From owner-freebsd-stable@FreeBSD.ORG Tue Jun 12 13:15:51 2012 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 460A8106567D for ; Tue, 12 Jun 2012 13:15:51 +0000 (UTC) (envelope-from ml@my.gd) Received: from mail-ey0-f182.google.com (mail-ey0-f182.google.com [209.85.215.182]) by mx1.freebsd.org (Postfix) with ESMTP id C55878FC22 for ; Tue, 12 Jun 2012 13:15:50 +0000 (UTC) Received: by eabm6 with SMTP id m6so767909eab.13 for ; Tue, 12 Jun 2012 06:15:44 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding :x-gm-message-state; bh=olxuLBoa4sCTcpzzDaGDAcbkgvxRMPENU1yd8Jf8zVE=; b=UMqTtY/whQmqcGUh3JL0GZrzBVCSQno7zmoLUUWNYayogrXrRCeD+Mr+QQ6FTy9Ezw j8jC/gL4JRhA31nuwr4zgLGCr5QbgFACGKfGQTFOvdXg/ooLvIOwo9bThte87zgp5xU+ oUtPq+lmm2yILMFl49NjZx2ECyfSS4lGufDembwU9gDkLwGe9EHop+YwP4BSfsS5pl7q M2jgGucgR7fB+aVoKhWCVKY8VIPx0yQvnYU6QIMkA5WVgAO6S6RZ5355J7O8iU8+Em/m AhXzklxpLSGfSdjtkrBaG6LUXTkLljvx+zcUuGmAOh6D/mbMG2V5fDQeAT8nUFIxWSj+ xsTw== Received: by 10.14.37.12 with SMTP id x12mr6735058eea.161.1339506944318; Tue, 12 Jun 2012 06:15:44 -0700 (PDT) Received: from dfleuriot-at-hi-media.com ([83.167.62.196]) by mx.google.com with ESMTPS id p41sm64276461eef.5.2012.06.12.06.15.42 (version=SSLv3 cipher=OTHER); Tue, 12 Jun 2012 06:15:43 -0700 (PDT) Message-ID: <4FD740FE.9000709@my.gd> Date: Tue, 12 Jun 2012 15:15:42 +0200 From: Damien Fleuriot User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:12.0) Gecko/20120428 Thunderbird/12.0.1 MIME-Version: 1.0 To: Pete French References: <4FD73C7B.4090309@my.gd> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Gm-Message-State: ALoCoQn/9vm3RPeZPmgtLZvPPTsyJzyLClNhXeWHE0Maik465bFf71OQ0GrcdkAq0HauNCWIDBk3 Cc: freebsd-stable@freebsd.org Subject: Re: IPv6 and CARP crashes boxes X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jun 2012 13:15:51 -0000 On 6/12/12 3:03 PM, Pete French wrote: >> Thanks for the feedback Pete, what are you running ? >> >> We're on 8-STABLE here. > > Yup, same here - aactually running a very recent STABLE now, > but for most of this year it's been on one from January. The > one running on the firewalls is from May 7th, and that works > beautifully. > Hmmm you might want to update again then, 2 SAs published late in may: http://security.freebsd.org/advisories/FreeBSD-SA-12:01.openssl.asc http://security.freebsd.org/advisories/FreeBSD-SA-12:02.crypt.asc >> I've got some spare time on my hands actually, I'm gonna try some more >> today, both on an ipv6-only carp, then on a v4+v6. > > Ok, let us know how you get on - the config here is very simple, reproduced > below for your viewing pleasure ;) This is from the 'active' firewall: > > ifconfig_em0="inet 10.32.10.1/16" > ipv6_ifconfig_em0="2a02:1658:1:2:a32f::1/64" > ifconfig_em1="inet 178.250.73.196/27" > ipv6_ifconfig_em1="2a02:1658:1:1::1:2/64" > > ifconfig_carp0="vhid 10 pass xxxxyyyy 10.32.10.6/16" > ifconfig_carp1="vhid 20 pass xxxxyyyy 178.250.73.198/27" > ipv6_ifconfig_carp2="vhid 30 pass xxxxyyyy 2a02:1658:1:2:a32f::6/64" > ipv6_ifconfig_carp3="vhid 40 pass xxxxyyyy 2a02:1658:1:1::1:1/64" > > -pete. Thanks, will keep the thread updated ;)