ipv6 broken: radvd: can't join ipv6-allrouters on <interface>

Irata

@kiokoman the problem is within open source or kernel code, so who are "they" who will fix it?

w0w

If radvd 2.17_5 works well, then the issue is isolated to radvd or radvd patches, I think. Let me test it and we will know it soon, am I right/wrong.
The fact that there is no spam inspires me with hope.

kiokoman

sorry but if you check this
https://redmine.pfsense.org/issues/9577
you will see that we had 2.17 until 2019-07-22 with the same problem, it was updated to 2.18 at the end of july

@irata i don't think that netgate will release a product with a broken service, they will find a way, or they ask upstream or with a patch they made

w0w

@kiokoman
~~One thing that looks quite different for me is that radvd can't join routers right after start, not hours later as we have it now.~~

EDITED:
Oh yes, epic fail.

Irata

@kiokoman I agree, 2.5 will be left in beta until someone fixes it.

kiokoman

@rschell good work about that update on redmine
personally i had decided to wait for 2.5 to advance before trying to do anything as any patch that we come out today it will probably be lost resulting in a waste of time as it is a kernel problem and not a pfsense's fault

yon 0

Ipv6 problem also caused problems with FRR

ipv6 frr

w0w

@rschell
I see you have some progress on 12.1 builds, but you did not report back on redmine, is it working?

@w0w said in ipv6 broken: radvd: can't join ipv6-allrouters on <interface>:

@rschell
I see you have some progress on 12.1 builds, but you did not report back on redmine, is it working?

I have updated #9577, but for some reason the issue doesn't showup on the 2.5 issue list anymore. My version is running well and RADVD continues to work past 24 hours. The version is built on releng/12.1-RC2 with cherry-picked commits from 2.5 back to mid-February.

Once the pfSense is rebased on releng/12.1 or stable/12 and the message logging in RADVD is removed, these problems should be resolved.

@yon-0 said in ipv6 broken: radvd: can't join ipv6-allrouters on <interface>:

Ipv6 problem also caused problems with FRR

ipv6 frr

I haven't used FRR, so I can't speak to whether this will resolve those issues.

yon 0

@rschell

frr use with openvpn ipv6 has issue, add two ipv6 Neighbor openvpn will happen.

w0w

@jimp, any news? Did Netgate choose the FreeBSD version already? 12.1 is released a few days ago.

jimp

We are aware of the release (The FreeBSD Release Engineer is a Netgate employee :-)

12.1 is the current plan but there may be some parts picked back from stable. We'll see how things shake out.

w0w

@jimp Hmm, missed that reddit post, thanks a lot for the information!

@w0w said in ipv6 broken: radvd: can't join ipv6-allrouters on <interface>:

@jimp Hmm, missed that reddit post, thanks a lot for the information!

Any clue why #9577 is not showing up on the issue list anymore?

It might be better to split the redmine issue into two since there is spamming log issue and a FreeBSD 12.0 issue?

In net/radvd of Ports, remove logging of "IPv6 forwarding" in interface.c since "check_ip6_iface_forwarding" routine is stubbed out in "radvd/device-bsd44.c". This is unrelated to the FreeBSD 12 version
Upgrade network interfaces including netinet6/in6_mcast.c to code in RELENG/12.1. The mcast changes in 12.1 are extensive enough to both ipv4 and ipv6 to prohibit back-porting (I tried). This second issue resolves the "can't join ipv6-routers" logging and permits RADVD to function beyond 24 hours.

strangegopher

so to fix this we need to update to 12.1 and that has 25% perf hit. ooof

w0w

@strangegopher
Not so bad, I think. May be it affects only maximum throughput, who knows, no further information at the moment. Also as @jimp mentioned, they can apply some fixes by picking up some parts from stable.

@rschell
I've never checked was it listed before or not, but i don't see any changes made about that. May be it's because target version is missing?

havastamas

Any news about the problem/patch? I have this bug too, but too lazy/dont have time to go back to 2.4.4...

w0w

@havastamas
Waiting for the new builds based on 12.1 version of FreeBSD. I don't know if there any target date available.
Currently you can use workaround published by @kiokoman. I use it with cron package. Just running command every hour.
f0939bfb-bc3d-41b2-84cd-8685ca3d6ab1-изображение.png

killall radvd && sleep 5 && /usr/local/sbin/radvd -p /var/run/radvd.pid -C /var/etc/radvd.conf -m syslog

havastamas

@w0w This workaround is much better than reboot the firewall every 6 hours, to get ipv6 working. Thank you!

havastamas

@w0w btw what is the experience with this patch? My ISP disconnets every user after 7 days of uptime, then gives new ipv4/v6 adress (dual stack).

Do you think this workaround will work after 7 days of uptime?