CINXE.COM
IPv6 Security - CERN Document Server
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <!--[if IEMobile 7]><html class="iem7" xmlns="http://www.w3.org/1999/xhtml" lang="ka" xml:lang="ka" xmlns:og="http://ogp.me/ns#" xmlns:fb="http://ogp.me/ns/fb#"><![endif]--> <!--[if lte IE 6]><html class="ie6 ie6-7 ie6-8" xmlns="http://www.w3.org/1999/xhtml" lang="ka" xml:lang="ka" xmlns:og="http://ogp.me/ns#" xmlns:fb="http://ogp.me/ns/fb#"><![endif]--> <!--[if (IE 7)&(!IEMobile)]><html class="ie7 ie6-7 ie6-8" xmlns="http://www.w3.org/1999/xhtml" lang="ka" xml:lang="ka" xmlns:og="http://ogp.me/ns#" xmlns:fb="http://ogp.me/ns/fb#"><![endif]--> <!--[if IE 8]><html class="ie8 ie6-8" xmlns="http://www.w3.org/1999/xhtml" lang="ka" xml:lang="ka" xmlns:og="http://ogp.me/ns#" xmlns:fb="http://ogp.me/ns/fb#"><![endif]--> <!--[if (gte IE 9)|(gt IEMobile 7)]><!--><html xmlns="http://www.w3.org/1999/xhtml" lang="ka" xml:lang="ka" xmlns:og="http://ogp.me/ns#" xmlns:fb="http://ogp.me/ns/fb#"><!--<![endif]--> <head> <title>IPv6 Security - CERN Document Server</title> <link href='https://framework.web.cern.ch/framework/2.0/fonts/PTSansWeb/PTSansWeb.css' rel='stylesheet' type='text/css' /> <link rel="stylesheet" href="https://cds.cern.ch/img/invenio.css?v=20141127" type="text/css" /> <link rel="stylesheet" href="https://cds.cern.ch/img/cern_theme/css/cern_theme.css?v=20141127" type="text/css" /> <link rel="stylesheet"href="/css/font-awesome.min.css"> <meta http-equiv="X-UA-Compatible" content="IE=Edge"/> <link rel="stylesheet" href="https://cds.cern.ch/img/cern_toolbar/css/toolbar.css" type="text/css" /> <!--[if lt IE 8]> <link href="https://cds.cern.ch/img/cern_toolbar/css/toolbar-ie.css" rel="stylesheet" type="text/css"> <![endif]--> <!--[if lt IE 8]> <link rel="stylesheet" type="text/css" href="https://cds.cern.ch/img/invenio-ie7.css" /> <![endif]--> <!--[if gt IE 8]> <style type="text/css">div.restrictedflag {filter:none;}</style> <![endif]--> <link rel="canonical" href="https://cds.cern.ch/record/2296676" /> <link rel="alternate" hreflang="el" href="https://cds.cern.ch/record/2296676?ln=el" /> <link rel="alternate" hreflang="fr" href="https://cds.cern.ch/record/2296676?ln=fr" /> <link rel="alternate" hreflang="bg" href="https://cds.cern.ch/record/2296676?ln=bg" /> <link rel="alternate" hreflang="zh-TW" href="https://cds.cern.ch/record/2296676?ln=zh_TW" /> <link rel="alternate" hreflang="pt" href="https://cds.cern.ch/record/2296676?ln=pt" /> <link rel="alternate" hreflang="no" href="https://cds.cern.ch/record/2296676?ln=no" /> <link rel="alternate" hreflang="hr" href="https://cds.cern.ch/record/2296676?ln=hr" /> <link rel="alternate" hreflang="ca" href="https://cds.cern.ch/record/2296676?ln=ca" /> <link rel="alternate" hreflang="de" href="https://cds.cern.ch/record/2296676?ln=de" /> <link rel="alternate" hreflang="it" href="https://cds.cern.ch/record/2296676?ln=it" /> <link rel="alternate" hreflang="zh-CN" href="https://cds.cern.ch/record/2296676?ln=zh_CN" /> <link rel="alternate" hreflang="sv" href="https://cds.cern.ch/record/2296676?ln=sv" /> <link rel="alternate" hreflang="sk" href="https://cds.cern.ch/record/2296676?ln=sk" /> <link rel="alternate" hreflang="en" href="https://cds.cern.ch/record/2296676?ln=en" /> <link rel="alternate" hreflang="pl" href="https://cds.cern.ch/record/2296676?ln=pl" /> <link rel="alternate" hreflang="ru" href="https://cds.cern.ch/record/2296676?ln=ru" /> <link rel="alternate" hreflang="ka" href="https://cds.cern.ch/record/2296676?ln=ka" /> <link