IPv6 in jails

[Jacques Foucry]

Le mercredi 18 mars 2020 à 22:15:56 (+0700), Victor Sudakov à écrit:
> Dear Colleagues,
Hello Victor,

> 
> Is IPv6 in jails supposed to work? Does not work for me, what am I doing
> wrong?

Suppose to work, and work for me.
> 
> Here is a test jail:
> 
> test4 { 
>         path = /d02/jails/test4 ;
>         mount.devfs;
>         ip4 = new;
>         ip6 = new;
>         ip4.addr = 192.168.4.204/24;
>         ip6.addr = 2001:470:ecba:3::4/64;
>         host.hostname = test4.vas.sibptus.ru ;
>         interface = re1 ;
>         allow.raw_sockets = true ;
>         exec.start = "/bin/sh /etc/rc";
>         exec.stop = "/bin/sh /etc/rc.shutdown";
> }


Well there is a difference between your config and mine:

ip6.addr="em0|2a01:4f9:4a:1fd8::16/64";

In my config there is the interface to use (em0 in my case, re1 should be in
yours)
> 
> However when I look from inside the jail, I see the daemons listening
> only on IPv4:
> 
> root at test4:/ # sockstat -l
> USER     COMMAND    PID   FD PROTO  LOCAL ADDRESS         FOREIGN ADDRESS      
> root     sendmail   17178 3  tcp4   192.168.4.204:25      *:*
> root     sshd       17175 3  tcp4   192.168.4.204:22      *:*
> root     syslogd    17110 5  udp4   192.168.4.204:514     *:*
> 
> If I "ssh 2001:470:ecba:3::4" from outside, I get into the host instead
> of the jail (because 2001:470:ecba:3::4 *is* assigned to re1, but not
> available inside the jail).

Hope my small experience can help you.
-- 
Jacques Foucry
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-net/attachments/20200318/78920e78/attachment.sig>