Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 Oct 2011 04:29:31 +0900 (JST)
From:      Hiroki Sato <hrs@FreeBSD.org>
To:        thomas@gibfest.dk
Cc:        freebsd-current@FreeBSD.org
Subject:   Re: 9.0-beta3 preferring ipv4 over ipv6 with ipv6_activate_all_interfaces="YES"
Message-ID:  <20111017.042931.2183544415814290707.hrs@allbsd.org>
In-Reply-To: <4E9AA874.5070403@gibfest.dk>
References:  <20111014.170911.2032702506326503484.hrs@allbsd.org> <4E97F236.8040203@gibfest.dk> <4E9AA874.5070403@gibfest.dk>

next in thread | previous in thread | raw e-mail | index | archive | help
----Security_Multipart(Mon_Oct_17_04_29_31_2011_969)--
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Thomas Steen Rasmussen <thomas@gibfest.dk> wrote
  in <4E9AA874.5070403@gibfest.dk>:

th> On 14.10.2011 10:26, Thomas Steen Rasmussen wrote:
th> > On 14-10-2011 10:09, Hiroki Sato wrote:
th> >>  Thanks.  There is no problem with the source address selection.
th>
th> I don't understand this comment. I would say that I do
th> have problems with the source address selection -
th> otherwise it would be preferring ipv6, right ?

 I mean the address selection is working properly.  Your problem is
 because the default ipv6_prefer policy prefers IPv4 addresses when
 the source IPv6 addr is in 2002::/16, the destination IPv6 address is
 not in the same prefix, and IPv4 addresses can be used for the both.
 It is not a bug of the selection mechanism.

 The ipv6_prefer policy is defined in RFC 3484 2.1 and this policy
 chooses a src IPv6 addr in 2002::/16 only if the dest addr is also in
 the same prefix.  You can remove the special rule for 2002::/16 by
 putting the following lines as /etc/ip6addrctl.conf and reboot the
 system:

 ::1/128          50      0
 ::/0             40      1
 #2002::/16       30      2
 ::/96            20      3
 ::ffff:0:0/96    10      4

 By installing the above, IPv6 address will be preferred even if it is
 in 2002::/16.

 I am still not sure why there is a difference between 8.X and 9.X on
 your box because the code is almost the same.  I guess no policy was
 installed when you used an 8-stable system.

-- Hiroki

----Security_Multipart(Mon_Oct_17_04_29_31_2011_969)--
Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (FreeBSD)

iEYEABECAAYFAk6bMJwACgkQTyzT2CeTzy1/RQCdGaRkMbsKQqbyxZqWFTDkca+z
JOAAn2wmMVFcUnJDjZG17p6Bw22Q21UQ
=U/De
-----END PGP SIGNATURE-----

----Security_Multipart(Mon_Oct_17_04_29_31_2011_969)----



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20111017.042931.2183544415814290707.hrs>