rel="alternate" hreflang="ja" href="https://cds.cern.ch/record/2296676?ln=ja" /> <link rel="alternate" hreflang="es" href="https://cds.cern.ch/record/2296676?ln=es" /> <link rel="alternate" type="application/rss+xml" title="CERN Document Server RSS" href="/rss?ln=ka" /> <link rel="search" type="application/opensearchdescription+xml" href="https://cds.cern.ch/opensearchdescription" title="CERN Document Server" /> <link rel="unapi-server" type="application/xml" title="unAPI" href="https://cds.cern.ch/unapi" /> <link rel="apple-touch-icon" href="/apple-touch-icon.png"/> <link rel="apple-touch-icon-precomposed" href="/apple-touch-icon-precomposed.png"/> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta http-equiv="Content-Language" content="ka" /> <meta name="description" content="IPv4 network addresses are running out and the deployment of IPv6 networking in many places is now well underway. Following the work of the HEPiX IPv6 Working Group, a growing number of sites in the Worldwide Large Hadron Collider Computing Grid (WLCG) are deploying dual-stack IPv6/IPv4 services. The aim of this is to support the use of IPv6-only clients, i.e. worker nodes, virtual machines or containers. The IPv6 networking protocols while they do contain features aimed at improving security also bring new challenges for operational IT security. The lack of maturity of IPv6 implementations together with the increased complexity of some of the protocol standards raise many new issues for operational security teams. The HEPiX IPv6 Working Group is producing guidance on best practices in this area. This paper considers some of the security concerns for WLCG in an IPv6 world and presents the HEPiX IPv6 working group guidance for the system administrators who manage IT services on the WLCG distributed infrastructure, for their related site security and networking teams and for developers and software engineers working on WLCG applications. Babik, M; Chudoba, J; Dewhurst, A; Finnern, T; Froy, T; Grigoras, C; Hafeez, K; Hoeft, B; Idiculla, T; Kelsey, D P; López Muñoz, F; Martelli, E; Nandakumar, R; Ohrenberg, K; Prelz, F; Rand, D; Sciabà, A; Tigerstedt, U; Traynor, D; Wartel, R" /> <meta name="keywords" content="CERN Document Server, WebSearch, CERN Document Server" /> <script type="text/javascript" src="https://cds.cern.ch/js/jquery.min.js"></script> <!-- WebNews CSS library --> <link rel="stylesheet" href="https://cds.cern.ch/img/webnews.css" type="text/css" /> <!-- WebNews JS library --> <script type="text/javascript" src="https://cds.cern.ch/js/webnews.js?v=20131009"></script> <meta property="fb:app_id" content="137353533001720"/> <script type="text/x-mathjax-config"> MathJax.Hub.Config({ tex2jax: {inlineMath: [['$','$']], processEscapes: true}, showProcessingMessages: false, messageStyle: "none" }); </script> <script src="/MathJax/MathJax.js?config=TeX-AMS_CHTML" type="text/javascript"> </script> <!-- GoogleScholar --> <meta content="IOP : IPv6 Security" name="citation_title" /> <meta content="Babik, M" name="citation_author" /> <meta content="Prelz, F" name="citation_author" /> <meta content="Froy, T" name="citation_author" /> <meta content="Grigoras, C" name="citation_author" /> <meta content="Chudoba, J" name="citation_author" /> <meta content="Finnern, T" name="citation_author" /> <meta content="Idiculla, T" name="citation_author" /> <meta content="Dewhurst, A" name="citation_author" /> <meta content="Kelsey, D P" name="citation_author" /> <meta content="Ohrenberg, K" name="citation_author" /> <meta content="López