Archive for the ‘Security’ Category

Erion Ltd, the leading IPv6 training and consultancy company, presented a case study on a large scale IPv6 migration at the IPv6 Implementers Conference last week in Mountain View, CA.

Erion’s David Holder described how Erion worked with Malaysia’s domain registrar MYNIC to enable the country code domain name for Malaysia. The presentation “Case Study: IPv6 Enabling Malaysia’s .my Domain”, showed how a carefully planned program of training and consultancy from Erion led to a successful deployment of IPv6 on MYNIC’s DNS servers and infrastructure.

Holder began by reminding delegates of how important name services are to the Internet and to the deployment of IPv6. He showed how problems with name services can reflect badly on IPv6 deployments and that it is therefore essential that great care is taken to ensure that name servers are correctly migrated to IPv6. He covered issues such as the potential for large DNS UDP packets to require the use of EDNS0 and how this has implications for firewalls and intrusion detection systems.

The presentation continued by reviewing the changes necessary in any DNS system in order to support IPv6 and some of the difficults that migration to IPv6 presents to DNS administrators.

A number of presentations during the conference had commented on the importance of adequate IPv6 training during IPv6 deployments. Holder said that in his experience IPv6 training is essential to any IPv6 deployment. He went on to show how Erion put together a tailored IPv6 training program for MYNIC based on Erion’s world-leading and extensive portfolio of IPv6 training courses and modules.

Holder described modifications made to MYNIC’s DNS servers and network in order to support IPv6. He also showed how Erion carried out an IPv6 audit of MYNIC’s network, servers and DNS configuration. Finally he demonstrated the IPv6 enabled .my domain and MYNIC’s IPv6 enabled reseller web-site.

As a result of Erion’s work MYNIC was accredited and certified for IPv6 network connectivity and for IPv6 security by Malaysia’s national IPv6 acreditation body.

Finally, Holder commented on some statistics taken by Erion that show how many companies have IPv6 enabled name servers, web servers and mail servers. The statistics included, MYNIC resellers, Fortune 100 companies and FTSE 100 companies. Holder said that whilst 73% of ccTLDs are IPv6 enabled very few resellers of domain names in their countries are. This does not mean that it is impossible to get IPv6 enabled domain name registered in these countries all it means is that a manual process may be required in order to get IPv6 glue into the ccTLD domain. In the case of Fortune 100 and FTSE 100 companies only 4 in each have IPv6 addresses for their name servers, 2 in each have IPv6 addresses for their web servers and none have IPv6 addresses for their mail servers.

Dr Holder’s talk can be downloaded here.

Erion is a world-leading IPv6 services company that has been providing IPv6 training and IPv6 consultancy for over a decade. Erion has extensive experience in IPv6 on a range of platforms and environments, including Windows, Unix, Linux and Cisco IOS. More information on Erion’s IPv6 training courses can be found at http://www.ipv6training.com and on Erion’s IPv6 consultancy services at http://www.ipv6consultancy.com.


MYNIC (the administrator of Malaysia’s .my domain) switched on IPv6 on their domain name servers for the first time at the weekend. Malaysia now joins the growing number of country codes whose DNS is IPv6 enabled.

MYNIC’s Lai Heng Chong, said “We have successfully migrated two of our DNS servers to IPv6″. Mr Heng Chong went on to say that their DNS changes will be submitted to IANA this week.

Erion provided MYNIC with IPv6 training and consultancy during the migration to IPv6. MYNIC staff attended Erion’s Implementing IPv6 and Securing IPv6 training courses, on-site in Malaysia at MYNIC’s offices in Seri Kembang. Erion also provided on-site IPv6 consultancy on configuring IPv6 and securing MYNIC’s servers and network for IPv6.

Erion’s David Holder said, “Erion is very proud to have been a part of Malaysia’s migration to IPv6. It was a pleasure to work with the MYNIC team on this important project”.

For further information on Erion’s IPv6 services in Malaysia and elsewhere please contact David Holder on david.holder@erion.co.uk or +44(0)131 2026317 or visit Erion’s web-site at www.erion.co.uk.


In February 2008, IPv6 addresses were added for six of the world’s 13 root name servers. Now many country code top level domains (ccTLDs) also have IPv6 addresses.

This is a significant step for the widespread deployment of IPv6. Organisations can now, potentially, use only IPv6 for name resolution.

Erion has provided IPv6 consultancy and training to enable ccTLDs to IPv6 enable their domain name services. We have provided a mixture of advanced IPv6 deployment training, IPv6 security training, IPv6 implementation consultancy and IPv6 security consultancy.

Please contact us for further details.


Erion has just released two IPv6 security training courses.

The first is a short (half day) briefing intended to give technical managers, networking and security staff a overview of IPv6 security threats and solutions.

The second is a three day intense technical course entitled Securing IPv6. This covers everything required to understand how to secure your network in readiness for implementing IPv6.

Details of both courses can be found on our main site and our IPv6 training site.