From owner-freebsd-stable@FreeBSD.ORG Thu Jul 26 20:52:55 2012 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 3614C106566B for ; Thu, 26 Jul 2012 20:52:55 +0000 (UTC) (envelope-from mandrews@bit0.com) Received: from magnum.bit0.com (magnum.bit0.com [IPv6:2604:e700:b0:1::200]) by mx1.freebsd.org (Postfix) with ESMTP id DE76B8FC0A for ; Thu, 26 Jul 2012 20:52:54 +0000 (UTC) Received: from magnum.bit0.com (localhost [127.0.0.1]) by magnum.bit0.com (Postfix) with ESMTP id 1B32D16FBB for ; Thu, 26 Jul 2012 16:52:48 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=bit0.com; h=message-id :date:from:mime-version:to:subject:references:in-reply-to :content-type:content-transfer-encoding; s=boogity; bh=rJ2hH48d+ 3knyYkEY5xV7dNdgu/B6yLrXycZEjo9GGc=; b=kUcCBiBEv5E+yeyzG9bYAY1zH CYF0aogkd/OTyM3lW6M+ps8ucA08OE/pUZ0Ptv70RDhS/fOmuE5UMa8NovmvX3sd /KGUcBXJ0GB7AYMndkDVCgHNHRtnMHqk5w1ZBYuMJbc7MWTRsfH1U3tqMX9XYDcC b0DZ/Yp4zk1hWjI1nU= DomainKey-Signature: a=rsa-sha1; c=nofws; d=bit0.com; h=message-id:date :from:mime-version:to:subject:references:in-reply-to :content-type:content-transfer-encoding; q=dns; s=boogity; b=R7a kSjYhIj9aT/ozxW4ZFG9LzeKjIsYgw9O+Tcq6LanrFJs1BxBISQjzFFvUoNj3Rg0 2mQk7amfV10E5RRIXGibHhWioCAkEMafukEDokB3cLuw3hBnkdOuS6FyvcFtYmLh KPAOOaQNt/191FHTPcsEl6aWaP98+AmIoAj0iWMA= Received: from [IPv6:2001:470:1f11:c3c:230:1bff:febc:8604] (unknown [IPv6:2001:470:1f11:c3c:230:1bff:febc:8604]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by magnum.bit0.com (Postfix) with ESMTPSA id DB08D16FB9 for ; Thu, 26 Jul 2012 16:52:47 -0400 (EDT) Message-ID: <5011ADE6.7010602@bit0.com> Date: Thu, 26 Jul 2012 16:51:50 -0400 From: Mike Andrews User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20120604 Thunderbird/13.0 MIME-Version: 1.0 To: freebsd-stable@freebsd.org References: <5011902C.1070600@infracaninophile.co.uk> In-Reply-To: <5011902C.1070600@infracaninophile.co.uk> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: Regression with jails/IPv6/pf X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Jul 2012 20:52:55 -0000 On 7/26/2012 2:45 PM, Matthew Seaman wrote: > So, I tried to do a routine update to the latest stable/9 yesterday > (r238771), and I found that access to the jail on my server had stopped > working. Everything else seemed to be fine, and reverting to the > previous system (r237456 from 2012-06-22 (Boot Environments FTW)) bought > it all back to life. > > After spending most of today bisecting versions and compiling kernels, > I found: > > r238177 worked absolutely fine > > r238236 accessing the jail worked, but everything was slow, as if > DNS queries were timing out. > > r238246 lots of network timeouts everywhere: accessing the jail > failed, but then so did accessing the main host. So much > so that svn couldn't update properly. > > r238256 worked fine for accessing the main host, but failed when > trying to access the jail. > > Looks like this seems to have been introduced in a batch of commits > MFC'd by bz@ (CC'd) around then. > > Now, this jail is set up in an unusual way, which is why I guess I'm the > first person to be affected. For starters, it only has IPv6 > connectivity, and secondly, because I'm running some daemons there I > don't want listening on an external network socket, it's bound to the > loopback and I use firewall redirection to send traffic to it. Sounds like what I hit and filed kern/170070 on -- basically a host not being able to talk to itself on IPv6, except on the ::1 address. Workaround: ifconfig lo0 -txcsum6 -rxcsum6 or in /etc/rc.conf: ifconfig_lo0="inet 127.0.0.1/8 -txcsum6 -rxcsum6"