Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 22 Dec 2021 11:02:31 +0100
From:      Goran =?utf-8?B?TWVracSH?= <meka@tilda.center>
To:        freebsd-net@freebsd.org
Subject:   Re: IPv6 with VNET jails
Message-ID:  <20211222100231.qlxdxkdslohs6zn3@tilda.center>
In-Reply-To: <20211221163015.l5axsxvpksbv7om5@tilda.center>
References:  <20211221163015.l5axsxvpksbv7om5@tilda.center>

next in thread | previous in thread | raw e-mail | index | archive | help

--bsotrfjydbl3xrl5
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline

Hello,

To answer my own question, I was missing this line in PF:
nat on $ext_if inet6 from cbsd0:network to any -> ($ext_if:0)

There, "inet6" and "$ext_if:0" are important bits. Without :0 PF would
load-balance IPv6 addresses and that's link-local one and one assigned
by rtsold.

I hope this helps someone in the future.

Regards,
meka

--bsotrfjydbl3xrl5
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=Rmob
-----END PGP SIGNATURE-----

--bsotrfjydbl3xrl5--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20211222100231.qlxdxkdslohs6zn3>