file.
Cp [filename1] [filename2]

cpio(copy input/output)
Utility program used to take backups.
Cpio operates in three modes:
-o output
-i input
-p pass

creat()
the system call creates a new file or prepares to rewrite an existing file. The file pointer is set to the beginning of file.
#include<sys/tyes.h>
#include<sys/stat.h>
int creat(path, mode)

char *path;
int mode;

cut
used to cut out parts of a file. It takes filenames as command line arguments or input from standard input. The command can cut columns as well as fields in a file. It however does not delete the selected parts of the file.
Cut [-ef] [column/fie,d] filename
Cut-d “:” –f1,2,3 filename
Where –d indicates a delimiter specified within “:”

df
used to find the number of free blocks available for all the mounted file systems.
#/etc/df [filesystem]

diff
the diff command compares text files. It gives an index of all the lines that differ in the two files along with the line numbers. It also displays what needs to be changed.
Diff filename1 filename2

echo
The echo command echoes arguments on the command line.
echo [arguments]

env
Displays the permanent environment variables associated with a user’s login id

exit command
Used to stop the execution of a shell script.

expr command
Expr (command) command is used for numeric computation.
The operators + (add), -(subtract), *(multiplu), /(divide), (remainder) are allowed. Calculation are performed in order of normal numeric precedence.

find
The find command searches through directories for files that match the specified criteria. It can take full pathnames and relative pathnames on the command line.
To display the output on screen the –print option must be specified

for operator
The for operator may be used in looping constructs where there is repetitive execution of a section of the shell program.
For var in vall val2 val3 val4;

Do commnds; done

fsck
Used to check the file system and repair damaged files. The command takes a device name as an argument
# /etc/fsck /dev/file-system-to-be-checked.

grave operator
Used to store the standard the output of a command in an enviroment variable. (‘)

grep
The grep (global regular expression and print) command can be used as a filter to search for strings in files. The pattern may be either a fixed character string or a regular expression.
Grep “string” filename(s)

HOME
User’s home directory

if operator
The if operator allows conditional operator

If expression; then commands; fi
if … then…else… fi
$ if; then

commands
efile; then

commands
fi

kill
used to stop background processes

In
used to link files. A duplicate of a file is created with another name

 LOGNAME
displays user’s login name

ls
Lists the files in the current directory

Some of the available options are:
-l gives a long listing
-a displays all file{including hidden files

lp
used to print data on the line printer.
Lp [options] filename(s)

mesg
The mesg command controls messages received on a terminal.
-n does not allow messages to be displayed on screen
-y allows messages to be displayed on screen

mkdir
used to create directories

more
The more command is used to dispay data one screenful at a time.
More [filename]

mv
Mv (move) moves a file from one directory to another or simply changes filenames. The command takes filename and pathnames as source names and a filename or exiting directory as target names.
mv [target-file]

news
The news command allows a user to read news items published by the system administrator.

ni
Displays the contents of a file with line numbers

passwd
Changes the password

paste
The paste command joins lines from two files and displays the output. It can take a number of filenames as command line arguments.
paste file1 file2

PATH
The directories that the system searches to find commands

pg
Used to display data one page (screenful) at a time. The command can take a number of filenames as arguments.
Pg [option] [filename] [filename2]…..

pipe
Operator (1) takes the output of one commands as input of another command.

ps
Gives information about all the active processes.

PS1
The system prompt

pwd
(print working directory) displays the current directory.

rm
The rm (remove) command is used to delete files from a directory. A number of files may be deleted simultaneously. A file(s) once deleted cannot be retrieved.
rm [filename 1] [filename 2]…

sift command
Using shift $1becomes the source string and other arguments are shifted. $2 is shifted to $1,$3to $2 and so on.