Muñoz, F" name="citation_author" /> <meta content="Tigerstedt, U" name="citation_author" /> <meta content="Martelli, E" name="citation_author" /> <meta content="Traynor, D" name="citation_author" /> <meta content="Rand, D" name="citation_author" /> <meta content="Hoeft, B" name="citation_author" /> <meta content="Wartel, R" name="citation_author" /> <meta content="Nandakumar, R" name="citation_author" /> <meta content="Sciabà, A" name="citation_author" /> <meta content="Hafeez, K" name="citation_author" /> <meta content="10.1088/1742-6596/898/10/102008" name="citation_doi" /> <meta content="J. Phys.: Conf. Ser." name="citation_journal_title" /> <meta content="898" name="citation_volume" /> <meta content="102008" name="citation_firstpage" /> <meta content="2017" name="citation_publication_date" /> <meta name="citation_online_date" content="2017/12/08"> <meta content="10.1088/1742-6596/898/10/102008" name="citation_doi" /> <meta name="citation_pdf_url" content="https://cds.cern.ch/record/2296676/files/pdf.pdf" /> <!-- OpenGraph --> <meta content="IPv6 Security" property="og:title" /> <meta content="IOP" property="og:title" /> <meta content="website" property="og:type" /> <meta content="website" property="og:type" /> <meta content="https://cds.cern.ch/record/2296676" property="og:url" /> <meta content="CERN Document Server" property="og:site_name" /> <meta content="IPv4 network addresses are running out and the deployment of IPv6 networking in many places is now well underway. Following the work of the HEPiX IPv6 Working Group, a growing number of sites in the Worldwide Large Hadron Collider Computing Grid (WLCG) are deploying dual-stack IPv6/IPv4 services. The aim of this is to support the use of IPv6-only clients, i.e. worker nodes, virtual machines or containers. The IPv6 networking protocols while they do contain features aimed at improving security also bring new challenges for operational IT security. The lack of maturity of IPv6 implementations together with the increased complexity of some of the protocol standards raise many new issues for operational security teams. The HEPiX IPv6 Working Group is producing guidance on best practices in this area. This paper considers some of the security concerns for WLCG in an IPv6 world and presents the HEPiX IPv6 working group guidance for the system administrators who manage IT services on the WLCG distributed infrastructure, for their related site security and networking teams and for developers and software engineers working on WLCG applications." property="og:description" /> <meta content="IOP" property="og:description" /> <!-- Twitter Card --> <meta content="summary" name="twitter:card" /> <meta content="summary" name="twitter:card" /> <style></style> </head> <body class="CERN32Document32Server search" lang="ka"> <!-- toolbar starts --> <div id="cern-toolbar"> <h1><a href="http://cern.ch" title="CERN">CERN <span>Accelerating science</span></a></h1> <ul> <li class="cern-accountlinks"><a class="cern-account" href="https://cds.cern.ch/youraccount/login?ln=ka&referer=https%3A//cds.cern.ch/record/2296676%3Fln%3Dka" title="Sign in to your CERN account">Sign in</a></li> <li><a class="cern-directory" href="http://cern.ch/directory" title="Search CERN resources and browse the directory">Directory</a></li> </ul> </div> <!-- toolbar ends --> <!-- Nav header starts--> <div role="banner" class="clearfix" id="header"> <div class="header-inner inner"> <hgroup class="clearfix"> <h2 id="site-name"> <a rel="home" title="Home" href="/"><span>CERN Document Server</span></a> </h2> <h3 id="site-slogan">Access articles, reports and multimedia content in HEP</h3> </hgroup><!