IPv6 in jails
Victor Sudakov
vas at sibptus.ru
Wed Mar 18 15:58:47 UTC 2020
Bjoern A. Zeeb wrote:
> >
> > Is IPv6 in jails supposed to work? Does not work for me, what am I doing
> > wrong?
> >
> > Here is a test jail:
> >
> > test4 {
> > path = /d02/jails/test4 ;
> > mount.devfs;
> > ip4 = new;
> > ip6 = new;
> > ip4.addr = 192.168.4.204/24;
> > ip6.addr = 2001:470:ecba:3::4/64;
>
> I usually do something like this:
>
> ip6.addr += "lo0|2001:db8:1234:5678::ef/128";
>
> to add the single address out of a /64 to the loopback interface on the host
> and then pass it through to the jail. The /64 however is actually routed to
> my host so might not work if you have the /64 on the physical interface.
>
> Given it is a jail without vnet you cannot assign a /64 to the jail, you
> want to just specify the address usually (plainly or as /128).
Bjoern, I've just changed "ip6.addr = 2001:470:ecba:3::4/64" to
"ip6.addr = 2001:470:ecba:3::4/128" per your advice, and restarted the
jails, without any visible result. The daemons inside still listen only
on tcp4:
root at test4:/ # sockstat -l
USER COMMAND PID FD PROTO LOCAL ADDRESS FOREIGN ADDRESS
root sendmail 18711 3 tcp4 192.168.4.204:25 *:*
root sshd 18708 3 tcp4 192.168.4.204:22 *:*
root syslogd 18643 5 udp4 192.168.4.204:514 *:*
root syslogd 18643 6 dgram /var/run/log
root syslogd 18643 7 dgram /var/run/logpriv
root at test4:/ #
>
> One thing to check first is ifconfig inside the jail does see the
> address?
Still does, but no use:
root at test4:/ # ifconfig re1
re1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
description: Inside
options=8209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE>
ether c4:12:f5:33:c9:7c
inet 192.168.4.204/24 broadcast 192.168.4.255
inet6 2001:470:ecba:3::4/128
media: Ethernet autoselect (none)
status: no carrier
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
root at test4:/ #
--
Victor Sudakov, VAS4-RIPE, VAS47-RIPN
2:5005/49 at fidonet http://vas.tomsk.ru/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-net/attachments/20200318/7168337f/attachment.sig>
More information about the freebsd-net
mailing list