210 likes | 214 Views
This project focuses on the implementation of IPv6 for Dutch municipalities, aiming to make their websites and email accessible through IPv6. With a dedicated team, continuous measurement of progress, and the use of a NAT64 translation gateway, the project has achieved significant growth in IPv6 reachability. Lessons learned and future steps are also discussed.
E N D
Gerben Klein Baltink Chair Internet Standards Platform Dutch municipalitiesand IPv6: The success of a focussed approach Herman TimmermansProjectmanager IPv6 ImplementationVNG Realisatie Joost TholhuijsenSr. Consultant IPv6 ImplementationVNG Realisatie
Modern Internet Standards IPv6 (modern internet address) DNSSEC (signed domain) HTTPS+HSTS (secure website connection) DMARC+DKIM+SPF (prevention of mail spoofing) STARTTLS+DANE (prevention of mail eavesdropping)
Dutch policy on open standards In general: • Open standards are the norm • Goal: interoperabilityandvendorneutrality Comply-or-explain: • For selected open standards • Whengovernementsinvest/procure • List with 41 open standards • Internet and security • Document and web • E-invoicingandadministration • ...
VNG Realisatie • VNG is the Association of Netherlands Municipalities • Association has been established in 1912 andrepresentsall 355 Dutch municipalities • VNG supports andpromotesthestrengthandquality of localadministrations • VNG Realisatie preparesand supports new developments on IT within VNG • Close cooperation withothergovernmentalorganisations, especiallyDutch Standardisation Forum andLogius
IPv6 implementation Dutch Municipalities • Focus on IPv6 for web presence: websites, email • Goal: everymunicipal website canbeaccessedthrough IPv6 bythe end of 2019, email access through IPv6 bymid 2020 • Internalimplementation IPv6 will start from 2020 onwards • Implementation of IPv6 is also part of development of private community cloud infrastructure (GGI) programme
IPv6 status Dutch municipalities (Oct. 2019) • Municipal websites dual-stack: 62% [n=221] • Email dual-stack: 16% [n=56] • Growth of IPv6 reachable websites is achieved in almost 1,5 year: from 19% bythe end of 2017 to 62% today • Email needs special attention • Implementation of IPv6 on internalnetworks has been launched as a pilot action within 6 municipalities
The ‘IPv6-ification’ of Dutch Municipalities Green= mainmunicipal website dual-stack Sources: www.internet.nlandhttps://www.waarstaatjegemeente.nl/dashboard/Dienstverlening-en-digitalisering
Increase of Dutch municipal websites reachable via IPv6 Start VNG Realisatie IPv6 project
The closed loop approach Results API internet.nl IPv4 Municipal website Public Report IPv6 https://www.city.nl IPv6 project
IPv6 implementation approach Dutch municipalities • Dedicatedimplementation ‘hands-on’ team of 4 • Continuousmeasurement of progressusing ‘Internet.nl’ • Presentation of achievedresults in monthly updatethroughthe public website: ‘waarstaatjegemeente.nl’ • Use of dedicated NAT64 translation gateway removeconstraint of non-compliant website (temporarily) • Promotion andcommunication support: video*, live and web presentations, management letters, social media
IPv6 access for IPv4 websites IPv6-visitor of municipal website EffectiveIPv6 session Internet DNS with IPv4 address and IPv6 address of municipal website Municipal IPv4-only website NAT64Gateway
IPv6 access for IPv4 websites • Dutch municipalities have tousesocalledgovernmental IPv6 addresses • These addresses have a specific range: onlyforgovernmentaluse • Toimplement these addresses we use a dedicatedIPv6 Address Framework, coordinatedwith Logius • Logius acts as anintermediatebetweengovernmentalorganisationsand RIPE concerningtherequestforandtheusage of IP-addresses
Marketing & communication approach • Celebrateachieved goals • Usetargetedmessages • Useevery relevant communicationchannelto spread themessage
The next step • Accelleratetheimplementation of IPv6 Example: IPv6 week formunicipalities, suppliers/vendorsandothergovernmentalorganisations, 2-4 Oct 2019 • Manifesto for a government-wideimplementation of IPv6: • Every Dutch governmentalorganisationcanbereached via IPv6 bythe end of 2021 • Ahead of that: • All Dutch municipal websites canbeaccessedby IPv6 bythe end of thisyear, andby e-email bymid 2020
Lessonslearned • Do not waste timewith business case discussions! • Keep itsimple: focus on low hanging fruit: success breeds success • Useexisting company programs (in this case GGI) as a carrier for IPv6 • Removeeverypossibleconstraint or blockade beforehand • Use of ‘internet.nl’ as dedicatedmeasurement tool • Present resultscontinuously: considernamingandshaming • Deploy a small dedicated team of hands-on specialists: cover development andimplementation. Providechecklists andguidelines (in cooperation with e.g. SURFnet) • Target messages at theright levels: general management, IT specialists, operators • Co-operatewithvendorsandsuppliers
Additional info • Joost Tholhuijsen • Joost.Tholhuijsen@vng.nl • LinkedIn:linkedin.com/in/joost-tholhuijsen • Herman Timmermans • Herman.timmermans@vng.nl • LinkedIn: linkedin.com/in/htimmermans