-- /#name-and-slogan --> <div role="navigation" id="main-navigation" class="cdsmenu"> <h2 class="element-invisible">Main menu</h2><ul class="links inline clearfix"> <li class="menu-386 first active-trail"><a class="active-trail" href="https://cds.cern.ch/?ln=ka">ძებნა</a></li> <li class="menu-444 "><a class="" title="" href="https://cds.cern.ch/submit?ln=ka">დაყენება</a></li> <li class="menu-426 "><a class="" href="https://cds.cern.ch/help/?ln=ka">დახმარება</a></li> <li class="leaf hassubcdsmenu"> <a hreflang="en" class="header" href="https://cds.cern.ch/youraccount/display?ln=ka">პერს</a> <ul class="subsubcdsmenu"><li><a href="https://cds.cern.ch/youralerts/list?ln=ka">თქვენი ცვლილებები</a></li><li><a href="https://cds.cern.ch/yourbaskets/display?ln=ka">თქვენი კალათები</a></li><li><a href="https://cds.cern.ch/yourcomments?ln=ka">Your comments</a></li><li><a href="https://cds.cern.ch/youralerts/display?ln=ka">თქვენი ძებნა</a></li></ul></li> </ul> </div> </div> </div> <!-- Nav header ends--> <table class="navtrailbox"> <tr> <td class="navtrailboxbody"> <a href="/?ln=ka" class="navtrail">მთავარი</a> > IPv6 Security </td> </tr> </table> </div> <div class="pagebody"><div class="pagebodystripemiddle"> <div class="detailedrecordbox"> <div class="detailedrecordtabs"> <div> <ul class="detailedrecordtabs"><li class="on first"><a href="/record/2296676/?ln=ka">ინფორმაცია </a></li><li class=""><a href="/record/2296676/files?ln=ka">Files </a></li></ul> <div id="tabsSpacer" style="clear:both;height:0px"> </div></div> </div> <div class="detailedrecordboxcontent"> <div class="top-left-folded"></div> <div class="top-right-folded"></div> <div class="inside"> <!--<div style="height:0.1em;"> </div> <p class="notopgap"> </p>--> <abbr class="unapi-id" title="2296676"></abbr> <style type="text/css"> <!-- ul.detailedrecordtabs li.on a{background-color:#4D94CC;color:#fff !important;border-bottom:1px solid #4D94CC!important;} div.detailedrecordboxcontent {padding-top:0px !important;} --> </style> <table class="formatRecordTableFullWidth" > <tr> <td class="formatRecordHeader" style="background-image: url('https://cds.cern.ch/img/journals.jpg');" colspan="2"> <!--YTD: record may have more than one 690C.a tag--> <a style="color:#fff;text-decoration:none" href="https://cds.cern.ch/collection/Published%20Articles">Published Articles</a> </td> </tr> <script type="text/javascript"> $( document ).ready(function() { $('.showAuthor').on('click', function() { var author = '<p>' + $(this).data('name') + '</p>'; var affiliation = $(this).data('affiliation') + '</br>'; var contribution = $(this).data('contribution') + '</br>'; $.magnificPopup.open({ items: { src: '<div id="ovelary-mathjax" class="overlay-white oc-content overlay-white-500">' + author + affiliation + contribution + '</div>', type: 'inline' }, callbacks: { open: function() { var div = document.getElementById("overlay-mathjax") MathJax.Hub.Queue(["Typeset", MathJax.Hub, div]); }, } }) }) }); </script> <tr><td class="formatRecordLabel"> Title </td><td style="padding-left:5px;"><b>IPv6 Security</b></td></tr> <tr><td class="formatRecordLabel"><span style="white-space:nowrap;"> Author(s) </span> </td><td style="padding-left:5px;"> <script type="text/javascript"> function toggle_authors_visibility(){ var more = document.getElementById('more'); var link = document.getElementById('link'); var extension = document.getElementById('extension'); if (more.style.display=='none'){ more.style.display = ''; extension.style.display = 'none'; link.innerHTML = "დამალვა" } else { more.style.display = 'none'; extension.style.display = ''; link.innerHTML = "ყველა 20 ავტორის ჩვენება " } link.style.color = "rgb(204,0,0);" } function set_up(){ var extension = document.getElementById('extension'); extension.innerHTML = ""; toggle_authors_visibility(); } </script> <a name="show_hide" /><a href="https://cds.cern.ch/search?f=author&p=Babik%2C%20M&ln=ka">Babik, M</a> (CERN) ; <a href="https://cds.cern.ch/search?f=author&p=Chudoba%2C%20J&ln=ka">Chudoba, J</a> (Prague, Inst. Phys.) ; <a href="https://cds.cern.ch/search?f=author&p=Dewhurst%2C%20A&ln=ka">Dewhurst, A</a> (Rutherford) ; <a href="https://cds.cern.ch/search?f=author&p=Finnern%2C%20T&ln=ka">Finnern, T</a> (DESY) ; <a href="https://cds.cern.ch/search?f=author&p=Froy%2C%20T&ln=ka">Froy, T</a> (Queen Mary, U. of London) ; <a href="https://cds.cern.ch/search?f=author&p=Grigoras%2C%20C&ln=ka">Grigoras, C</a> (CERN) ; <a href="https://cds.cern.ch/search?f=author&p=Hafeez%2C%20K&ln=ka">Hafeez, K</a> (Rutherford) ; <a href="https://cds.cern.ch/search?f=author&p=Hoeft%2C%20B&ln=ka">Hoeft, B</a> (KIT, Karlsruhe) ; <a href="https://cds.cern.ch/search?f=author&p=Idiculla%2C%20T&ln=ka">Idiculla, T</a> (Rutherford) ; <a href="https://cds.cern.ch/search?f=author&p=Kelsey%2C%20D%20P&ln=ka">Kelsey, D P</a> (Rutherford)<span id="more" style=""> ; <a href="https://cds.cern.ch/search?f=author&p=L%C3%B3pez%20Mu%C3%B1oz%2C%20F&ln=ka">López Muñoz, F</a> (PIC, Bellaterra ; Madrid, CIEMAT) ; <a href="https://cds.cern.ch/search?f=author&p=Martelli%2C%20E&ln=ka">Martelli, E</a> (CERN) ; <a href="https://cds.cern.ch/search?f=author&p=Nandakumar%2C%20R&ln=ka">Nandakumar, R</a> (Rutherford) ; <a href="https://cds.cern.ch/search?f=author&p=Ohrenberg%2C%20K&ln=ka">Ohrenberg, K</a> (DESY) ; <a href="https://cds.cern.ch/search?f=author&p=Prelz%2C%20F&ln=ka">Prelz, F</a> (INFN, Milan) ; <a href="https://cds.cern.ch/search?f=author&p=Rand%2C%20D&ln=ka">Rand, D</a> (Imperial Coll., London) ; <a href="https://cds.cern.ch/search?f=author&p=Sciab%C3%A0%2C%20A&ln=ka">Sciabà, A</a> (CERN) ; <a href="https://cds.cern.ch/search?f=author&p=Tigerstedt%2C%20U&ln=ka">Tigerstedt, U</a> (Espoo, Sci. Computing Ctr.) ; <a href="https://cds.cern.ch/search?f=author&p=Traynor%2C%20D&ln=ka">Traynor, D</a> (Queen Mary, U. of London) ; <a href="https://cds.cern.ch/search?f=author&p=Wartel%2C%20R&ln=ka">Wartel, R</a> (CERN)</span> <span id="extension"></span> <small><i><a id="link" href="#" onclick="toggle_authors_visibility()" style="color:rgb(204,0,0);"></a></i></small><script type="text/javascript">set_up()</script></td></tr> <tr><td class="formatRecordLabel"> Publication </td><td style="padding-left:5px;">2017</td></tr> <tr><td class="formatRecordLabel"> Number of pages </td><td style="padding-left:5px;">8</td></tr> <tr><td class="formatRecordLabel"> In: </td><td style="padding-left:5px;"><a href="http://dx.doi.org/10.1088/1742-6596/898/10/102008"><i>J. Phys.: Conf. Ser.