In-Depth Discussion on IPv4 & IPv6

As IPv4 addresses are running out, several calls for action have been made for organizations to adopt the newer version of the Internet Protocol, IPv6, which will gradually replace the IPv4 protocol. We discussed the difference between IPv4 & IPv6 in a previous article. Today, we take an in-depth look at IPv4 and IPv6.

Will IPv4 be turned off?

Perhaps never. The aim of IPv6 deployment is to ensure network growth and continued interconnectivity when IPv4 address space is exhausted and difficult to access. Moreover, as the global Internet continues to grow, it is possible that a growing number of Internet sites will only be accessible via IPv6. Besides, to prevent conflicts, networks and devices should be completely IPv6-enabled to take advantage of IPv6-only sites, but IPv4 can coexist with IPv6-only sites before companies decide that it is no longer necessary or cost-effective to maintain them. In practice, it may never be cost-effective or practical to update certain legacy systems, but translation mechanisms, such as NAT64 and 464XLAT, are available to support them as long as they are needed and in use. Some fear that services will be switched off as IPv4 addresses run out. They will not: both IPv4 and IPv6 will run in parallel until there is no longer any need to do so.

Which is more secure?

Arguments about IPv4 vs IPv6 security also concentrate on various aspects of network deployment. It has been claimed that IPv6 supports enhanced protection since IP Security (IPsec) was initially designed for IPv6 and its implementation was supposed to be a mandatory part of the protocol. However, IPsec can also be used with IPv4 and is now simply recommended for use with IPv6 because it was deemed impractical to require complete IPsec implementations for all types of devices that could use IPv6. The advantages of using IPsec are comparable for both IPv4 and IPv6.

Conversely, the expanded address space provided by IPv6 effectively removes the need to use NAT devices that are prevalent in many IPv4 networks and implicitly implement the filtering policy of only allowing outgoing communications. As a result, IPv6 was supposed to increase host exposure. However, host exposure can be minimized by using network firewalls, e.g., at the same point in the network topology where a NAT system is used in the IPv4 network.

Some of the IPv6 security problems reported were linked to vulnerabilities in individual products rather than the IPv6 protocol. IPv4 is commonly used and individual IPv4 products have gone through a recurring period of finding and repairing security vulnerabilities and other bugs. Many IPv6 products are newer, have fewer users and so have not benefited from similar experience. As with every Internet product, security vulnerabilities in IPv6 products need to be found and fixed.

IPv6 is being adapted to the operating standards developed over several years for IPv4 networks, which will intensify as more network operators deploy IPv6 and continue to share knowledge on experience and best practices through established operator groups, the IETF and other forums.

Maintaining network security is a daunting undertaking both for IPv4 and IPv6. Neither protocol offers a straightforward solution to the complexities of network security, and network operators should familiarize themselves with IPv6 security practices and remain up to date with innovations as they implement and operate IPv6.

Challenges of IPv4 & IPv6

Deploying IPv6 still takes time, because the transition to IPv6 gave network operators, businesses and vendors no clear short-term benefit, needed investment, and meant handling a new protocol while few IPv6 services were available. In addition, the implementation of Network Address Translation (NAT) and Classless Inter-Domain Routing (CIDR) significantly stretched the IPv4 address space to accommodate many more devices without the need to update or replace them.

In the meantime, the IPv4 address space is nearly exhausted, and it is no longer possible to acquire more IPv4 addresses quickly and cheaply. This makes IP leasing an ideal option for the market. LARUS is offering one-of-a-kind IPv4 leasing solutions to companies of all sizes. With over a thousand solutions made, we guarantee a 48-hour speedy delivery process. Discuss your IPv4 address needs with our team and plan your next network expansion.

(Content Source: Internet Society)