From owner-svn-src-head@FreeBSD.ORG Mon Dec 9 21:54:23 2013 Return-Path: Delivered-To: svn-src-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id A8E86865 for ; Mon, 9 Dec 2013 21:54:23 +0000 (UTC) Received: from mail-qc0-x22d.google.com (mail-qc0-x22d.google.com [IPv6:2607:f8b0:400d:c01::22d]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 560411393 for ; Mon, 9 Dec 2013 21:54:23 +0000 (UTC) Received: by mail-qc0-f173.google.com with SMTP id m20so3271873qcx.32 for ; Mon, 09 Dec 2013 13:54:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wemm.org; s=google; h=message-id:date:from:organization:user-agent:mime-version:to:cc :subject:references:in-reply-to:content-type; bh=P726SWhsszItDe1MR+c2LOUt4i+3I6J5zrf4i3C7cJ4=; b=bec2eVjXOhJ0MUNAi06uCsT7ZvJE/dHnToKpKDnnhvIDFafLZfxC04V43PM7ufuFRm MUFhTdw4ZuXljlCIJ3/eovSfiiL2qPfmm8IQlYvnRXpeUNw09rMK36loA/ZfjqA3usdQ Xr57VluQdSvZFgVtct/dmJ0iIO7q3W3Qoqpd0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:organization:user-agent :mime-version:to:cc:subject:references:in-reply-to:content-type; bh=P726SWhsszItDe1MR+c2LOUt4i+3I6J5zrf4i3C7cJ4=; b=OkLep9PEt/6/LExQAQrQhxbU5Erc1jUUI4ISkgVNfXe1WiFkB8EUWdnWxlbvP2Mdoc rpZ6D77rroYt8LZ7pvYHTrofmhl9kG3qktRl/MyATyu7/VRBRRr7EH+v4ClnIeReAQdU eHdnK3XHKgOzhg2O8AIaBIR35yRY8IymfQWe1pPHq3hgFHCDeTyW2JRJeOIvvAzKqs9s Toq8mPSunWE2Q5BvLo4AkKLrQcHKhj70Cv8QUNtg/wdcV9ncUFK61k8FqGyxpN6iCaXj b3+SDRVxrJh+W+pLmC7lUT5y/UPAoAuyN/ojZVBgPbHpIxb/f0AFrXyU40SxuuPIT5OD 7tqQ== X-Gm-Message-State: ALoCoQn29G4uQjkIgq3phXRf99D+PM7AetID38SxSPca3M5RZCPeFBrVGn2/h5HO1hbfCrf2etSs X-Received: by 10.49.71.34 with SMTP id r2mr162580319qeu.69.1386626062263; Mon, 09 Dec 2013 13:54:22 -0800 (PST) Received: from hackintosh.wemm.org ([2601:9:e80:d1:ece8:88ca:b1c6:e9cd]) by mx.google.com with ESMTPSA id o10sm37854547qaa.6.2013.12.09.13.54.18 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 09 Dec 2013 13:54:20 -0800 (PST) Message-ID: <52A63C03.2030201@wemm.org> Date: Mon, 09 Dec 2013 13:54:11 -0800 From: Peter Wemm Organization: World Domination in progress. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Thunderbird/24.1.1 MIME-Version: 1.0 To: Hiroki Sato , peter@FreeBSD.org Subject: Re: svn commit: r259094 - head/etc/rc.d References: <201312080555.rB85tu8W016979@svn.freebsd.org> <20131209.175119.597284254662875353.hrs@allbsd.org> In-Reply-To: <20131209.175119.597284254662875353.hrs@allbsd.org> X-Enigmail-Version: 1.6 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="80MvP1J1bf8dafClPrLbqErNKV2LKHNw9" Cc: svn-src-head@FreeBSD.org, svn-src-all@FreeBSD.org, src-committers@FreeBSD.org X-BeenThere: svn-src-head@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SVN commit messages for the src tree for head/-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Dec 2013 21:54:23 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --80MvP1J1bf8dafClPrLbqErNKV2LKHNw9 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 12/9/13, 12:51 AM, Hiroki Sato wrote: > Hi Peter, >=20 > Peter Wemm wrote > in <201312080555.rB85tu8W016979@svn.freebsd.org>: >=20 > pe> Author: peter > pe> Date: Sun Dec 8 05:55:55 2013 > pe> New Revision: 259094 > pe> URL: http://svnweb.freebsd.org/changeset/base/259094 > pe> > pe> Log: > pe> Rev 256256 had an undocumented side effect of breaking existing b= ehavior > pe> for ipv6 jails. > pe> > pe> Among the harmful side effects included putting a route to an ent= ire /64 > pe> onto an interface even if you were in a smaller network - eg: /80= =2E > pe> This broke the freebsd.org cluster hosted at ISC which has /80 ne= tworks. > pe> > pe> Modified: > pe> head/etc/rc.d/jail >=20 > The reason why it was changed is that I think an IPv6 GUA with no > prefix length information should always be interpret as a /64 because > the other tools like ifconfig do so. IPv6 is designed to always use > a correct prefix length and avoid using a /128 for aliases. Is there > a problem with specifying a /80 address to ip6.addr if a box is on a > /80 network? I'm all for issuing warnings and advising people to correct it. However = the problem is that the change silently breaks a working setup during an upgr= ade from 9.x to 10.x. At the ISC.org freebsd cluster site we lost the ability to talk to other services in nearby separate networks, including DNS. It had gone undetected until we tried to actually default to using IPv6 -= the first reaction from some of the other admins was to revert everything= back to IPv4. If breaking ipv6 jails leads to that outcome elsewhere the= n that would be sub-optimal for ipv6 adoption. --=20 Peter Wemm - peter@wemm.org; peter@FreeBSD.org; peter@yahoo-inc.com; KI6F= JV UTF-8: for when a ' just won\342\200\231t do. --80MvP1J1bf8dafClPrLbqErNKV2LKHNw9 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlKmPAgACgkQFRKuUnJ3cX8xIwCdE+i3QDsyv7s8a3BNABjW6atQ fIYAmgLWEd+b1tXRW/wWORQ4T7NX4xWo =Ia2w -----END PGP SIGNATURE----- --80MvP1J1bf8dafClPrLbqErNKV2LKHNw9--