From owner-freebsd-net@FreeBSD.ORG Tue Jan 28 22:50:53 2014 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 83090DEE; Tue, 28 Jan 2014 22:50:53 +0000 (UTC) Received: from mail-vb0-x236.google.com (mail-vb0-x236.google.com [IPv6:2607:f8b0:400c:c02::236]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 2B8691221; Tue, 28 Jan 2014 22:50:53 +0000 (UTC) Received: by mail-vb0-f54.google.com with SMTP id w20so678395vbb.13 for ; Tue, 28 Jan 2014 14:50:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=iaaxAPvs6SStV4r2phgDCLVn8FFTUUwXEItzFgHSAtU=; b=Ty10IHEY0dqgribTVJ3Q+mkRm1InnNWA19etliL868IhwrD8yUXqlJFUdDxBtn5Cyr nC+g1sgFeaCTkfSF2sEn798nQCvg2iN3rfmqcRPBwkV6ayqfNGbQ/d6bfUON3LvTiyXP X5M8HqLxw2wphlch3A/Nen+TBWkVi87K4SZa5qK0t+IGkbHKh0aAKerH/0/slvFKNF9+ TyhUOxCOt00gSIqKqLbqLQnVBTI5wAFe9VsLLYmDZTKSWrDerSL0GGGS1veKvIFDNpJ2 d5AZnfgDw/o12xmvIE3BkQV//r2bXKJYYCDViQ4BzMyirJnQlZn8w5/YReQm288tpfra UEJQ== MIME-Version: 1.0 X-Received: by 10.221.26.10 with SMTP id rk10mr3315716vcb.0.1390949452156; Tue, 28 Jan 2014 14:50:52 -0800 (PST) Sender: ndenev@gmail.com Received: by 10.220.78.84 with HTTP; Tue, 28 Jan 2014 14:50:52 -0800 (PST) In-Reply-To: References: <1390909590119-5880672.post@n5.nabble.com> <52E7A9D8.30604@freebsd.org> Date: Tue, 28 Jan 2014 22:50:52 +0000 X-Google-Sender-Auth: w6PDynSsQKBZiQIQzs1fKBQzj8o Message-ID: Subject: Re: Jails on fib problem From: Nikolay Denev To: zaphod@berentweb.com Content-Type: text/plain; charset=ISO-8859-1 Cc: "freebsd-net@freebsd.org" X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2014 22:50:53 -0000 On Tue, Jan 28, 2014 at 5:17 PM, Beeblebrox wrote: >> what's a fib device? Do you mean each jail has a different default fib? >> you are not using vimage jails? > > Hi Julian. > * No vimage > * All jails use the same fib. /etc/rc.conf: > cloned_interfaces="lo2" > ifconfig_lo2="inet 127.0.1.1/28" > static_routes="jail default" > route_jail="default 127.0.1.1 -fib 1" > route_default="default 192.168.1.1" > >> so they all have the same address?? can you even do that? or you mean that >> they all have the same default route? > I mean same default route, jail IP's start from 127.0.1.2/32 and go to > 127.0.1.6/32 > jail.conf assigns fib with "exec.fib = 1;" > jails on the 127.0.1.1/28 subnet range should be able to route traffic > through the 127.0.0.1 gateway regardless of the fact that the jails > themselves reside on a /32 subnet. However, it's not working smoothly > >> fibs don't have devices. > Yes, I know - a misnomer. > > setfib 1 netstat -rn > Destination Gateway Flags Netif Expire > default 127.0.1.1 UGS lo2 > 127.0.0.1 link#3 UH lo0 > 127.0.1.1 link#4 UH lo2 > 127.0.1.2 link#4 UH lo2 > 127.0.1.3 link#4 UH lo2 > 127.0.1.4 link#4 UH lo2 > 192.168.1.0/24 link#1 U re0 (Ext_If) > 192.168.2.0/26 link#2 U re1 (Lan_If) > > To complicate things further, I also have a vboxnet0 for VBox guests. > 127.0.1.2 is a dns jail for example. The Internal LAN clients, > vboxnet0 guests and lo0 need to resolve names from that jail. > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" You can't use 127/8 addresses and expect them to be routed/forwarded. See rfc1122. --Nikolay