</i> 898 (2017) 102008</a> </a></td></tr> <tr><td class="formatRecordLabel"> In: </td><td style="padding-left:5px;"><a href="https://cds.cern.ch/record/2157890">22nd International Conference on Computing in High Energy and Nuclear Physics, CHEP 2016</a>, San Francisco, Usa, 10 - 14 Oct 2016, pp.102008</td></tr> <tr><td class="formatRecordLabel"> DOI </td><td style="padding-left:5px;"><a href="http://dx.doi.org/10.1088/1742-6596/898/10/102008" title="DOI" target="_blank">10.1088/1742-6596/898/10/102008</a> <tr><td class="formatRecordLabel"> Subject category </td><td style="padding-left:5px;">Computing and Computers</td></tr> <tr><td class="formatRecordLabel"> Abstract </td><td style="padding-left:5px;">IPv4 network addresses are running out and the deployment of IPv6 networking in many places is now well underway. Following the work of the HEPiX IPv6 Working Group, a growing number of sites in the Worldwide Large Hadron Collider Computing Grid (WLCG) are deploying dual-stack IPv6/IPv4 services. The aim of this is to support the use of IPv6-only clients, i.e. worker nodes, virtual machines or containers. The IPv6 networking protocols while they do contain features aimed at improving security also bring new challenges for operational IT security. The lack of maturity of IPv6 implementations together with the increased complexity of some of the protocol standards raise many new issues for operational security teams. The HEPiX IPv6 Working Group is producing guidance on best practices in this area. This paper considers some of the security concerns for WLCG in an IPv6 world and presents the HEPiX IPv6 working group guidance for the system administrators who manage IT services on the WLCG distributed infrastructure, for their related site security and networking teams and for developers and software engineers working on WLCG applications.</td></tr> <tr><td class="formatRecordLabel"> Copyright/License </td><td style="padding-left:5px;">publication: (License: <a href="http://creativecommons.org/licenses/by/3.0/">CC-BY-3.0</a>)</td></tr> </table> <br/>Corresponding record in: <a href="http://inspirehep.net/record/1638905">Inspire</a> <small> </small> <br/> <br/><br/><div align="right"><div style="padding-bottom:2px;padding-top:30px;"><span class="moreinfo" style="margin-right:10px;"> <a href="" class="moreinfo">Back to search</a> </span></div></div> <div class="bottom-left-folded"><div class="recordlastmodifiedbox" style="position:relative;margin-left:1px"> ჩანაწერი შექმნილია 2017-12-08, ბოლოს შესწორებულია 2021-02-09</div></div> <div class="bottom-right-folded" style="text-align:right;padding-bottom:2px;"> <span class="moreinfo" style="margin-right:10px;"><a href="/search?ln=ka&p=recid%3A2296676&rm=wrd" class="moreinfo">მსგავსი ჩანაწერები</a></span></div> </div> </div> </div> <br/> <br /> <div class="detailedrecordminipanel"> <div class="top-left"></div><div class="top-right"></div> <div class="inside"> <div id="detailedrecordminipanelfile" style="width:33%;float:left;text-align:center;margin-top:0"> <div><small class="detailedRecordActions">სრული ტექსტი:</small> <br /><a href="/record/2296676/files/pdf.pdf"><img style="border:none" src="/img/file-icon-text-34x48.gif" alt="სრული ტექსტის ჩამოტვირთვა" /><br />PDF</a><br /></div> </div> <div id="detailedrecordminipanelreview" style="width:30%;float:left;text-align:center"> </div> <div id="detailedrecordminipanelactions" style="width:36%;float:right;text-align:right;"> <ul class="detailedrecordactions"> <li><a href="/yourbaskets/add?ln=ka&recid=2296676">პირად კალათაში დამატება</a></li> <li>ექსპორტირება <a style="text-decoration:underline;font-weight:normal" href="/record/2296676/export/hx?ln=ka">BibTeX</a>, <a style="text-decoration:underline;font-weight:normal" href="/record/2296676/export/hm?ln=ka">MARC</a>, <a style="text-decoration:underline;font-weight:normal" href="/record/2296676/export/xm?ln=ka">MARCXML</a>, <a style="text-decoration:underline;font-weight:normal" href="/record/2296676/export/xd?ln=ka">DC</a>, <a style="text-decoration:underline;font-weight:normal" href="/record/2296676/export/xe?ln=ka">EndNote</a>, <!