Re: Import dhcpcd(8) into FreeBSD base

On Sun, 7 Aug 2022 at 08:08, Franco Fichtner <franco@opnsense.org> wrote:

> Hi Ben,
>
> > On 7. Aug 2022, at 7:31 AM, Ben Woods <woodsb02@FreeBSD.org> wrote:
> >
> > Reason: ensure fresh installs of FreeBSD support using DHCPv6 and prefix
> delegation to obtain an IP address (not supported by dhclient or rtsold).
> Having it in ports/packages could be problematic if people cannot obtain an
> IPv6 address to download it.
> >
> > Why dhcpcd vs other DHCPv6 clients? It’s well supported, full featured,
> included in NetBSD and DragonflyBSD base, and is now sandboxed with
> capsicum. The other DHCP clients tend to either not support DHCPv6
> (dhcpleased) or are no longer actively maintained (wide-dhcpv6-client).
>
> Having worked on dhclient and rtsold in FreeBSD and worked with it for
> years
> in pfSense/OPNsense the proposal here seems to be to throw all progress
> away
> that would definitely have to be rebuilt in the years to follow for the
> all-
> in-one (?) replacement.
>

I'm not sure what the problem is here? I'm using dhcpcd client in my home
lab with pfsense acting as dhcp and dhcp6 server and it works great,
including prefix delegation. Choosing a new dhcp client in FreeBSD
certainly doesn't require {pf,opn}sense to use that client.


>
> For OPNsense we did fork strip down and improve wide-dhcpv6 over the years:
>
> https://github.com/opnsense/dhcp6c
>
> It could use more work and cleanups, but basically all that is required is
> to
> bring it into FreeBSD and use it to skip a long trail of said future work
> both
> in dhcpcd and putting back existing perks of the current dhclient and
> rtsold.
>
> The basic question is: what's not working in dhclident? How is rtsold
> inferior?
>

Main thing that's missing for me is dynamic dns - my dhcp server updates my
local DNS using ddns. This works well for ipv4 and I've been using it this
way for years. For ipv6, rtsold is limited to handing advertising the local
prefix. Using dhcpcd for both means I get both A and AAAA records in my
local DNS which makes me happy.


>
> It seems like "It’s well supported, full featured, included in NetBSD and
> DragonflyBSD base" incorporates none of the real world concerns for
> migratory
> work so for the time being I don't think it's a solid proposal, also
> because
> it will cause heavy downstream disruption in OPNsense/pfSense in a few
> years
> as well.
>

Again, not seeing the harm for either OPNsense or pfSense - these
distributions are free to choose another client.