From owner-freebsd-net@freebsd.org Sun Mar 5 02:14:50 2017 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A25D6CF71CE for ; Sun, 5 Mar 2017 02:14:50 +0000 (UTC) (envelope-from freebsd@dukhovni.org) Received: from mournblade.imrryr.org (mournblade.imrryr.org [108.5.242.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 6923E14DA for ; Sun, 5 Mar 2017 02:14:49 +0000 (UTC) (envelope-from freebsd@dukhovni.org) Received: from [192.168.0.7] (cpe-67-241-70-168.twcny.res.rr.com [67.241.70.168]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mournblade.imrryr.org (Postfix) with ESMTPSA id BCCBC7A32D8 for ; Sun, 5 Mar 2017 02:05:36 +0000 (UTC) (envelope-from freebsd@dukhovni.org) From: Viktor Dukhovni Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Reply-To: freebsd-net@freebsd.org Mime-Version: 1.0 (Mac OS X Mail 10.2 \(3259\)) Subject: The 6to4 stf0 interface flapping in/out of tentative in FreeBSD 11.0-RELEASE-p8... Message-Id: Date: Sat, 4 Mar 2017 21:05:34 -0500 To: freebsd-net@freebsd.org X-Mailer: Apple Mail (2.3259) X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Mar 2017 02:14:50 -0000 In trying to set up a 6to4 node under 11.0-RELEASE-p8, and the stf0 interface is constantly flipping in and out of "tentative" state, at seemingly 1 second intervals. Is that to be expected? Am I missing some non-obvious configuration setting? $ ifconfig stf0; echo; for i in $(seq 10); do ifconfig stf0 | grep = inet; sleep 1; done stf0: flags=3D1 metric 0 mtu 1280 inet6 2002:6c15:5974:1::1 prefixlen 16 nd6 options=3D101 groups: stf inet6 2002:6c15:5974:1::1 prefixlen 16 tentative inet6 2002:6c15:5974:1::1 prefixlen 16 inet6 2002:6c15:5974:1::1 prefixlen 16 tentative inet6 2002:6c15:5974:1::1 prefixlen 16 inet6 2002:6c15:5974:1::1 prefixlen 16 tentative inet6 2002:6c15:5974:1::1 prefixlen 16 inet6 2002:6c15:5974:1::1 prefixlen 16 tentative inet6 2002:6c15:5974:1::1 prefixlen 16 inet6 2002:6c15:5974:1::1 prefixlen 16 tentative inet6 2002:6c15:5974:1::1 prefixlen 16 My configuration is (slightly trimmed): $ ifconfig igb0 igb0: flags=3D8843 metric 0 = mtu 1500 = options=3D6403bb inet 108.21.89.116 netmask 0xffffff00 broadcast 108.21.89.255=20 inet6 2002:6c15:5974::1 prefixlen 64=20 nd6 options=3D21 status: active $ netstat -6rn ... default 2002:c058:6301:: UGS = stf0 2002::/16 link#4 U = stf0 2002:6c15:5974::/64 link#1 U = igb0 2002:6c15:5974::1 link#1 UHS = lo0 2002:6c15:5974:1::1 link#4 UHS = lo0 In /etc/rc.conf I have: stf_interface_ipv4addr=3D"108.21.89.116" stf_interface_ipv6_slaid=3D1 ifconfig_igb0_ipv6=3D"inet6 2002:6c15:5974::1 prefixlen 64" ipv6_gateway_enable=3D"YES" ipv6_defaultrouter=3D"2002:c058:6301::" ipv6_network_interfaces=3D"igb0" rtadvd_enable=3D"YES" rtadvd_interfaces=3D"igb0" Other than a slightly higher than desired packet loss rate (perhaps to = be expected with 6to4 tunnels), this does not seem to impact connectivity: $ ping6 -c 20 -n mx01.domeneshop.no PING6(56=3D40+8+8 bytes) 2002:6c15:5974:1::1 --> 2a01:5b40:0:2201::1 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D0 hlim=3D55 time=3D105.615 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D1 hlim=3D55 time=3D104.798 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D2 hlim=3D55 time=3D105.384 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D3 hlim=3D55 time=3D104.726 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D4 hlim=3D55 time=3D105.361 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D5 hlim=3D55 time=3D104.387 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D6 hlim=3D55 time=3D104.730 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D7 hlim=3D55 time=3D104.712 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D8 hlim=3D55 time=3D104.951 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D9 hlim=3D55 time=3D104.697 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D10 hlim=3D55 time=3D104.718 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D11 hlim=3D55 time=3D104.511 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D12 hlim=3D55 time=3D105.174 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D13 hlim=3D55 time=3D104.760 