Estimating IPv6 & DNSSEC External Service Deployment Status

Background and Methodology


Background and MethodologyIPv6 & DNSSEC SnapShots
USG IPv6 & DNSSEC StatisticsUSG IPv4 Statistics
Industry IPv6 & DNSSEC StatisticsIndustry IPv4 Statistics
University IPv6 & DNSSEC StatisticsUniversity IPv4 Statistics
CFO Act Agency Summary StatisticsUSG IPv6 Enabled WWW Sites



Frequently Asked Questions (FAQ)


Background


IPv6 Service Deployment Monitor

    This monitoring tool has been developed to try to answer the questions above.The tool attempts to characterize that state of IPv6 deployment on external facing core network services and to track the progress of IPv6 deployments over time.The monitoring tool examines the IPv6 and IPv4 status of DNS, Mail, and Web services for domains on a regular (daily or weekly) basis.USG results post every day ~3pmwhile Industry and University results update on the weekends.The most recently collected data is displayed for both protocols as are the IPv6 adoption statistics over time.

    Note 1, this tool is unrelated to the USGv6 Profile and the USGv6 Testing Program. That is, no attempt is made to assess if the services monitored are running over IPv6 stacks that are compliant with the USGv6 Profile. The USGv6 Program is focused on acquisition and makes no recommendations about deployment scenarios. This tool on the other hand, only focuses on deployment issues.

    For each monitored domain and service we report the estimated number of IPv4 interfaces for that service, followed by an estimate of the number of those interfaces that (a) have an IPv6 address assigned, (b) of those, the number of interfaces whose IPv6 addresses are reachable (simply a 'ping' test, which is [understandably] frequently blocked - no color designations are made here) to our monitor, and finally, (c) the number of those interfaces actually running the service over IPv6 (e.g., answering DNS queries).Finally we include a heuristic indication of whether the service in question seems to be operating within the domain in question or provided elsewhere.The result is an output as follows:

DomainOrganizationDNSMailWeb
gov.one.Agency One[3] 3/3/0 [I][1] 0/0/0 [I][1] 1/0/0 [P]
gov.two.Agency Two[6] 5/5/5 [M][1] 1/0/1 [O][1] 2/2/N [I]
gov.three.    Agency Three    [2] 0/0/0 [O][3] 1/0/0 [P][4] 4/4/4 [O]
gov.four.Agency Four[S] 0/0/0 [L][0] 0/0/0 [-][0] 0/0/0 [-]

    • Note that for a given service...
    • We color the cell red if there appears to be no IPv6 addresses assigned, e.g., 0/0/0
    • We color the cell yellow if addresses are assigned but the application service can not be reached, e.g., 1/0/0 or 3/3/0
    • We color the cell green if the service is fully supported over native IPv6, e.g., 4/4/4 or 1/0/1
    • We color the cell gray if the service is intentionally not assigned, i.e., [0] 0/0/0 [-]


Test Methodologies

    The USG monitor relies on the list of Federal Executive Agency Internet Domains.To [de]register a domain contact the registrar.We further augmented the list with domains learned from previous research studies.Here is the changeLog for the list of domains under test as well as the nonexistent domains that were excluded from testing.The Industry monitor relies on the Fortune 1000 list as well as domains collected from the Alexa list of the top 100 sites in the US.We added to the Industry list with other relevant domains and learned ipv6 domain permutations, e.g., ipv6.google.com.The University list was borrowed from an NCAA site of Division 1 schools and has been amended over time.The domain lists under test are not meant to be exhaustive; the goal is to monitor a representation of all domains that exist, focusing on those of interest.Suggested additions of domains are welcome and may be added if appropriately interesting and relevant (i.e., those providing yet unmonitored service interfaces).The key for the output of the monitor is as follows:
[IPv4,S] :: Estimated number of IPv4 service interfaces
IPv6 server assignment is missing, e.g. 0/0/0
IPv6 addresses assigned to servers, e.g. 2/0/0
IPv6 addresses assigned and respond to ping, e.g. 2/2/0
IPv6 addresses are fully operational, e.g. 2/2/2,N
IPv6 addresses are intentionally not assigned, [0] 0/0/0 [-]
[I,P,O,M,L,-] :: Logical location of service relative to domain

[ For IPv4 Results :: values are v4_assigned/v4_reachable/v4_operational ]

    Give