ipv6 broken: radvd: can't join ipv6-allrouters on <interface>
-
Any news about the problem/patch? I have this bug too, but too lazy/dont have time to go back to 2.4.4...
-
@havastamas
Waiting for the new builds based on 12.1 version of FreeBSD. I don't know if there any target date available.
Currently you can use workaround published by @kiokoman. I use it with cron package. Just running command every hour.
killall radvd && sleep 5 && /usr/local/sbin/radvd -p /var/run/radvd.pid -C /var/etc/radvd.conf -m syslog
-
@w0w This workaround is much better than reboot the firewall every 6 hours, to get ipv6 working. Thank you!
-
@w0w btw what is the experience with this patch? My ISP disconnets every user after 7 days of uptime, then gives new ipv4/v6 adress (dual stack).
Do you think this workaround will work after 7 days of uptime?
-
@havastamas With my build, applying fixes to to get 6RD working, removing spam messaging in RADVD and upgrading to 12.1 code base, my firewall has been up and passing ipv6 tests for over 12 days now.
So I think a solution has been found, its now a matter of priorities. Switching to 12.1 is non-trivial and who knows what other issues that creates. I'm not a networking expert and my application is relatively simple, so all it has done is highlighted that no fatal flaws are out there with starting to move that direction.
-
@havastamas
If you are talking about workaround... I see no reason why the workaround would not work, but it’s easier to check yourself whether it works or not. -
any updates on this?
-
https://redmine.pfsense.org/issues/9577 is updated, but nothing new so far, waiting for the new build based on 12.1
-
@jimp when do we expect snapshots based on FreeBSD 12.1? Is it coming early 2020?
Happy holidays! -
@w0w said in ipv6 broken: radvd: can't join ipv6-allrouters on <interface>:
@jimp when do we expect snapshots based on FreeBSD 12.1? Is it coming early 2020?
Happy holidays!im sure upgrading to 12.1 will break other things and require more testing. But I hope this issue will be fixed.
-
@strangegopher said in ipv6 broken: radvd: can't join ipv6-allrouters on <interface>:
im sure upgrading to 12.1 will break other things and require more testing. But I hope this issue will be fixed.
I’m reasonably current with 12.1 and haven’t noticed any new issues and a few other issues have been fixed. Most of the 2.50 pfsense commits to 12.0 apply to 12.1 without conflicts.
-
@rschell thats great news! thanks for all the work. Happy holidays!
-
@rschell
Ronald, any chances to get already compiled radvd with patch provided on https://redmine.pfsense.org/issues/9577? Just for testing. -
@w0w I can give it a try. I’ll have to update my 2.5 version first, it’s been a while.
-
@w0w said in ipv6 broken: radvd: can't join ipv6-allrouters on <interface>:
@rschell
Ronald, any chances to get already compiled radvd with patch provided on https://redmine.pfsense.org/issues/9577? Just for testing.I think I got a RADVD version based on 2.5 now. My build machine is based on stable-12 and there was a linker change that required changing one of the linker options (added -z notext).
The test version is based on the 2.5 source changing the behavior of setup_allrouters_membership routine in the RADVD port. From the code listed in 9577, I changed the dimension of the msockets table from 10 to 50 and added a logging message when a socket has been added to the table and also expanded the "can't join" message to include additional information should the IPV6_JOIN_GROUP call fail. Normal operation should log the following messages in the Routing log, one for each interface configured:
Feb 11 08:28:18 radvd 78824 version 2.18 started Feb 11 08:28:18 radvd 78834 adding ipv6-allrouters on em0, sock: 4, iface->props.if_index:1
I have the txz file ready and have posted it to the redmine issue #9577 for those who wish to test the alternate patch.
-
Thanks, testing.
-
@w0w - any results so far?
-
i'm start testing right now, we need at least 24 h to tell if it's ok. no prob so far :)
Feb 13 18:58:33 radvd 38033 adding ipv6-allrouters on ix0.100, sock: 4, iface->props.if_index:12 Feb 13 18:58:33 radvd 37849 version 2.18 started
-
Yes, I can confirm that IPv6 works good. About 36 hours and no problem.
-
after all this days it's still working good
great job @rschell -
@rschell idk if it's related to this update but lately i had trouble with my ipv6 tunnel, i still need to investigate but the problem is that my tunnel does not work after a reboot
the gif is up but gateway monitor say packet loss 100%
i had to reboot 2 / 3 times in a row to make it work again -
@kiokoman Unlikely related to the proposed patch. I'm using an 6RD stf interface and have noticed issues with loss of the WAN connection. Might be a timing issue with the gif interface, not certain.
