Date: Mon, 16 Sep 2024 17:55:52 -0400 From: Karl Denninger <karl@denninger.net> To: freebsd-net@freebsd.org Subject: Re: IPv6 neighbor flaps for ISP router are occurring frequently Message-ID: <c26dc20a-c6c9-454c-8763-ae21d8b68b20@denninger.net> In-Reply-To: <83BCC913-3375-4847-B720-5F06D76F6646@distal.com> References: <89F4F5A4-E3D9-4A43-84F6-908E3FA221A6@distal.com> <83BCC913-3375-4847-B720-5F06D76F6646@distal.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------XyY0NCC9xowWg6UuB0301HGd
Content-Type: multipart/mixed; boundary="------------wWt0UUWD1ycbqpmLVj5oSPlj";
protected-headers="v1"
From: Karl Denninger <karl@denninger.net>
To: freebsd-net@freebsd.org
Message-ID: <c26dc20a-c6c9-454c-8763-ae21d8b68b20@denninger.net>
Subject: Re: IPv6 neighbor flaps for ISP router are occurring frequently
References: <89F4F5A4-E3D9-4A43-84F6-908E3FA221A6@distal.com>
<83BCC913-3375-4847-B720-5F06D76F6646@distal.com>
In-Reply-To: <83BCC913-3375-4847-B720-5F06D76F6646@distal.com>
--------------wWt0UUWD1ycbqpmLVj5oSPlj
Content-Type: multipart/alternative;
boundary="------------0K946DG5JcOHYt3pHiUqAe0e"
--------------0K946DG5JcOHYt3pHiUqAe0e
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64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--------------0K946DG5JcOHYt3pHiUqAe0e
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html>
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF=
-8">
</head>
<body>
<p>What is the revision on the kernel (rev and/or build date)?<br>
</p>
<p>I THINK the only difference between you and I that is material is
that I'm running dhcp6c because dhcpcd, at least check, has some
trouble getting an allocation on cold boot (but does if
restarted), on which I've communicated with Roy, and I haven't
seen anything new pop up on the dhcpcd port yet thus haven't tried
it again in the ~4 weeks.</p>
<p>I'm <i>not </i>seeing it here but I might not have <i>all </i>the
patches you're referring to on the gateway.=C2=A0 If I'm not its ea=
sily
enough rolled forward here so I do.</p>
<p>I have a non-routing machine that is very current (rebuilt after
the recent zfs patch set hit) on stable/14 and it is not seeing
that -- but it is not a router, it is an end-node running rtsold
and gets its IPv6 address via SLACC from the router.<br>
</p>
<div class=3D"moz-cite-prefix">On 9/16/2024 17:45, Chris Ross wrote:<=
br>
</div>
<blockquote type=3D"cite"
cite=3D"mid:83BCC913-3375-4847-B720-5F06D76F6646@distal.com">
<pre wrap=3D"" class=3D"moz-quote-pre">Apologies for lack of import=
ant context, the below discusses a FreeBSD
14.1 amd64 system.
Thank you.
</pre>
<blockquote type=3D"cite">
<pre wrap=3D"" class=3D"moz-quote-pre">On Sep 16, 2024, at 16:05,=
Chris Ross <a class=3D"moz-txt-link-rfc2396E" href=3D"mailto:cross+freeb=
sd@distal.com"><cross+freebsd@distal.com></a> wrote:
Hello. Following the earlier thread "DHCPv6 IA_PD - how-to=E2=80=9D I ha=
ve been
bringing up a new gateway router for my network. With Roy=E2=80=99s help=
, I
have IPv6 working as expected, but I am seeing something that I suspect
is unusual. Roy doesn=E2=80=99t think it=E2=80=99s specific to dhcpcd, a=
s it is caused
by routing changes that dhcpcd is merely reacting to.