Sleep
The sleep command is used to suspend the execution of a shell script for the specified time. This is usually in seconds.

sort
Sort is a utility program that can be used to sort text files in numeric or alphabetical order
Sort [filename]

split
Used to split large file into smaller files
Split-n filename
Split can take a second filename on the command line.

su
Used to switch to superuser or any other user.

sync
Used to copy data in buffers to files

system0
Used to run a UNIX command from within a C program

tail
The tail command may be used to view the end of a file.
Tail [filename]

tar
Used to save and restore files to tapes or other removable media.
Tar [function[modifier]] [filename(s)]

tee
output that is being redirected to a file can also be viewed on standard output.

test command
It compares strings and numeric values.
The test command has two forms : test command itself If test ${variable} = value then
Do commands else do commands

File
The test commands also uses special operators [ ]. These are operators following the of are interpreted by the shell as different from wildcard characters.
Of [ -f ${variable} ]

Then
Do commands
Elif
[ -d ${variable} ]

then
do commands

else
do commands

fi
many different tests are possible for files. Comparing numbers, character strings, values of environment variables.

time
Used to display the execution time of a program or a command. Time is reported in seconds.
Time filename values

tr
The tr command is used to translate characters.
tr [-option] [string1 [string2]]

tty
Displays the terminal pathname

umask
Used to specify default permissions while creating files.

uniq
The uniq command is used to display the uniq(ue) lines in a sorted file.
Sort filename uniq

until
The operator executes the commands within a loop as long as the test condition is false.

wall
Used to send a message to all users logged in.
# /etc/wall message

wait
the command halts the execution of a script until all child processes, executed as background processes, are completed.

wc
The wc command can be used to count the number of lines, words and characters in a fine.
wc [filename(s)]
The available options are:
wc –[options] [filename]
-1
-w
-c
while operator
the while operator repeatedly performs an operation until the test condition proves false.

$ while
Ø do

commands
Ø done

who
displays information about all the users currently logged onto the system. The user name, terminal number and the date and time that each user logged onto the system.
The syntax of the who command is who [options]

write
The write command allows inter-user communication. A user can send messages by addressing the other user’s terminal or login id.
write user-name [terminal number]

 
 
 
 

Posted in Debian, Linux, Mandriva, Networking, Opetaring System, Red hat, Ubuntu, Welcome | Leave a Comment »

Root Access with sudo and gksudo Root Access with sudo and gksudo

Posted by petanidigital on January 20, 2008

ubuntu unlike many distributions does not normally have a user accessible root account. You are supposed to use one of these two commands when you need root access. sudo is for when you are in the terminal and need root access and gksudo is when you are in the GUI and need root access, for example you can press alt+f2 and type “gksudo appname“.

If you need a root account for some reason, an easy way to do it is to open up the user account manager by pressing alt+f2 and typing gksudo users-admin.

Double click on the root account and you will be presented with this screen. You may change the root password from there.

You may now log in as root. Note that gdm (the login manager for ubuntu) might not let you log in as root so you will have to open the console and login and run “startx”.

To add new users to sudo, open the terminal and type “sudo usermod -G admin username“. If the user is already a member of other groups, you’ll want to add the -a option, like so: “sudo usermod -a -G admin username“.

If you prefer to use the GUI, open users-admin and double click the user you want to be able to sudo. Under the User privileges tab, check the box that says “Executing system administration tasks” and they will be able to sudo.

Posted in Debian, Networking, Opetaring System, Ubuntu | Leave a Comment »

How to add Extra Repositories

Posted by petanidigital on January 20, 2008

If you want to add more repositories for more packages, open the terminal and run “sudo cp /etc/apt/sources.list /etc/apt/sources.list_backup” to backup your current sources.list. Then run “sudo gedit /etc/apt/sources.list” to have gedit open sources.list. If you have kubuntu, use kate instead of gedit.

Once open, remove everything and past the following lines in.

## Add comments (##) in front of any line to remove it from being checked.
## Use the following sources.list at your own risk.

deb http://archive.ubuntu.com/ubuntu dapper main restricted universe multiverse
deb-src http://archive.ubuntu.com/ubuntu dapper main restricted universe multiverse

## MAJOR BUG FIX UPDATES produced after the final release
deb http://archive.ubuntu.com/ubuntu dapper-updates main restricted universe multiverse
deb-src http://archive.ubuntu.com/ubuntu dapper-updates main restricted universe multiverse

## UBUNTU SECURITY UPDATES
deb http://security.ubuntu.com/ubuntu dapper-security main restricted universe multiverse
deb-src http://security.ubuntu.com/ubuntu dapper-security main restricted universe multiverse

## BACKPORTS REPOSITORY (Unsupported. May contain illegal packages. Use at own risk.)
deb http://archive.ubuntu.com/ubuntu dapper-backports main restricted universe multiverse
deb-src http://archive.ubuntu.com/ubuntu dapper-backports main restricted universe multiverse

## PLF REPOSITORY (Unsupported. May contain illegal packages. Use at own risk.)
deb http://packages.freecontrib.org/ubuntu/plf dapper free non-free
deb-src http://packages.freecontrib.org/ubuntu/plf dapper free non-free


Press save and back in the terminal run “sudo apt-get update”.

