From owner-svn-src-all@FreeBSD.ORG Mon Dec 9 21:54:23 2013 Return-Path: Delivered-To: svn-src-all@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 92999860 for ; Mon, 9 Dec 2013 21:54:23 +0000 (UTC) Received: from mail-qa0-x230.google.com (mail-qa0-x230.google.com [IPv6:2607:f8b0:400d:c00::230]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 40F5D138F for ; Mon, 9 Dec 2013 21:54:23 +0000 (UTC) Received: by mail-qa0-f48.google.com with SMTP id w5so3099105qac.0 for ; Mon, 09 Dec 2013 13:54:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wemm.org; s=google; h=message-id:date:from:organization:user-agent:mime-version:to:cc :subject:references:in-reply-to:content-type; bh=P726SWhsszItDe1MR+c2LOUt4i+3I6J5zrf4i3C7cJ4=; b=bec2eVjXOhJ0MUNAi06uCsT7ZvJE/dHnToKpKDnnhvIDFafLZfxC04V43PM7ufuFRm MUFhTdw4ZuXljlCIJ3/eovSfiiL2qPfmm8IQlYvnRXpeUNw09rMK36loA/ZfjqA3usdQ Xr57VluQdSvZFgVtct/dmJ0iIO7q3W3Qoqpd0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:organization:user-agent :mime-version:to:cc:subject:references:in-reply-to:content-type; bh=P726SWhsszItDe1MR+c2LOUt4i+3I6J5zrf4i3C7cJ4=; b=CNjj7+RNntburz4Dq3MHlbBClH1d2CoOA96+Cobe7YrD5SdM5dFzPb+XKTal7EL2D6 muAMjTpPK9vcwYxIHCLwope7Nww05AwH5XWuKgZYvXw6ShX7zmc01zfy5FucqwV/86uj S2Sy2XbEXNS2yFwALPtGCfTSTJ9LprWrtgAkVrTOrXNbQ6aIZEITWpg7ORW1CMYTrXXB 9yEI1vCZPs5FJ65GJj4tUcYo53X6EYqbSKTehsVeluay/XGQkSeP70+uhoiYr3jWGKVf +P2V0eKLQn4M0JeIpKdqZD/0ojvoRqEEWtQPEcIRuDxvp7Fl54hFFxJIJs7VDmwqUMuH Bhmg== X-Gm-Message-State: ALoCoQlPU4yEf3U17SDcc+E5iLEpIjuCdgpM7aLnwBpK2+Cs/Vkw5eXaY+rUGw2dvjZsfH042GZ0 X-Received: by 10.49.71.34 with SMTP id r2mr162580319qeu.69.1386626062263; Mon, 09 Dec 2013 13:54:22 -0800 (PST) Received: from hackintosh.wemm.org ([2601:9:e80:d1:ece8:88ca:b1c6:e9cd]) by mx.google.com with ESMTPSA id o10sm37854547qaa.6.2013.12.09.13.54.18 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 09 Dec 2013 13:54:20 -0800 (PST) Message-ID: <52A63C03.2030201@wemm.org> Date: Mon, 09 Dec 2013 13:54:11 -0800 From: Peter Wemm Organization: World Domination in progress. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Thunderbird/24.1.1 MIME-Version: 1.0 To: Hiroki Sato , peter@FreeBSD.org Subject: Re: svn commit: r259094 - head/etc/rc.d References: <201312080555.rB85tu8W016979@svn.freebsd.org> <20131209.175119.597284254662875353.hrs@allbsd.org> In-Reply-To: <20131209.175119.597284254662875353.hrs@allbsd.org> X-Enigmail-Version: 1.6 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="80MvP1J1bf8dafClPrLbqErNKV2LKHNw9" Cc: svn-src-head@FreeBSD.org, svn-src-all@FreeBSD.org, src-committers@FreeBSD.org X-BeenThere: svn-src-all@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "SVN commit messages for the entire src tree \(except for " user" and " projects" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Dec 2013 21:54:23 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --80MvP1J1bf8dafClPrLbqErNKV2LKHNw9 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 12/9/13, 12:51 AM, Hiroki Sato wrote: > Hi Peter, >=20 > Peter Wemm wrote > in <201312080555.rB85tu8W016979@svn.freebsd.org>: >=20 > pe> Author: peter > pe> Date: Sun Dec 8 05:55:55 2013 > pe> New Revision: 259094 > pe> URL: http://svnweb.freebsd.org/changeset/base/259094 > pe> > pe> Log: > pe> Rev 256256 had an undocumented side effect of breaking existing b= ehavior > pe> for ipv6 jails. > pe> > pe> Among the harmful side effects included putting a route to an ent= ire /64 > pe> onto an interface even if you were in a smaller network - eg: /80= =2E > pe> This broke the freebsd.org cluster hosted at ISC which has /80 ne= tworks. > pe> > pe> Modified: > pe> head/etc/rc.d/jail >=20 > The reason why it was changed is that I think an IPv6 GUA with no > prefix length information should always be interpret as a /64 because > the other tools like ifconfig do so. IPv6 is designed to always use > a correct prefix length and avoid using a /128 for aliases. Is there > a problem with specifying a /80 address to ip6.addr if a box is on a > /80 network? I'm all for issuing warnings and advising people to correct it. However = the problem is that the change silently breaks a working setup during an upgr= ade from 9.x to 10.x. At the ISC.org freebsd cluster site we lost the ability to talk to other services in nearby separate networks, including DNS. It had gone undetected until we tried to actually default to using IPv6 -= the first reaction from some of the other admins was to revert everything= back to IPv4. If breaking ipv6 jails leads to that outcome elsewhere the= n that would be sub-optimal for ipv6 adoption. --=20 Peter Wemm - peter@wemm.org; peter@FreeBSD.org; peter@yahoo-inc.com; KI6F= JV UTF-8: for when a ' just won\342\200\231t do. --80MvP1J1bf8dafClPrLbqErNKV2LKHNw9 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlKmPAgACgkQFRKuUnJ3cX8xIwCdE+i3QDsyv7s8a3BNABjW6atQ fIYAmgLWEd+b1tXRW/wWORQ4T7NX4xWo =Ia2w -----END PGP SIGNATURE----- --80MvP1J1bf8dafClPrLbqErNKV2LKHNw9--