Design, Deploy, Secure, and Operate IPv6 Networks at Scale
Introduction
- The IPv4 Exhaustion That Changed Everything
- Where IPv6 Stands Today
- What This Book Covers
- How to Use This Book
Chapter 1: IPv6 Addressing Fundamentals and Design Principles
- IPv6 Address Format and Notation
- Address Types: Unicast, Multicast, Anycast
- Link-Local and Unique Local Addresses
- Global Unicast Addressing and Prefix Hierarchies
- Addressing Design Principles and Pitfalls
Chapter 2: IPv6 Address Planning and Allocation Strategy
- Understanding RIR Allocation and Delegation
- Designing Your Internal Address Hierarchy
- Prefix Sizing: /48, /56, /64, and When to Use Each
- Special-Purpose and Reserved Prefixes
- Documenting and Automating Address Assignment
Chapter 3: Stateless Address Autoconfiguration (SLAAC)
- The SLAAC Process: Step by Step
- EUI-64 and Privacy Extensions
- Router Advertisement Parameters
- SLAAC Security Considerations
- When to Use SLAAC and When Not To
Chapter 4: DHCPv6: Stateful and Stateless Address Assignment
- DHCPv6 Architecture and Message Flows
- Stateful vs. Stateless DHCPv6
- DHCPv6 Options and Extended Configuration
- DHCPv6 Security: Guards and Authentication
- DHCPv6 Design Patterns for Enterprises
Chapter 5: Router Advertisements and Prefix Delegation
- Router Advertisement Structure and Fields
- Tuning RA Parameters for Your Network
- IPv6 Prefix Delegation (DHCPv6-PD)
- RA Guard and Security Extensions
- RA Design for Multi-Homed Networks
Chapter 6: Neighbor Discovery Protocol (NDP)
- NDP Message Types and Operation
- Neighbor Solicitation and Advertisement
- Duplicate Address Detection
- Neighbor Cache Management
- NDP Security and Spoofing Defenses
Chapter 7: ICMPv6 and Path MTU Discovery
- ICMPv6 Type and Code Structure
- Essential ICMPv6 Messages
- Path MTU Discovery and Black Holes
- Fragmentation in IPv6
- Filtering ICMPv6 Without Breaking the Network
Chapter 8: DNS and IPv6
- AAAA Records and IPv6 Reverse Lookup
- DNS Zone Design for Dual-Stack Environments
- DNSSEC and IPv6 Considerations
- DNS64 and Synthetic AAAA Records
- DNS Troubleshooting for IPv6
Chapter 9: IPv6 Routing Protocols and Route Design
- Static Routing for IPv6
- OSPFv3: Protocol Mechanics and Configuration
- RIPng: Operation and Limitations
- BGP and IPv6: MP-BGP Implementation
- IS-IS for IPv6 and Large Networks
- Route Design and Aggregation Strategy
Chapter 10: Dual-Stack Architecture and Implementation
- Dual-Stack Design Principles
- Dual-Stack on Linux
- Dual-Stack on Enterprise Network Equipment
- Dual-Stack Application Considerations
- Dual-Stack Pitfalls and Troubleshooting
Chapter 11: IPv6-Only Network Architectures
- When IPv6-Only Makes Sense
- Designing an IPv6-Only Data Center
- Client Considerations and Compatibility
- Service Dependencies and Translation Needs
- Real-World IPv6-Only Deployments
Chapter 12: Transition Mechanisms: Tunneling and Brokering
- 6to4 and Automatic Tunneling
- 6rd and ISP-Scale Tunneling
- ISATAP for Intra-Site Connectivity
- Teredo and NAT Traversal
- Manual GRE and IPv6-in-IPv4 Tunnels
- VXLAN and Overlays with IPv6
- Transition Mechanism Selection Guide
Chapter 13: Translation Mechanisms: NAT64, DNS64, and SIIT
