Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 18 Mar 2020 22:58:43 +0700
From:      Victor Sudakov <vas@sibptus.ru>
To:        "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
Cc:        freebsd-questions@freebsd.org, freebsd-net@freebsd.org
Subject:   Re: IPv6 in jails
Message-ID:  <20200318155843.GA66451@admin.sibptus.ru>
In-Reply-To: <069AA173-29F1-4F9F-B7D6-31BF2C559C17@lists.zabbadoz.net>
References:  <20200318151556.GA64871@admin.sibptus.ru> <069AA173-29F1-4F9F-B7D6-31BF2C559C17@lists.zabbadoz.net>

next in thread | previous in thread | raw e-mail | index | archive | help

--pWyiEgJYm5f9v55/
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Bjoern A. Zeeb wrote:
> >=20
> > Is IPv6 in jails supposed to work? Does not work for me, what am I doing
> > wrong?
> >=20
> > Here is a test jail:
> >=20
> > test4 {
> >         path =3D /d02/jails/test4 ;
> >         mount.devfs;
> >         ip4 =3D new;
> >         ip6 =3D new;
> >         ip4.addr =3D 192.168.4.204/24;
> >         ip6.addr =3D 2001:470:ecba:3::4/64;
>=20
> I usually do something like this:
>=20
>         ip6.addr +=3D "lo0|2001:db8:1234:5678::ef/128";
>=20
> to add the single address out of a /64 to the loopback interface on the h=
ost
> and then pass it through to the jail.  The /64 however is actually routed=
 to
> my host so might not work if you have the /64 on the physical interface.
>=20
> Given it is a jail without vnet you cannot assign a /64 to the jail, you
> want to just specify the address usually (plainly or as /128).

Bjoern, I've just changed "ip6.addr =3D 2001:470:ecba:3::4/64" to
"ip6.addr =3D 2001:470:ecba:3::4/128" per your advice, and restarted the
jails, without any visible result. The daemons inside still listen only
on tcp4:

root@test4:/ # sockstat -l
USER     COMMAND    PID   FD PROTO  LOCAL ADDRESS         FOREIGN ADDRESS  =
   =20
root     sendmail   18711 3  tcp4   192.168.4.204:25      *:*
root     sshd       18708 3  tcp4   192.168.4.204:22      *:*
root     syslogd    18643 5  udp4   192.168.4.204:514     *:*
root     syslogd    18643 6  dgram  /var/run/log
root     syslogd    18643 7  dgram  /var/run/logpriv
root@test4:/ #=20

>=20
> One thing to check first is ifconfig inside the jail does see the
> address?

Still does, but no use:

root@test4:/ # ifconfig re1
re1: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        description: Inside
        options=3D8209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,W=
OL_MAGIC,LINKSTATE>
        ether c4:12:f5:33:c9:7c
        inet 192.168.4.204/24 broadcast 192.168.4.255
        inet6 2001:470:ecba:3::4/128
        media: Ethernet autoselect (none)
        status: no carrier
        nd6 options=3D21<PERFORMNUD,AUTO_LINKLOCAL>
root@test4:/ #=20


--=20
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
2:5005/49@fidonet http://vas.tomsk.ru/

--pWyiEgJYm5f9v55/
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEcBAEBAgAGBQJeckUzAAoJEA2k8lmbXsY0P6gIAK+R6dUgrUEKSv8Jpx6PvOdG
8es9bieElW2jqt2XI0/uH8Rt2AtQuS/Jtq90AKxDETolFN+8PWS8u9kT3agrXi/Q
qrp60W5LQ1rVmeSoKgRW8JU6fmiZGeLZd6+/ZkUvimwQ1rA1uLqNnLRFpGGqNlMk
VMRjkvcUnh4A4CqJHm2QetfeDhvVrQW6Pmp+qzwFKbg0uL7MRzfaIcqx4L8RrI5t
LF6W6udZF+zF9dl0B+pTdmv3rjqC4AUzLbQ5Zkdiu52xElBvGIL10XlL6R8RDB0k
hrlvW7nbDvc49zL5huhyaeDQgoyxtvK1mHqiEN1hfaTjNG5Kz/E+Qdjp2sYZPcU=
=QZ6h
-----END PGP SIGNATURE-----

--pWyiEgJYm5f9v55/--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20200318155843.GA66451>