-- <a style="text-decoration:underline;font-weight:normal" href="/record/2296676/export/xe8x?ln=ka">EndNote (8-X)</a>,--> <a style="text-decoration:underline;font-weight:normal" href="/record/2296676/export/xn?ln=ka">NLM</a>, <a style="text-decoration:underline;font-weight:normal" href="/record/2296676/export/xw?ln=ka">RefWorks</a> </li> </ul> <div style='padding-left: 13px;'> <!-- JQuery Bookmark Button BEGIN --> <div id="bookmark"></div> <div id="bookmark_sciencewise"></div> <style type="text/css"> #bookmark_sciencewise, #bookmark {float: left;} #bookmark_sciencewise li {padding: 2px; width: 25px;} #bookmark_sciencewise ul, #bookmark ul {list-style-image: none;} </style> <script type="text/javascript" src="/js/jquery.bookmark.min.js"></script> <style type="text/css">@import "/css/jquery.bookmark.css";</style> <script type="text/javascript">// <![CDATA[ $.bookmark.addSite('sciencewise', 'ScienceWise.info', 'https://cds.cern.ch/img/sciencewise.png', 'en', 'bookmark', 'http://sciencewise.info/bookmarks/cds:2296676/add'); $('#bookmark_sciencewise').bookmark({sites: ['sciencewise']}); $('#bookmark').bookmark({ sites: ['facebook', 'twitter', 'linkedin', 'google_plusone'], icons: '/img/bookmarks.png', url: 'https://cds.cern.ch/record/2296676', addEmail: true, title: "IPv6 Security", description: "IPv4 network addresses are running out and the deployment of IPv6 networking in many places is now well underway. Following the work of the HEPiX IPv6 Working Group, a growing number of sites in the Worldwide Large Hadron Collider Computing Grid (WLCG) are deploying dual-stack IPv6/IPv4 services. The aim of this is to support the use of IPv6-only clients, i.e. worker nodes, virtual machines or containers. The IPv6 networking protocols while they do contain features aimed at improving security also bring new challenges for operational IT security. The lack of maturity of IPv6 implementations together with the increased complexity of some of the protocol standards raise many new issues for operational security teams. The HEPiX IPv6 Working Group is producing guidance on best practices in this area. This paper considers some of the security concerns for WLCG in an IPv6 world and presents the HEPiX IPv6 working group guidance for the system administrators who manage IT services on the WLCG distributed infrastructure, for their related site security and networking teams and for developers and software engineers working on WLCG applications." }); // ]]> </script> <!-- JQuery Bookmark Button END --> </div> </div> <div style="clear:both;margin-bottom: 0;"></div> </div> <div class="bottom-left"></div><div class="bottom-right"></div> </div> </div></div> <footer id="footer" class="pagefooter clearfix"> <!-- replaced page footer --> <div class="pagefooterstripeleft"> CERN Document Server :: <a class="footer" href="https://cds.cern.ch/?ln=ka">ძებნა</a> :: <a class="footer" href="https://cds.cern.ch/submit?ln=ka">დაყენება</a> :: <a class="footer" href="https://cds.cern.ch/youraccount/display?ln=ka">პერს</a> :: <a class="footer" href="https://cds.cern.ch/help/?ln=ka">დახმარება</a> :: <a class="footer" href="https://cern.service-now.com/service-portal?id=privacy_policy&se=CDS-Service" target="_blank">Privacy Notice</a> <br /> დაფუძნებულია <a class="footer" href="http://invenio-software.org/">Invenio</a> <br /> შენახულია <a class="footer" href="https://cern.service-now.com/service-portal?id=service_element&name=CDS-Service">CDS