- NAT64 Architecture and Prefix Selection
- DNS64 Operation and Integration
- Stateless vs. Stateful NAT64
- 464XLAT and Carrier-Grade Deployment
- Application-Layer Translation Challenges
- NAT64/DNS64 Operational Considerations
Chapter 14: IPv4/IPv6 Interoperability Patterns
- Happy Eyeballs and DNS Resolution Ordering
- Dual-Stack Service Deployment
- Application Compatibility Checklist
- API and Service Mesh Implications
- Interoperability Testing Strategies
Chapter 15: Enterprise Networking with IPv6
- Campus and LAN IPv6 Design
- Enterprise WAN and Branch IPv6
- IPv6 for Wireless Networks
- IPv6 for VoIP and Unified Communications
- IPv6 for Enterprise IoT and OT
Chapter 16: Data Center and Cloud IPv6
- Data Center Fabric IPv6 Design
- IPv6 in VMware and Hyper-V
- IPv6 for Containers and Docker
- Kubernetes and IPv6 Networking
- Public Cloud IPv6: AWS, Azure, GCP
Chapter 17: Operating Systems and Host IPv6 Configuration
- Linux IPv6 Configuration and Tuning
- Windows Server and Client IPv6
- macOS and BSD IPv6 Notes
- Web Servers: Apache, Nginx with IPv6
- Mail and Database Servers IPv6
Chapter 18: Firewalls and IPv6 Security Architecture
- IPv6 Security Model and Differences from IPv4
- Firewall Design for IPv6
- IPv6 ACL Design and Implementation
- Zone-Based Firewalls and IPv6
- Next-Gen Firewalls and IPv6
Chapter 19: IPv6 Security: IPsec, VPNs, and Segmentation
- IPsec Integration with IPv6
- IPv6 Site-to-Site VPNs
- IPv6 Remote Access and SSL VPNs
- Microsegmentation in IPv6 Environments
- IPv6-Specific Attack Surfaces
Chapter 20: Multicast, Anycast, and Service Discovery
- IPv6 Multicast Addressing and Design
- PIM and Multicast Routing with IPv6
- Anycast: Design and Deployment
- Multicast DNS and Service Discovery
- IoT and mDNS in IPv6
Chapter 21: IPv6 Troubleshooting and Packet Analysis
- IPv6 Troubleshooting Methodology
- Packet Capture with tcpdump and Wireshark
- Analyzing NDP and RA Problems
- Routing Troubleshooting
- Common Failure Modes and Fixes
Chapter 22: IPv6 Observability, Monitoring, and Performance
- IPv6 Monitoring: What to Measure
- NetFlow, sFlow, and IPv6 Flow Data
- Logging and SIEM for IPv6
- Performance Optimization and MTU Tuning
- Alerting and Capacity Planning
Chapter 23: Automation and Infrastructure as Code for IPv6
- Ansible for IPv6 Configuration Management
- Terraform and IPv6 in Cloud/Network
- Python and Netmiko for IPv6 Automation
- IPAM with NetBox and IPv6
- CI/CD for IPv6 Network Changes
Chapter 24: IPv6 Migration Strategies and Real-World Deployment Patterns
- Planning the IPv6 Migration
- Migration Approach: Dual-Stack First
- Migration Approach: Site-by-Site Deployment
- Migration Approach: Network Segment by Segment
- Migration Approach: IPv6-Only with NAT64/DNS64
- Real-World Deployment Patterns
- Common Migration Mistakes and How to Avoid Them
- Migration Timeline and Expectations
Conclusion
References
- Core IPv6 Standards
- ICMPv6 and PMTUD
- Addressing and Allocation
- DHCPv6
- Privacy Extensions
- DNS and IPv6
- Transition and Migration Mechanisms
- Routing Protocols
- Security
- Operational and Deployment Guidance
- IPv6 Adoption Statistics
- Tools and Platforms
- Additional References
