{"id":31456,"date":"2025-10-21T15:45:54","date_gmt":"2025-10-21T15:45:54","guid":{"rendered":"https:\/\/blog.lacnic.net\/?p=31456"},"modified":"2025-10-21T17:32:56","modified_gmt":"2025-10-21T17:32:56","slug":"telemetry-security-ipv6","status":"publish","type":"post","link":"https:\/\/blog.lacnic.net\/en\/telemetry-security-ipv6\/","title":{"rendered":"Telemetry Applied to Security Automation in IPv6 Networks"},"content":{"rendered":"\n

By Ernesto S\u00e1nchez<\/a> and<\/strong> Henri Alves de Godoy<\/a><\/strong><\/p>\n\n\n\n

Introduction<\/h2>\n\n\n\n

During the LACNIC 44 meeting held in El Salvador<\/strong>, we presented the study titled \u201cTelemetry Applied to Security Automation in IPv6 Networks<\/em>,\u201d the result of a collaboration between Universidad Cat\u00f3lica de Salta (Argentina)<\/strong> and Universidade Estadual de Campinas (UNICAMP, Brasil)<\/strong>.<\/p>\n\n\n\n

The study provided practical evidence of how the use of modern telemetry protocols<\/strong> and programmable interfaces<\/strong> can transform the way we operate and protect IPv6 networks, combining visibility, automation, and security<\/strong>. As the number of devices, IoT sensors, and data flows have increased, network visibility and control have become essential.<\/p>\n\n\n\n

For many years, network administrators relied on traditional technologies such as SNMP<\/strong> and CLI<\/strong>, which we became accustomed to using. However, these methods lack scalability<\/strong>, depend on unstructured<\/strong> formats, and offer limited real-time visibility<\/strong>, making it difficult to react quickly to security incidents or operational failures.<\/p>\n\n\n\n

To address these limitations, the study introduced the concept of Network Telemetry<\/strong>, a new paradigm that replaces reactive data collection with a proactive and continuous<\/strong> model, integrating automation, security, and operational intelligence.<\/p>\n\n\n\n

From Classic Monitoring to Smart Telemetry<\/h2>\n\n\n\n

Traditionally, network administrators used a polling model<\/strong>, periodically querying each device, usually via SNMP, to collect status information. This process not only generates operational overhead but also provides a fragmented and delayed view of network status.<\/p>\n\n\n\n

\n