Service</a> - Need help? Contact <a href="https://cern.service-now.com/service-portal?id=service_element&name=CDS-Service">CDS Support</a>. <br /> </div> <div class="pagefooterstriperight"> <div class="cern-logo"> <a id="logo" href="http://cern.ch" title="CERN" rel="CERN" ><img src="https://cds.cern.ch/img/cern_theme/img/cern-logo-large.png" alt="CERN" /></a> </div> <div class="cern-languagebox"> ეს საიტი ასევე ხელმისაწვდომია შემდეგ ენებში:<br /><a href="/record/2296676?ln=bg" class="langinfo">Български</a> <a href="/record/2296676?ln=ca" class="langinfo">Català</a> <a href="/record/2296676?ln=de" class="langinfo">Deutsch</a> <a href="/record/2296676?ln=el" class="langinfo">Ελληνικά</a> <a href="/record/2296676?ln=en" class="langinfo">English</a> <a href="/record/2296676?ln=es" class="langinfo">Español</a> <a href="/record/2296676?ln=fr" class="langinfo">Français</a> <a href="/record/2296676?ln=hr" class="langinfo">Hrvatski</a> <a href="/record/2296676?ln=it" class="langinfo">Italiano</a> <a href="/record/2296676?ln=ja" class="langinfo">日本語</a> <span class="langinfo">ქართული</span> <a href="/record/2296676?ln=no" class="langinfo">Norsk/Bokmål</a> <a href="/record/2296676?ln=pl" class="langinfo">Polski</a> <a href="/record/2296676?ln=pt" class="langinfo">Português</a> <a href="/record/2296676?ln=ru" class="langinfo">Русский</a> <a href="/record/2296676?ln=sk" class="langinfo">Slovensky</a> <a href="/record/2296676?ln=sv" class="langinfo">Svenska</a> <a href="/record/2296676?ln=zh_CN" class="langinfo">中文(简)</a> <a href="/record/2296676?ln=zh_TW" class="langinfo">中文(繁)</a> </div> </div> <!-- replaced page footer --> </footer> <script type="text/javascript"> var SyndeticsBookCovers = (function() { var SMALL_SIZE = "sc.gif", MEDIUM_SIZE = "mc.gif", RAW_URL = "https://secure.syndetics.com/index.aspx?isbn=THEISBN/THESIZE&client=cernlibrary"; replaceCover = function(imgElement, isbns, hdFormat) { var img = new Image(), size = hdFormat ? MEDIUM_SIZE : SMALL_SIZE; var _isbns = isbns.sort(function(a, b) { // sort from shortest to longest ISBN (more modern) return a.length > b.length ? 1 : -1; }); function next() { var isbn = _isbns.pop(); if (isbn) { var url = RAW_URL.replace("THEISBN", isbn).replace("THESIZE", size); img.src = url; } } function done() { imgElement.src = img.src; } img.onload = function() { if (this.width > 1) { done(); } else { next(); } }; next(); }; return { replaceCover: replaceCover }; })(); $(document).ready(function() { // get book covers $("img.book-cover").each(function() { var $this = $(this), strIsbns = $this.data("isbns") || "", isbnsArray = String(strIsbns).split(","), hdFormat = $this.hasClass("hd"); SyndeticsBookCovers.replaceCover(this, isbnsArray, hdFormat); }); // WebNews tooltips $.ajax({ url: "/news/tooltips", success: function(data) { create_tooltips(data); }, dataType: "json", cache: false }); }); </script> <!-- Feedback script --> <script src="//cds.cern.ch/js/feedback.js"></script> <!-- Feedback script --> <!-- Matomo --> <script> var _paq = window._paq = window._paq || []; /* tracker methods like "setCustomDimension" should be called before "trackPageView" */ _paq.push(['trackPageView']); _paq.push(['enableLinkTracking']); (function() { var u="https://webanalytics.web.cern.ch/"; _paq.push(['setTrackerUrl', u+'matomo.php']); _paq.push(['setSiteId', '756']); var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0]; g.async=true; g.src=u+'matomo.js'; s.parentNode.insertBefore(g,s); })(); </script> <!-- End Matomo Code --> </body> </html>