Posted in Networking, Opetaring System, Ubuntu | Leave a Comment »

Dynamic DNS No-IP

Posted by petanidigital on January 20, 2008

If you have a dynamic IP from your internet service provider it gets annoying when they change your IP and you do not know it, therefore you are not able to connect to your computer remotely anymore. Well Dynamic DNS services fix that problem by assigning a domain to your IP address whenever it changes. This howto will cover getting No-IP, a Dynamic DNS client working.

First if you do not have a No-IP account, create one by going to no-ip.com and registering.

It will send an email to you so you can verify that you want to create account. Click the verification link in your email and it will send you back to the No-IP site.

Log in to the site with the account you just made and click Add under Hosts / Redirects.

Write whatever you want for the subdomain and choose a domain for it to be under. I chose howtonoip for my subdomain and chose to put it under their no-ip.org domain. Scroll down to the bottom and click Create Host.

Now you will need to install the client. Open up your terminal and run “sudo apt-get install no-ip”.

Once installed run “sudo no-ip -C” and select your Internet interface from the list. Then enter your login information. If you added only one host to your no-ip account it will automatically use that. If not it will ask which one(s) to use. Next enter the update interval (in minutes). It will ask you if you want to run something at a successful update. I did not so I selected no.

Your configuration file was just created. Now whenever your IP changes this client software will automatically update the No-IP servers with your new IP. No longer will your ip change and you be locked out of your computer!

Posted in Debian, Linux, Mandriva, Networking, Opetaring System, Red hat, Ubuntu | Leave a Comment »

How to Analyze Network Traffic with ethereal

Posted by petanidigital on January 20, 2008

If you want to see what is coming in and out of your computer or if you have a ubuntu computer as a router and want to analyze data coming in and out of your network there is a very simple way to do it. A program called ethereal can analyze all sorts of connections to and from your computer.

To get it, open the terminal and write (without quotes) “sudo apt-get install ethereal” and answer “Y” to all the questions it asks.

Once installed you will want to run it as root by pressing alt+F2. Type “gksudo ethereal”. It will ask for your password and then once open it will look like this.

To start capturing, press capture and press interfaces. You will be presented with the window shown below. Either press capture on an interface to begin immediate capture or press prepare to set more advanced options.

Once you begin capturing there will be another window that looks like the one shown below. Once you are done capturing, press stop and it will analyze the data.

Once analyzed you will be presented with a screen the looks like the one shown below.

This will contain all the data captured on the selected interface before you pressed stop.

Posted in Debian, Networking, Opetaring System, Ubuntu | Tagged: | Leave a Comment »

Setup Your Computer to be a Router

Posted by petanidigital on January 20, 2008

If you have two network cards or some other means of connecting to the internet and a network card in your ubuntu computer, it can be a very powerfull router. You can set up basic NAT, do port forwarding, set up a proxy, and even do packet prioritization so your downloads dont interfere with gaming! This howto will cover setting up Webmin which will be used to configure masquerading, DHCP, and DNS servers. It also lets you configure port forwarding. QoS (packet prioritization) will be covered in a later guide. This guide is made using kubuntu to show that it will work with any version of ubuntu.

Webmin
Webmin is a web based computer management tool. It is similar to the web interface that you get from routers you buy at stores, but allows you to control most of the computer.
To install webmin, you must first go to its website at www.webmin.com and download the latest version in the top right. Download the tar.gz version into your user folder.

Once the download is complete extract it to a folder for example \usr\webmin. I extracted it into my user folder in this tutorial because this is just a live CD so it doesn’t really matter. You may delete the tar.gz file after you extract it as it is no longer needed.

