/27 the new /24

Sun Oct 4 15:53:40 UTC 2015

Randy,

Your claim is a red herring. IPSec has nothing to do with IPv6 deployment. Deployment doesn't require global IPSec, which need only reside in endpoint nodes. It's not needed at all in the routjg and distribution infrastructure, which is where deployment happens

The vast majority of IPv6 nodes -- which is where the IPSec requirement exists -- have IPSec built in: Linux, Mac OSX, and Windows. Devices that sometimes act as nodes, such as firewalls terminating IPSec tunnels, also obviously need IPSec. Devices that are simply IPv6 pass-through, such as consumer-grade routers, don't.

Users can buy whatever level of functionality they need at the edges. If you don't need IPSec tunnel support in your firewall, you can buy one without it. Deployment cares nothing about IPSec.

 -mel beckman

On Oct 4, 2015, at 8:05 AM, Randy Bush <randy at psg.com<mailto:randy at psg.com>> wrote:

If it doesn't support IPSec, it's not really IPv6.

by that criterion, ipv6 deployment is effectively zero