ipv6 broken: radvd: can't join ipv6-allrouters on <interface>

kiokoman

welcome to the party !

Irata

@maverick_slo made any changes recently, or added any new IPv6 devices?

maverick_slo

No changes no new devices.
I just came home from vacation...

kiokoman

i put here a workaround that seems to work for me

[2.5.0-DEVELOPMENT][root@pfSense.localdomain]/root: crontab -l
@hourly killall radvd && sleep 5 && /usr/local/sbin/radvd -p /var/run/radvd.pid -C /var/etc/radvd.conf -m syslog

Irata

On the recent snapshot (2.5.0.a.20190728.0536) I now also get the following repeated in the routing system log:


Jul 30 16:50:49	radvd	72128	IPv6 forwarding on interface seems to be disabled, but continuing anyway
Jul 30 16:50:42	radvd	72128	IPv6 forwarding on interface seems to be disabled, but continuing anyway
Jul 30 16:50:41	radvd	72128	IPv6 forwarding on interface seems to be disabled, but continuing anyway
Jul 30 16:50:34	radvd	72128	IPv6 forwarding on interface seems to be disabled, but continuing anyway
Jul 30 16:50:29	radvd	72128	IPv6 forwarding on interface seems to be disabled, but continuing anyway
Jul 30 16:50:24	radvd	72128	IPv6 forwarding on interface seems to be disabled, but continuing anyway
Jul 30 16:50:21	radvd	72128	IPv6 forwarding on interface seems to be disabled, but continuing anyway

maverick_slo

Yup same here, 2.5.0 is getting worse by every snapshot
Ah well probably Ill go back to 2.4.4...

Irata

Looks like it is failing within this code in device-linux.c in radvd:

int check_ip6_forwarding(void)
{
	int value;
	FILE *fp = NULL;

	fp = fopen(PROC_SYS_IP6_FORWARDING, "r");
.
.
.

Which I think is checking for /proc/sys./... but there is no /proc/sys/... directory. There is also alternative code called in device-bsd44.c. So I'm wondering if radvd in 2.5.0 is being built for the wrong platform, or it's expecting a file that is now removed. But I admit this is a wild guess.

strangegopher

Netgate can't possibly ship 2.5.0 with this bug that essentially disables ipv6 support in pfsense. Still no dev replies or acknowledgment of Bug #9577. Hope people that are paying for netgate products or support ask for this to be fixed.

kiokoman

Actually it is working for me, it's only a message log spamming out, they have time to correct it before the official release

Irata

It's "working" here too with a radvd restart every 6 hours. I do a radvd service restart via Cron instead of a kill, which seemed cleaner but my approach causes IPv6 sessions to be dropped when the prefix is unadvertised briefly.

Looking at the source code, that spam logging should not even be executing on a freebsd platform. So maybe it's a hint of what's broken.

maverick_slo

After 6 days my IPv6 died as well.
Static assigned IPv6 works just fine, slaac and RA doesn`t. Client does not get IPv6 address at all.

LOG:
Aug 6 09:48:50 radvd 35714 can't join ipv6-allrouters on hn0.9
Aug 6 09:48:50 radvd 35714 IPv6 forwarding on interface seems to be disabled, but continuing anyway
Aug 6 09:48:10 radvd 35714 can't join ipv6-allrouters on hn0.7
Aug 6 09:48:10 radvd 35714 IPv6 forwarding on interface seems to be disabled, but continuing anyway
Aug 6 09:47:15 radvd 35714 can't join ipv6-allrouters on hn0.10
Aug 6 09:47:15 radvd 35714 IPv6 forwarding on interface seems to be disabled, but continuing anyway
Aug 6 09:44:37 radvd 35714 can't join ipv6-allrouters on hn0.10
Aug 6 09:44:37 radvd 35714 IPv6 forwarding on interface seems to be disabled, but continuing anyway
Aug 6 09:43:06 radvd 35714 can't join ipv6-allrouters on hn0.7
Aug 6 09:43:06 radvd 35714 IPv6 forwarding on interface seems to be disabled, but continuing anyway
Aug 6 09:42:05 radvd 35714 can't join ipv6-allrouters on hn0.8
Aug 6 09:42:05 radvd 35714 IPv6 forwarding on interface seems to be disabled, but continuing anyway
Aug 6 09:41:55 radvd 35714 can't join ipv6-allrouters on hn0.9
Aug 6 09:41:55 radvd 35714 IPv6 forwarding on interface seems to be disabled, but continuing anyway
Aug 6 09:41:46 radvd 35714 can't join ipv6-allrouters on hn0.10

Ah well....

yon 0

me too . how fix it?

alt text

kiokoman

for the moment afaik only this -> https://forum.netgate.com/post/851662

yon 0

@kiokoman said in ipv6 broken: radvd: can't join ipv6-allrouters on <interface>:

i put here a workaround that seems to work for me

[2.5.0-DEVELOPMENT][root@pfSense.localdomain]/root: crontab -l
@hourly killall radvd && sleep 5 && /usr/local/sbin/radvd -p /var/run/radvd.pid -C /var/etc/radvd.conf -m syslog

What is this principle?

kiokoman

restart Router Advertisement Daemon every hour, to me the problem arise every some hours so restarting it mitigate the problem

yon 0

@kiokoman

I tried to restart the service yesterday and did not solve the problem. Restart the system to work.I have problems after about 20 hours of running.

kiokoman

well i dont know how to solve the problem, you have 2 options, wait for the staff to solve it or go back to 2.4.4

Irata

@yon-0 a restart using the GUI doesn't work, you need to stop the service, wait 5 seconds and start the service.

Or script it using cron, as suggested.

yon 0

@Irata said in ipv6 broken: radvd: can't join ipv6-allrouters on <interface>:

@yon-0 a restart using the GUI doesn't work, you need to stop the service, wait 5 seconds and start the service.

Or script it using cron, as suggested.

ye, this is work. but we still need waiting for admin fix it.

strangegopher

Just tired enabling RA again and still having issues with log spam and dropouts.