Before you install it you will want the package “libnet-ssleay-perl”. So open the terminal and run “sudo apt-get install libnet-ssleay-perl”. Now navigate to the directory the folder is (For me it would be “cd /home/ubuntu/webmin-1.280″) and then run the command “sudo sh setup.sh”.

Config file directory [/etc/webmin]:
# Leave as default, or change as you wish

Log file directory [/var/webmin]:
# Leave as default, or change as you wish

Full path to perl (default /usr/bin/perl):
# Leave as default, or change as you wish

Web server port (default 10000):
# Leave as default or change it to what ever port you want.

Login name (default admin):
# Leave as default, or change as you wish

Login password:
# Choose a password, it will not display anything while you type

Password again:
# Self explanatory

Use SSL (y/n):
# Of course ‘y’

Start Webmin at boot time (y/n):
# Once agian… ‘y’

It will not finnish up the installation and you will be able to login by using localhost:port or routerip:port like http://localhost:10000

Masquerading
Masquerading is also known as NAT. To enable it, login to Webmin, go to the networking section, and click on firewall. It will ask you to configure it now. press “Do network address translation on external interface:” and choose the external interface (the one that is connected to the internet) and click on “Enable firewall at boot time?” then click on “Setup Firewall”.

Now you must add rules to your firewall to allow traffic coming from the internal network, loopback, and traffic related to an outgoing connection (so that you may recieve a response to your requests).
To allow traffic from the internal network, under “Incoming packets (INPUT)” press add rule. Give the rule a comment (name) like internal network and press the button by the “Accept” in green writing. Then down to “Incoming interface” put equals and put your internal interface, in the picture below it is eth0. Scroll down and press create.


Now do the same but put lo as incoming interface.

Now you must create another rule for existing connection. Put a comment and press accept. For incoming interface put equals and put your external interface (eth1 for me). Scroll down to “Connection States” and put equals and select both “Existing connection (ESTABLISHED)” and “Related to existing (RELATED)” and press create.

Now you must drop external connections that do not meet any of the other rules, so set the default action of “Incoming packets (INPUT)” to drop and press the button.

Scroll down to the bottom and press apply configuration.

Now go to the System section and click “Bootup and Shutdown”. Click “Create a new bootup and shutdown action”. Make the name “webmin-ipt” without quotes, make the description whatever you please, and for bootup commands, put “/bin/echo 1 > /proc/sys/net/ipv4/ip_forward” and make a new line and put “/sbin/iptables-restore /etc/webmin/firewall/iptables.save” then press create. Find the bootup command you just created in the list and click it then press Start Now.

Configure DHCP
In webmin, go to servers and press DHCP Server and click Module Config.
Replace (without quotes)
DHCP server config file with “/etc/dhcp3/dhcpd.conf”
DHCP server executable with “/usr/sbin/dhcpd3″
Command to start DHCP server with “/etc/init.d/dhcp3-server start”
Command to apply configuration with “/etc/init.d/dhcp3-server restart”
Command to stop DHCP server with “/etc/init.d/dhcp3-server stop”
Path to DHCP server PID file with “/var/run/dhcp3-server/dhcpd.pid”
DHCP server lease file with “/var/lib/dhcp3/dhcpd.leases”
and press save.

Now press “Add a new subnet” and put a description of this subnet. For network address, make it the same as the internal address but with 0 at the end, for example my internal NIC is 192.168.1.1 so I will put 192.168.1.0 for network address. For address ranges put the range of addrseses for your DHCP server to assign. For netmask put the same as your subnet, most are 255.255.255.0 and press create.

Once created, press the new icon that was just created with the network address you choose under it and scroll down to the bottom and click “Edit Client Options”. Fill in Subnet mask with your subnet, default routers and dns servers with your internal IP and broadcast address with the internal ip but 255 at the end (for example my internal ip is 192.168.1.1 so I will put 192.168.1.255 for broadcast) and press save then press start server.

Your computer will now be a DHCP server, router, and DNS server. To do port forwarding, go to the firewall settings in webmin and go to the Network Address Translation (nat) IPTable. From there you can add rules to Packets before routing (PREROUTING).

Posted in Debian, Linux, Mandriva, Networking, Opetaring System, Red hat, Ubuntu | Tagged: | Leave a Comment »