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D14 hlim=3D55 time=3D105.056 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D15 hlim=3D55 time=3D104.860 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D16 hlim=3D55 time=3D104.716 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D17 hlim=3D55 time=3D104.669 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D18 hlim=3D55 time=3D105.137 = ms 16 bytes from 2a01:5b40:0:2201::1, icmp_seq=3D19 hlim=3D55 time=3D105.043 = ms I mostly the 100% sucsess also with www.google.com, but now and then a few pings are lost: $ ping6 www.google.com PING6(56=3D40+8+8 bytes) 2002:6c15:5974::1 --> 2607:f8b0:400d:c00::6a 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D0 hlim=3D57 time=3D16.488= ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D1 hlim=3D57 time=3D16.332= ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D2 hlim=3D57 time=3D16.621= ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D3 hlim=3D57 time=3D16.645= ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D4 hlim=3D57 time=3D17.336= ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D5 hlim=3D57 time=3D15.978= ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D6 hlim=3D57 time=3D17.073= ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D7 hlim=3D57 time=3D52.323= ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D8 hlim=3D57 time=3D35.891= ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D9 hlim=3D57 time=3D38.653= ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D10 hlim=3D57 = time=3D45.235 ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D11 hlim=3D57 = time=3D25.149 ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D12 hlim=3D57 = time=3D16.357 ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D14 hlim=3D57 = time=3D16.719 ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D16 hlim=3D57 = time=3D17.122 ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D17 hlim=3D57 = time=3D16.963 ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D18 hlim=3D57 = time=3D16.130 ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D19 hlim=3D57 = time=3D23.763 ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D20 hlim=3D57 = time=3D16.295 ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D21 hlim=3D57 = time=3D18.302 ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D22 hlim=3D57 = time=3D16.994 ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D23 hlim=3D57 = time=3D18.312 ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D24 hlim=3D57 = time=3D16.419 ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D25 hlim=3D57 = time=3D17.241 ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D26 hlim=3D57 = time=3D17.931 ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D27 hlim=3D57 = time=3D17.478 ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D28 hlim=3D57 = time=3D17.514 ms 16 bytes from 2607:f8b0:400d:c00::6a, icmp_seq=3D29 hlim=3D57 = time=3D17.684 ms --- www.google.com ping6 statistics --- 31 packets transmitted, 28 packets received, 9.7% packet loss Possibly relevant sysctl output: $ sysctl -a | grep ip6 net.inet6.ip6.forwarding: 1 net.inet6.ip6.redirect: 1 net.inet6.ip6.hlim: 64 net.inet6.ip6.maxfragpackets: 1017650 net.inet6.ip6.accept_rtadv: 0 net.inet6.ip6.log_interval: 5 net.inet6.ip6.hdrnestlimit: 15 net.inet6.ip6.dad_count: 1 net.inet6.ip6.auto_flowlabel: 1 net.inet6.ip6.defmcasthlim: 1 net.inet6.ip6.gifhlim: 30 net.inet6.ip6.kame_version: FreeBSD net.inet6.ip6.use_deprecated: 1 net.inet6.ip6.rr_prune: 5 net.inet6.ip6.v6only: 1 net.inet6.ip6.use_tempaddr: 0 net.inet6.ip6.temppltime: 86400 net.inet6.ip6.tempvltime: 604800 net.inet6.ip6.auto_linklocal: 1 net.inet6.ip6.prefer_tempaddr: 0 net.inet6.ip6.use_defaultzone: 0 net.inet6.ip6.maxfrags: 1017650 net.inet6.ip6.mcast_pmtu: 0 net.inet6.ip6.no_radr: 0 net.inet6.ip6.norbit_raif: 0 net.inet6.ip6.rfc6204w3: 0 net.inet6.ip6.deembed_scopeid: 1 net.inet6.ip6.dad_enhanced: 0 net.inet6.ip6.mcast.loop: 1 net.inet6.ip6.mcast.maxsocksrc: 128 net.inet6.ip6.mcast.maxgrpsrc: 512 security.jail.param.ip6.saddrsel: 0 security.jail.param.ip6.: 0 --=20 Viktor.