From owner-freebsd-net@FreeBSD.ORG Fri Dec 30 14:59:06 2011 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 830A2106566B for ; Fri, 30 Dec 2011 14:59:06 +0000 (UTC) (envelope-from jhellenthal@gmail.com) Received: from mail-iy0-f182.google.com (mail-iy0-f182.google.com [209.85.210.182]) by mx1.freebsd.org (Postfix) with ESMTP id 3A9398FC08 for ; Fri, 30 Dec 2011 14:59:06 +0000 (UTC) Received: by iadj38 with SMTP id j38so32203595iad.13 for ; Fri, 30 Dec 2011 06:59:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=sender:date:from:to:cc:subject:message-id:references:mime-version :content-type:content-disposition:in-reply-to; bh=hcSdgUZ5GmCsJw+Sqfsi05Sa5l4uEjYYJrh0uRyxzBU=; b=EvhrR3qbHZ5r6Tnh1Khyx0p8r4xmWhAr2ZG8hW1k5tdBP0kTT++n0y9E34g/1ecXI4 GUPLbdnRBeGZIElkOGHw63Q7zhDLK7X4XaeoMOwSCgNKWXNCnofUYDi+sI4LB2DrEKHm YHIoPJ3PojcSgB1iKqgTJXO4bK3AXkl+EnZo0= Received: by 10.42.153.6 with SMTP id k6mr41738787icw.30.1325257145769; Fri, 30 Dec 2011 06:59:05 -0800 (PST) Received: from DataIX.net (24-247-9-230.dhcp.aldl.mi.charter.com. [24.247.9.230]) by mx.google.com with ESMTPS id rc7sm86242619igb.0.2011.12.30.06.59.03 (version=TLSv1/SSLv3 cipher=OTHER); Fri, 30 Dec 2011 06:59:03 -0800 (PST) Sender: Jason Hellenthal Received: from DataIX.net (localhost [127.0.0.1]) by DataIX.net (8.14.5/8.14.5) with ESMTP id pBUEx13V031314 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 30 Dec 2011 09:59:01 -0500 (EST) (envelope-from jhell@DataIX.net) Received: (from jhell@localhost) by DataIX.net (8.14.5/8.14.5/Submit) id pBUEws0W031308; Fri, 30 Dec 2011 09:58:54 -0500 (EST) (envelope-from jhell@DataIX.net) Date: Fri, 30 Dec 2011 09:58:54 -0500 From: Jason Hellenthal To: "Bjoern A. Zeeb" Message-ID: <20111230145854.GA22414@DataIX.net> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="pf9I7BMVVzbSWLtt" Content-Disposition: inline In-Reply-To: Cc: freebsd-net@freebsd.org, Marcin Cieslak Subject: Re: IPv6 not responding on some aliases (recent 8-stable) X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Dec 2011 14:59:06 -0000 --pf9I7BMVVzbSWLtt Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Dec 23, 2011 at 09:17:09AM +0000, Bjoern A. Zeeb wrote: >=20 > On 22. Dec 2011, at 20:39 , Marcin Cieslak wrote: >=20 > >>> Bjoern A. Zeeb wrote: > >>> I initially thought it's a transport layer issue, since previously (b= efore > >>> I changed configuration) 30%-50% SSH connection attempts succeeded > >>> (but prefix was wrong on the "primary" IPv6 address :1000). > >>> Now I get no packets on receiving side at all for those "broken" IPv6= addresses. > >>=20 > >> Talk to ywhomever is providing in front of you to > >> 1) either relax nd6 table limits or > >> 2) to route a /64 to your host to only have 1 entry in the neighbour t= able. > >>=20 > >> That's most likely the problem given my crystal ball and experience. > >=20 > > Thank you for insightful analysis!=20 > > Seems like this provider has some significant IPv6 takeup, which is > > good news - sorry for hassle, but problems started after upgrade.=20 > >=20 > > I'll talk to my upstream then, thanks! >=20 > Please let us know of the results, especially if my crystal ball was wron= g. >=20 I have seen this behavior before when one of the addresses on an interface = is in a DMZ while the others are not. But this was with IPv4. I would assum= e IPv6 would have acted the same way but left it untested as it was not cri= tical. Take this as informational only and double check your switches, fire= walls, etc... --=20 ;s =3D; --pf9I7BMVVzbSWLtt Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iQEcBAEBAgAGBQJO/dGtAAoJEJBXh4mJ2FR+QVgH/Rk8Ns+BRylps4qCSCNTbWg8 iIdYhCFP2rQmdZUdRlbrIAVFaKGQawYiBGh/cYmaA9zZ9t5kF0oIGBLcW2Xtz/eA 30M0vyUN/m6UDLK1ERttZ/mNdQUTsZpPtaSYoKNjW8D+KttNL1cNE9LRwfSs4aPU UIiA3NTqrfoue1QWsqz23UkOI9EY1fU54xKlEKGRGXzlErQoAumxKB8OCGnazgON yBJWVS1zgSvb5Lz9AOhZqTjBaFntqWyUK4D+T21+B71F/TjGDtJxpsV9LFvjP2R3 GgUaLp/OFAZefcOFCTEVuVp12eoPeTKQO961ysiSc+76aZBOvmvwlYULTZmNV+4= =VknF -----END PGP SIGNATURE----- --pf9I7BMVVzbSWLtt--