Choose timezone
Your profile timezone:
Powered by Indico
v3.3.3-pre
HEPiX IPv6 working group meeting - Vidyo - Thursday 14 April 2016
Present: Alastair Dewhurst, Thomas Finnern, Kashif Hafeez, Bruno Hoeft, David Kelsey, Fernando López Muñoz, Edoardo Martelli, Francesco Prelz, Frederic Schaer, Andrea Sciaba, Dan Traynor, Ulf Tigerstedt.
Apologies: Raja Nandakumar, Kars Ohrenberg.
Introduction
The agenda was agreed.
Minutes of 25 February 2016 meeting
No corrections. Accepted.
Review of actions and ongoing issues
1. AlastairD. Work on IPv6-only document together with other experiment reps.
Ongoing. Still awaiting input from other experiments and on ETF. Aiming for the F2F meeting. It was noted that it would be useful to have the source of the document on Github.
2. AlastairD. Work on testing IPv6-only WN.
Not exactly sure what aspects needed to be tested. It was noted that dual-stack pilot factories can submit via IPv6.
3. DaveK. Distribute draft IPv6 security guidance for more feedback.
Not done yet. We need a small team working on this. For CHEP abstract submission the following names were suggested - FrancescoP, BrunoH and Romain Wartel. Drop the action.
4. BrunoH. Update LHCONE IPv6 wiki.
Done. Close action.
5. UlfT. Take on maintenance of checking IGTF CA CRL status re IPv6.
Done. Ulf explained that this has now been running for several weeks - it runs at 08:00 on Wednesdays. 3 CAs have DNS AAAA records but are not reachable. 38 CA are working well (re IPv6 CRL), 3 are unreliable and 58 are IPv4 only. While doing this Ulf has noticed several really old CRL servers (WIndows 2008R2, Fedora 4, Centos 4, Centos 5). Or are the server strings not telling the truth? Some CA set the cache-control info correctly, some no not. The CERN CA OSCP broke earlier this week. It was moved without an update of the firewall. Many CA use Cloudfare - IPv4 only. What is the expected time when TCS/DigiCert will support IPv6?
6. RajaN, CostinG, AndreaS. Work with Alastair on his document.
Ongoing.
7. EdoardoM. check how best to set the IPv6-ready flag for VMs.
Ongoing.
8. EdoardoM. check/decide what can be published re IPv4 exhaustion at CERN.
Done. The slides were added to the Jan 2016 F2F agenda page.
Roundtable updates
1. ATLAS. AlastairD reports that he has tested a dual-stack test copy of GOCDB at RAL. This is a read-only instance updated weekly as a snapshot of the production GOCDB. The firewall for this will soon be opened up to the outside. Alastair will check with the other VOs.
2. PIC. FernandoLM reports that their production dCache has moved to dual-stack (ATLAS and CMS). Several other services have also moved. Still missing LHCb pools. FrancescoP comments that this would explain the jump in number of dual-stack services in WLCG BDII from 3 to 4.5% at end of March. Fernando reports a lot of CMS transfers have taken place over IPv6 on LHCONE (1.6 Gbps). Also lots of transfers over IPv6 to the UK.
3. Frederic Schaer (France) reports that CEA has changed its policy for IPv6. It used to be controlled by white lists but is now much more open. He reports that they have noticed much lower bandwidth via IPv6 (just 2-300 Mbps) and asks for reasons for this. The most likely answer is old hardware or software not being able to support IPv6 routing in hardware. Need to update to latest releases.
4. INFN. FrancescoP reports that he will soon give a talk to INFN. He is encouraging the Italian CA to support IPv6. Sometimes he sees SPAM over IPv6.
Other issues
The abstract to CHEP2016 was discussed. Agreed that we need to stress the aim to "complete" the transition to IPv6 and that we should stress the positive sides via case studies of sites that are working with dual-stack. Ulf can contribute plots from his logs.
Ongoing Actions
1. AlastairD. Work on IPv6-only document together with other experiment reps.
2. AlastairD. Work on testing IPv6-only WN.
3. EdoardoM. check how best to set the IPv6-ready flag for VMs.
Dates of future meetings
F2F meeting on 18/19 May 2016 at CERN (lunchtime to lunchtime).
Pre-GDB IPv6 workshop and WLCG GDB meeting at CERN - 7/8 June 2016.
Notes by Dave Kelsey
16 May 2016