ULA routing broke after 2.7.2 update

the other

Hello team!
Thanx a lot for getting the patch done and indeed, here too, it works and my ULA problem is gone.
So you got me my xmas present even before xmas, truly thankful and best wishes to everyone out there!!! Great and quick work!! :)

Bob.Dig

@gwabber Maybe this patch has a problem and someone else can verify this:
Today I tried to add IPv6 to another interface via Track Interface, no matter what I did, the interface didn't got an IPv6-address. I then disabled the auto-patching, rebooted and there was the IPv6-address. I then re-enabled auto-patching and everything still works as expected after another reboot.

gwabber

@Bob-Dig I looked into my firewall and I replicated your issue, so you are not the only one! I guess it is a bigger issue.

Bob.Dig

@gwabber Thanks. So I let @marcosm know, if he isn't already aware of it.

the other

@Bob-Dig Hey there, same here: had v6 on 3 out of 9 (v)Interfaces running. Read your post and tried adding another one.
Set everything under Interfaces exactly as the others (track Interface > WAN), picked a Subnet prefix ID, picked a fitting ULA prefix etc...

first: interface does not get an GUA IPv6, so yeah, same here
second: other interface's GUA v6 was gone, took around 5 minutes til they were back...
third: in that time no DNS via unbound, ping with IP to 8.8.8.8 okay, ping to google.com...not okay. Came back eventually.

So after 15 minutes an 2-3 try outs: everything working except that "new" v6 interface, which does not get GUA or ULA. Unbound has to be started manually again.
Even disabling and enabling the interface again did not get a v6...

marcosm

The original issue/patch does not affect what address is added to the interface. If the interface that is set to track does not get an IPv6 address, that is a separate issue that would need its own redmine report (with exact steps to reproduce). If you reproduce the issue, does Status > Interfaces show the IPv6 address?

gwabber

@marcosm thanks for your reply!

Just checked it. The statuspage also doesn't show the IP address.

Bob.Dig

@marcosm said in ULA routing broke after 2.7.2 update:

The original issue/patch does not affect what address is added to the interface. If the interface that is set to track does not get an IPv6 address, that is a separate issue that would need its own redmine report (with exact steps to reproduce). If you reproduce the issue, does Status > Interfaces show the IPv6 address?

This patch is the reason that one can not set another interface to Track Interface. Or to be more precise, that interface will not get GUA-IPv6. Disabling this patch will fix this. So I don't think that there should be another redmine?

I have uninstalled the patch and removed any ULAs (and VIPs) I had, so I am not able to do much more testing on this.

gwabber

@Bob-Dig @marcosm It is indeed typical the problems started with the fix. I have not enough experience with pfsense or BSD to know why this occurs.

marcosm

Disabling "Auto Apply" for the patch and rebooting is not a good test since that option does not affect reboots and it may have worked after the reboot because of something unrelated. A more proper test could be to reapply interface settings before and after the patch to see if there's any difference with the IPv6 addresses.

gwabber

@marcosm indeed... without the reboot, my interface still doesnt get an IPv6 address on " track"