Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 26 Jul 2012 16:51:50 -0400
From:      Mike Andrews <mandrews@bit0.com>
To:        freebsd-stable@freebsd.org
Subject:   Re: Regression with jails/IPv6/pf
Message-ID:  <5011ADE6.7010602@bit0.com>
In-Reply-To: <5011902C.1070600@infracaninophile.co.uk>
References:  <5011902C.1070600@infracaninophile.co.uk>

next in thread | previous in thread | raw e-mail | index | archive | help
On 7/26/2012 2:45 PM, Matthew Seaman wrote:
> So, I tried to do a routine update to the latest stable/9 yesterday
> (r238771), and I found that access to the jail on my server had stopped
> working.  Everything else seemed to be fine, and reverting to the
> previous system (r237456 from 2012-06-22 (Boot Environments FTW)) bought
> it all back to life.
>
> After spending most of today bisecting versions and compiling kernels,
> I found:
>
>      r238177 worked absolutely fine
>
>      r238236 accessing the jail worked, but everything was slow, as if
>              DNS queries were timing out.
>
>      r238246 lots of network timeouts everywhere: accessing the jail
>              failed, but then so did accessing the main host.  So much
>              so that svn couldn't update properly.
>
>      r238256 worked fine for accessing the main host, but failed when
>              trying to access the jail.
>
> Looks like this seems to have been introduced in a batch of commits
> MFC'd by bz@ (CC'd) around then.
>
> Now, this jail is set up in an unusual way, which is why I guess I'm the
> first person to be affected.  For starters, it only has IPv6
> connectivity, and secondly, because I'm running some daemons there I
> don't want listening on an external network socket, it's bound to the
> loopback and I use firewall redirection to send traffic to it.

Sounds like what I hit and filed kern/170070 on -- basically a host not 
being able to talk to itself on IPv6, except on the ::1 address.

Workaround: ifconfig lo0 -txcsum6 -rxcsum6

or in /etc/rc.conf:

ifconfig_lo0="inet 127.0.0.1/8 -txcsum6 -rxcsum6"




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5011ADE6.7010602>