Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 21 Jan 2007 02:07:41 +0900 (JST)
From:      Hiroki Sato <hrs@FreeBSD.org>
To:        bmah@FreeBSD.org
Cc:        freebsd-net@FreeBSD.org, freebsd-stable@FreeBSD.org, jhay@FreeBSD.org
Subject:   Re: IPv6 over gif(4) broken in 6.2-RELEASE?
Message-ID:  <20070121.020741.59649277.hrs@allbsd.org>
In-Reply-To: <20070120162936.GA18104@tomcat.kitchenlab.org>
References:  <20070120162936.GA18104@tomcat.kitchenlab.org>

next in thread | previous in thread | raw e-mail | index | archive | help
----Security_Multipart(Sun_Jan_21_02_07_41_2007_727)--
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

"Bruce A. Mah" <bmah@freebsd.org> wrote
  in <20070120162936.GA18104@tomcat.kitchenlab.org>:

bm> I'm observing a problem with IPv6 over gif(4) tunnels on 6.2-RELEASE
bm> and recent 6-STABLE, namely that I can't seem to be able to pass
bm> traffic over them.
bm>
bm> Essentially, when I configure a gif interface like this:
bm>
bm> # ifconfig gif0 inet6 aaaa:bbbb:cccc:dddd::1 aaaa:bbbb:cccc:dddd::2 prefixlen 128
bm>
bm> the interface should add a host route to aaaa:bbbb:cccc:dddd::2
bm> through gif0.  This is necessary to be able to pass traffic over the
bm> tunnel, particularly since the source and destination addresses of the
bm> link don't need to have any relationship to each other.
bm>
bm> However, this route doesn't get installed on recent 6-STABLE.
bm> Therefore there is no way to get an IPv6 packet to the other end of
bm> the tunnel because there's no route for the destination.  The most
bm> obvious symptom is that I try to ping the other tunnel endpoint and
bm> get:
bm>
bm> ping6: UDP connect: No route to host
bm>
bm> I know this worked on RELENG_6 as of June 2006; my home firewall has
bm> been running this code for months without a hitch.  It doesn't work in
bm> 6.2-RC2 or 6.2-RELEASE (fresh CD installs on i386, GENERIC kernels),
bm> or this week's RELENG_6 (nanobsd on i386).
bm>
bm> I somewhat suspect revs. 1.48.2.15 and 1.48.2.14 to
bm> src/sys/netinet/nd6.c.  If I locally revert these two changes (see
bm> diff below), IPv6 over gif(4) works again.
bm>
bm> There's another workaround for people stuck in this situation and who
bm> aren't in a position to try this diff.  That is to manually install
bm> the host route like this:
bm>
bm> # route add -host -inet6 aaaa:bbbb:cccc:dddd::2 -interface gif0 -nostatic -llinfo
bm>
bm> Comments?

 I remember Dimitry Andric reported the same problem on -stable on 30
 Dec, and after he reverted rev.1.48.2.16 it worked fine again.  Do
 you have the symptom even on 6.2-RELEASE?  Since RELENG_6_2_0_RELEASE
 did not have the change, I thought there was no problem.

 I will try to reproduce it on my box anyway...

--
| Hiroki SATO

----Security_Multipart(Sun_Jan_21_02_07_41_2007_727)--
Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (FreeBSD)

iD8DBQBFskxdTyzT2CeTzy0RAn2QAJ45Sd5OYGBETxENyUXj/Ax2blKshwCghGtA
lDubmL3WryAv3NBDxUNoxnI=
=i5Ij
-----END PGP SIGNATURE-----

----Security_Multipart(Sun_Jan_21_02_07_41_2007_727)----



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070121.020741.59649277.hrs>