While dhcpcd is running, it repeatedly logs the following to daemon.log:
Sep 16 15:55:53 logrus dhcpcd[50070]: vlan0: fe80::3e8a:b0ff:fe3e:4dce is=
unreachable
Sep 16 15:55:54 logrus dhcpcd[50070]: vlan0: fe80::3e8a:b0ff:fe3e:4dce is=
reachable again
Sep 16 15:55:54 logrus dhcpcd[50070]: vlan0: soliciting an IPv6 router
Sep 16 15:56:25 logrus dhcpcd[50070]: vlan0: fe80::3e8a:b0ff:fe3e:4dce is=
unreachable
Sep 16 15:56:25 logrus dhcpcd[50070]: vlan0: fe80::3e8a:b0ff:fe3e:4dce is=
reachable again
Sep 16 15:56:25 logrus dhcpcd[50070]: vlan0: soliciting an IPv6 router
Sep 16 15:56:57 logrus dhcpcd[50070]: vlan0: fe80::3e8a:b0ff:fe3e:4dce is=
unreachable
Sep 16 15:56:58 logrus dhcpcd[50070]: vlan0: soliciting an IPv6 router
Sep 16 15:56:58 logrus dhcpcd[50070]: vlan0: Router Advertisement from fe=
80::3e8a:b0ff:fe3e:4dce
Sep 16 15:57:32 logrus dhcpcd[50070]: vlan0: fe80::3e8a:b0ff:fe3e:4dce is=
unreachable
Sep 16 15:57:32 logrus dhcpcd[50070]: vlan0: soliciting an IPv6 router
Sep 16 15:57:32 logrus dhcpcd[50070]: vlan0: Router Advertisement from fe=
80::3e8a:b0ff:fe3e:4dce
During this same time frame, =E2=80=9Croute monitor=E2=80=9D shows:
15:55:53.573 PID 0 delete neigh fe80::3e8a:b0ff:fe3e:4dce%vlan0 state =
PROBE lladdr 3c:8a:b0:3e:4d:ce iface vlan0 15:55:54.002 PID 0 add/rep=
l neigh fe80::3e8a:b0ff:fe3e:4dce%vlan0 state REACHABLE lladdr 3c:8a:b0:3=
e:4d:ce iface vlan0 15:56:25.148 PID 0 delete neigh fe80::3e8a:b0ff:f=
e3e:4dce%vlan0 state PROBE lladdr 3c:8a:b0:3e:4d:ce iface vlan0 15:56:25=
=2E212 PID 0 add/repl neigh fe80::3e8a:b0ff:fe3e:4dce%vlan0 state REAC=
HABLE lladdr 3c:8a:b0:3e:4d:ce iface vlan0 15:56:57.406 PID 0 delete =
neigh fe80::3e8a:b0ff:fe3e:4dce%vlan0 state PROBE lladdr 3c:8a:b0:3e:4d:c=
e iface vlan0 15:56:58.967 PID 0 add/repl neigh fe80::3e8a:b0ff:fe3e:=
4dce%vlan0 state REACHABLE lladdr 3c:8a:b0:3e:4d:ce iface vlan0 15:57:32=
=2E325 PID 0 delete neigh fe80::3e8a:b0ff:fe3e:4dce%vlan0 state PROBE =
lladdr 3c:8a:b0:3e:4d:ce iface vlan0 15:57:34.143 PID 0 add/repl neig=
h fe80::3e8a:b0ff:fe3e:4dce%vlan0 state REACHABLE lladdr 3c:8a:b0:3e:4d:c=
e iface vlan0 =20
My concern is that this is sending RS=E2=80=99s to my provider far too of=
ten.
Can anyone advise if this is normal, and assuming not, what might
be wrong?
Trimmed dhcpcd.conf is:
duid
persistent
vendorclassid
option classless_static_routes
option rapid_commit
require dhcp_server_identifier
slaac private
noipv6rs
noipv4
noipv4ll
allowinterfaces vlan0
interface vlan0
ipv6only
ipv6rs
ipv6ra_autoconf
ia_pd 0/::/56 intnet1/42 intnet2/56
Thanks.
- Chris
</pre>
</blockquote>
<pre wrap=3D"" class=3D"moz-quote-pre">
</pre>
</blockquote>
<div class=3D"moz-signature">-- <br>
Karl Denninger<br>
<a href=3D"mailto:karl@denninger.net" class=3D"moz-txt-link-freetex=
t">karl@denninger.net</a><br>
<i>The Market Ticker</i><br>
<font size=3D"-2"><i>[S/MIME encrypted email preferred]</i></font><=
/div>
</body>
</html>
--------------0K946DG5JcOHYt3pHiUqAe0e--
--------------wWt0UUWD1ycbqpmLVj5oSPlj--
--------------XyY0NCC9xowWg6UuB0301HGd
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature.asc"
-----BEGIN PGP SIGNATURE-----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=ffH7
-----END PGP SIGNATURE-----
--------------XyY0NCC9xowWg6UuB0301HGd--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?c26dc20a-c6c9-454c-8763-ae21d8b68b20>