-
some kind of race condition at boot maybe, also if i wait some hours the tunnel start to work alone. but it's faster if i reboot until it start working. idk the problem started last week just after i moved pfsense from bare metal to esxi, probably something to do with that
-
@kiokoman I've noticed that bare metal vs Hyper V behave differently in subtle ways.
-
ok i think that i found what's going on, if i disable openvpn before restarting pfsense the tunnel work.
so i have to disable openvpn, restart pfsense, and when it's up i can start the openvpn otherwise i have trouble -
Looks like there are no error messages on the latest STABLE snapshots.
-
do we no longer have to apply that patch manually?
I have not yet had time to update and verify -
@kiokoman
Wait for 24h and I tell you :) -
all clear for now
May 2 12:34:32 radvd 73936 resuming normal operation May 2 12:34:32 radvd 73936 attempting to reread config file May 2 12:02:28 radvd 73936 adding ipv6-allrouters on vmx1.100, sock: 4, iface->props.if_index:8 May 2 12:02:28 radvd 73720 version 2.18 started
-
ping -t ipv6.google.com Ping request could not find host ipv6.google.com. Please check the name and try again.
and
May 3 16:47:23 radvd 27820 can't join ipv6-allrouters on ix1 May 3 16:47:15 radvd 27820 can't join ipv6-allrouters on ix1 May 3 16:47:00 radvd 27820 can't join ipv6-allrouters on ix1 May 3 16:46:54 radvd 27820 can't join ipv6-allrouters on ix1 May 3 16:46:37 radvd 27820 can't join ipv6-allrouters on ix1 May 3 16:46:26 radvd 27820 can't join ipv6-allrouters on ix1 May 3 16:46:14 radvd 27820 can't join ipv6-allrouters on ix1 May 3 16:45:58 radvd 27820 can't join ipv6-allrouters on ix1 May 3 16:45:42 radvd 27820 can't join ipv6-allrouters on ix1
So, not yet.
Waiting for https://github.com/pfsense/FreeBSD-ports/pull/773 to be merged. I have no problems with patched binary.
-
@kiokoman It appears you are still using the patched binary. I had my main pfSense running for 35+ days with the patch, so I am reasonably certain that it is a good work around for the issues in stable-12.
-
@rschell
Yep, it can be true, I have found it right after installing STABLE. I looked for a error messages, did not found it and didpkg install -f -y radvd
It downgraded my version back to that one which is in the pfSense repository and sorry guys but it failed the same way as before. I just forgot that another one error message
IPv6 forwarding on interface seems to be disabled, but continuing anyway
got its own fix and I thought that the current version was updated so sorry guys for false hope!
-
ah ok, then the upgrade didn't remove the patched radvd, well no problem it works, I'm happy
-
I'm running the latest development release:
2.5.0-DEVELOPMENT (amd64)
built on Wed Jun 03 13:09:01 EDT 2020
FreeBSD 12.1-STABLEThis morning, I noticed the routing log filled with this message:
Jun 7 10:01:16 radvd 76671 can't join ipv6-allrouters on hn1
IPv6 was not working. I rebooted and the system is now working.
-
@bimmerdriver Still waiting for workaround ports PR #773 to be accepted and applied.
-
I also notice many messages like "Jun 11 11:02:57 pfSense radvd[84278]: can't join ipv6-allrouters on ix1.116"
However I would like to add:
- after installing the 3 june package a few days ago ..... they were gone
- today I installed the 10 june package and they where back
- and I did have an IPV6 routing problem ...
- than I did a reboot and ... the messages where gone
- and my IPV6 routing issue seems to be gone
Note that this is not at all an real test, just a quick obeservation.
Louis
-
The routing log was full of the messages this morning, so the problem is still present.
-
@bimmerdriver
As @rschell said https://github.com/pfsense/FreeBSD-ports/pull/773 still need to be applied, but it's not accepted and applied yet. -
I updated Redmine issue #9577 with a revised RADVD install package for those continuing to experience problems. I left instructions there how to install.
I have had installs run for more than 35 days with the revised RADVD only to stop it to install new 2.5 updates..
-
@w0w I tried to apply the patch to 2.5.0-development using this commit ID: https://github.com/pfsense/FreeBSD-ports/pull/773/commits/387a6ef1e4fd514596502e162878f64f0002170c, but it could not be applied. Am I doing something wrong?