Date: Thu, 19 Mar 2020 14:01:07 +0700 From: Victor Sudakov <vas@sibptus.ru> To: Jacques Foucry <jacques+freebsd@foucry.net> Cc: freebsd-questions@freebsd.org, freebsd-net@freebsd.org Subject: Re: IPv6 in jails Message-ID: <20200319070107.GA86122@admin.sibptus.ru> In-Reply-To: <20200319065514.GQ25617@foucry.net> References: <20200318151556.GA64871@admin.sibptus.ru> <20200318164836.GO25617@foucry.net> <20200319022224.GB80800@admin.sibptus.ru> <20200319065514.GQ25617@foucry.net>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
Jacques Foucry wrote:
> > >
> > > >
> > > > Is IPv6 in jails supposed to work? Does not work for me, what am I doing
> > > > wrong?
> > >
> > > Suppose to work, and work for me.
> > > >
> > > > Here is a test jail:
> > > >
> > > > test4 {
> > > > path = /d02/jails/test4 ;
> > > > mount.devfs;
> > > > ip4 = new;
> > > > ip6 = new;
> > > > ip4.addr = 192.168.4.204/24;
> > > > ip6.addr = 2001:470:ecba:3::4/64;
> > > > host.hostname = test4.vas.sibptus.ru ;
> > > > interface = re1 ;
> > > > allow.raw_sockets = true ;
> > > > exec.start = "/bin/sh /etc/rc";
> > > > exec.stop = "/bin/sh /etc/rc.shutdown";
> > > > }
> > >
> > >
> > > Well there is a difference between your config and mine:
> > >
> > > ip6.addr="em0|2a01:4f9:4a:1fd8::16/64";
> > >
> > > In my config there is the interface to use (em0 in my case, re1 should be in
> > > yours)
> >
> > I have a more generic "interface = re1" statement, but replacing it with
> > ip6.addr = "re1|2001:470:ecba:3::4" did not produce any effect on the
> > jailed daemons.
> >
> > Of course the IPv6 address is present on re1 in both cases (my
> > syntax and your syntax). When the jail is stopped, the address goes
> > away.
>
> Did you try to declare the IPv6 as an alias in
> /etc/rc.conf file?
>
> # Jail Mail
> ifconfig_em0_alias4="inet6 2a01:4f9:4a:1fd8::17 prefixlen 64"
No, I'd prefer for these addresses to be handled by the jail
infrastructure. That is, I want an address to appear when the
corresponding jail goes up, and to disapper when the jail is shut down.
>
> Restarting the network stack will make ip persistent and I hope usable by your
> jail.
>
I don't want it persistent. If a jail is shut down but its address
persists, it can have undesirable consequences of it suddenly pointing
at the host system.
--
Victor Sudakov, VAS4-RIPE, VAS47-RIPN
2:5005/49@fidonet http://vas.tomsk.ru/
[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
iQEcBAEBAgAGBQJecxizAAoJEA2k8lmbXsY00xgH+gNZEBMynxv8LI+YTCqkzMbL
2tWPkoQyVrEnwBTKk6M51m0L8V/ZWhwOIGuNclZwpupFVaUZyeqzGm5y/1ib6ok5
dxNnGINsATz/ilule82e6TDzIFY04wDqo6b0ZfTpWiYLH0ixBF8hKWZzELt0eNuc
2WQYsHb8SgG3GJ4ro4jeXhK+rUxZXkn7VHl80BU0zqjdXWZuyM8Co9bKfXv8Dcj7
ah5na3//wS3uJfXs/3jU6qD77LUv2iMjZNi1C3vcxnoEuSvAnoxxwXGa88f9WsxJ
8mepSNdSQJMuXk0apQjs77c0iK7d96UQHfuIRABGPn1UYF1BAVkSW9B2hdyoEWc=
=xZqU
-----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20200319070107.GA86122>