From nobody Tue Dec 05 05:44:53 2023 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4SkqJk25Krz53K0Z for ; Tue, 5 Dec 2023 05:45:58 +0000 (UTC) (envelope-from lists@jnielsen.net) Received: from webmail5.jnielsen.net (webmail5.jnielsen.net [IPv6:2607:f170:34:11::b0]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "mail.freebsdsolutions.net", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4SkqJj4MWvz3X3Q for ; Tue, 5 Dec 2023 05:45:57 +0000 (UTC) (envelope-from lists@jnielsen.net) Authentication-Results: mx1.freebsd.org; none Received: from smtpclient.apple ([IPv6:2607:fa18:e2fe:2d6a:b4e7:8586:d4ef:3731]) (authenticated bits=0) by webmail5.jnielsen.net (8.17.2/8.17.1) with ESMTPSA id 3B55jQHa046499 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NO); Mon, 4 Dec 2023 22:45:30 -0700 (MST) (envelope-from lists@jnielsen.net) X-Authentication-Warning: webmail5.jnielsen.net: Host [IPv6:2607:fa18:e2fe:2d6a:b4e7:8586:d4ef:3731] claimed to be smtpclient.apple Content-Type: multipart/alternative; boundary=Apple-Mail-5414E74F-4974-4CA1-A2AD-150D44EB0B22 Content-Transfer-Encoding: 7bit From: John Nielsen List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@freebsd.org Mime-Version: 1.0 (1.0) Subject: Re: vxlan with IPv6 underlay ? Date: Mon, 4 Dec 2023 22:44:53 -0700 Message-Id: <15F613FA-839C-4CE8-B679-D1A581D392F8@jnielsen.net> References: Cc: freebsd-net@freebsd.org In-Reply-To: To: Benoit Chesneau X-Mailer: iPhone Mail (21B101) X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:6364, ipnet:2607:f170:30::/44, country:US] X-Spamd-Bar: ---- X-Rspamd-Queue-Id: 4SkqJj4MWvz3X3Q --Apple-Mail-5414E74F-4974-4CA1-A2AD-150D44EB0B22 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
On Dec 4, 2023, at 3:26=E2=80=AFAM, Benoit Chesneau &= lt;benoitc@enki-multimedia.eu> wrote:

Is IPv6 underlay fully supported with FreebBSD ? I have creat= ed the a tunnel and associated an Ipv6 address to each side. I'm able to pin= g between each devicesl. But when I want to curl from the remote side  = it timeout. Locally on the remote side it is OK. Is this expected ? Should I= rather create a bridge with vxlan as a member and bind nginx to it ?
<= /div>

I think you=E2=80=99ve answered your o= wn question and demonstrated that it works as expected. Pinging the inside a= ddress would not work at all if the tunnel and outer transport weren=E2=80=99= t working.

As to why your curl test doesn=E2=80=99t= work, we=E2=80=99d need more information. Make sure that nginx is in fact l= istening on the vxlan IP and is not being blocked by a firewall. You may als= o want to do a packet capture of the inside interfaces to see what is and is= n=E2=80=99t going through.

JN

```
$ ifconfig vxlan0 create vxlanid 108 vxlanlocal AAAA:BBB= B:110b:102::100 vxlanremote AAAA:BBBB:11= 0b:102::12
ifconfig vxlan0
vxlan0: f= lags=3D1008843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,LOWER_UP> metric= 0 mtu 1430
options=3D80020<JUMBO_MTU,LINKST= ATE>
ether 58:9c:fc:10:ff:eb
groups: vxlan
vxlan vni 108 local [AAAA:B= BBB:102::100]:4789 remote [AAAA:BBBB:110= b:102::12]:4789
media: Ethernet autoselect (autosel= ect <full-duplex>)
status: active
nd6 options=3D29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>= ;
ifconfig vxlan0 inet6 AAAA:BBBB:110b:300::1/64
````

```
 ifconfig vxlan0
vxlan0: f= lags=3D1008843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,LOWER_UP> metric= 0 mtu 1430
options=3D680323<RXCSUM,TXCSUM,J= UMBO_MTU,TSO4,TSO6,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
ether 58:9c:fc:10:df:1f
inet6 fe80:= :5a9c:fcff:fe10:df1f%vxlan0 prefixlen 64 scopeid 0xf
= inet6 AAAA:BBBB:110b:300::2 pre= fixlen 64
groups: vxlan
vxlan vni 108 local [AAAA:BBBB1= 10b:102::12]:4789 remote [AAAA:BBBB:110b= :102::100]:4789
media: Ethernet autoselect (autosel= ect <full-duplex>)
status: active
nd6 options=3D21<PERFORMNUD,AUTO_LINKLOCAL>
$ p= ing6 AAAA:BBBB:110b:300::1
PING6(56=3D40+8+8 bytes) AAAA:BBBB:110b:300::2 --> AAAA:BBBB::110b:300::1
16 bytes fro= m 2a0e:e701:110b:300::1, icmp_seq=3D0 hlim=3D64 time=3D0.071 ms
=
16 bytes from 2a0e:e701:110b:300::1, icmp_seq=3D1 hlim=3D64 time=3D= 0.078 ms
16 bytes from 2a0e:e701:110b:300::1, icmp_se= q=3D2 hlim=3D64 time=3D0.076 ms
16 bytes from 2a0e:e7= 01:110b:300::1, icmp_seq=3D3 hlim=3D64 time=3D0.104 ms
16 bytes from 2a0e:e701:110b:300::1, icmp_seq=3D4 hlim=3D64 time=3D0.077 m= s
^C
```

But when I run `curl -6 -v 'http://[AAAA:BBBB:11= 0b:300::1]'` it timeout.



Beno=C3=AEt Chesneau, Enki Multimedia
=E2=80=94
t. +33608655490 

Sent with Proton Mail secure email.
= --Apple-Mail-5414E74F-4974-4CA1-A2AD-150D44EB0B22--