Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 13 Oct 2014 11:42:08 +0200
From:      Harald Schmalzbauer <h.schmalzbauer@omnilan.de>
To:        "Alexander V. Chernikov" <melifaro@FreeBSD.org>
Cc:        "freebsd-net@freebsd.org" <freebsd-net@FreeBSD.org>, Julian Elischer <julian@FreeBSD.org>, FreeBSD <freebsd-stable@FreeBSD.org>
Subject:   Re: Deleting IPv4 iface-routes from extra FIBs
Message-ID:  <543B9E70.9060609@omnilan.de>
In-Reply-To: <543B998D.2020003@FreeBSD.org>
References:  <53569ABA.60007@omnilan.de> <CA%2BP_MZH_iScuJ4S=xiKocnEwTzT1eRJPNpJKbboZDfG3B=TBzA@mail.gmail.com> <535771F3.4070007@freebsd.org> <543B8ED5.6040206@omnilan.de> <543B9075.2000102@FreeBSD.org> <543B9873.3040605@omnilan.de> <543B998D.2020003@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]
 Bezüglich Alexander V. Chernikov's Nachricht vom 13.10.2014 11:21
(localtime):
> On 13.10.2014 13:16, Harald Schmalzbauer wrote:
>>   Bezüglich Alexander V. Chernikov's Nachricht vom 13.10.2014 10:42
>> (localtime):
>>> On 13.10.2014 12:35, Harald Schmalzbauer wrote:
>>>>    Bezüglich Julian Elischer's Nachricht vom 23.04.2014 09:55
>>>> (localtime):
>> ...
>>>>> yes, we made two behaviours.
>>>>> Add interface routes to all active FIBS or only add them to the first
>>>>> fib and let the user populate other fibs as needed.
>>>>> It appears you want the second behaviour, so I suggest you use that
>>>>> option and set up all your routes manually.
>>>> Hello,
>>>>
>>>> last time I had the iface-route problem, I just reverted r248895 (for
>>>> 9.3). There was inconsitent behaviour with v6 iface routes and
>>>> net.add_addr_allfibs=0.
>>>> Now I checked with 10.1 ans it seems net.add_addr_allfibs=0 doesn't
>>>> work
>>>> any more:
>>>> netstat -f inet -nr
>>>> Routing tables
>>>>
>>>> Internet:
>>>> Destination        Gateway            Flags      Netif Expire
>>>> default            172.21.32.1        UGS         egn
>>>> 127.0.0.1          link#2             UH          lo0
>>>> 172.21.32.0/19     link#1             U           egn
>>>> 172.21.35.1        link#1             UHS         lo0
>>>>
>>>> netstat -F 1 -f inet -nr
>>>> Routing tables (fib: 1)
>>>>
>>>> Internet:
>>>> Destination        Gateway            Flags      Netif Expire
>>>> 127.0.0.1          link#2             UH          lo0
>>>> 172.21.32.0/19     link#1             U           egn
>>>>
>>>> 'sysctl net.add_addr_allfibs'
>>>> net.add_addr_allfibs: 0
>>> Are you sure net.add_addr_allfibs was applied before interface address
>>> added?
>> Sorry, I messed it up. Forgot that on my production systems (where I
>> tested), / is read-only with /etc as union-mount.
>> Adding net.add_addr_allfibs=0 to the correct sysctl.conf made the inet
>> routing table stay empty.
>>
>> But unfortunately not the inet6 routing table :-(
>> So I still need to delete iface routes for my jail setups, hence need to
>> revert r248895.
> Hm. If the problem happens with inet6 routes only, why do you need to
> revert r248895 ? 

For consistency. Either I populate own iface-routes for both, inet and
inet6, or I clean both. The latter is what my script has been doing for
some time (I think I wrote it when I tested 9.1-RC), so for me it's much
less effort to make my script working by reverting r248895 instead of
adding another one which cares about inet (v4) only (for the moment).
Probably net.add_addr_allfibs will also influence inet6 routing as well
in the future, then I'll redo my rc.jails_fibprepare.

Thanks,

-Harry



[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (FreeBSD)

iEYEARECAAYFAlQ7nnEACgkQLDqVQ9VXb8h86gCgr59GmiQsbjteXxN5zlvKL6cU
CZsAoKEz0GhkZNIR5a5iqi1Q88+QwFPy
=8eck
-----END PGP SIGNATURE-----

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?543B9E70.9060609>