ULA routing stops when trackinterface is down

NightlyShark

@gwabber So, it was the addresses themselves that weren't reachable for sure? Or a DNS name? Just checking...

gwabber

@NightlyShark the addresses themselves unfortunately... thanks for your help so far!

Other weird thing; I just disabled the default WAN ipv6 gateway just for shits and giggles. Now the ULA's were still reachable....

NightlyShark

@gwabber It's one of those "did you turn it on and off" things, then...

gwabber

@NightlyShark I really don't know anymore . Only difference with pulling the plug on my modem was that the GUA's stayed active, only mu IPv6 internet was down. When I pulled the plug on my modem, the GUA's dissapeared. My girlfriend is using Netflix right nog, so I can't pull the plug on my modem. Tomorrow I will try that!

The show continues...

the other

hey..pantpant...there...jk ;)

Just went in the cellar, pulled the plug (LAN cable between fritzbox (internetrouter) and pfsense's WAN.
Then run back upstairs. Rebootet pfsense. Rebooted pc.
Waited.
Tried ip a on pc > shows no GUA (of course) but its ULA (static mapping in pfsense).
Logged into pfsense (IPv4), tried ifonfig > no GUA, but all ULAs still there. ok
Then went to Status > Interfaces: same, no GUA (I get dynmaic prefixes from my ISP here as well, a nice /56) but ULAs as set under RA settings. ok.

then tried to ping my v6 devices (some of them, same and different vlans). reached all of them with their ULA.ok.

then tried to reach them with firefox, entering my https://ULAs. Reached all of them.ok.

So: after pulling the switch, rebooting, confirming that no GUAs are given out to anything in pfsense and pfsense itself...routing ULAs still works as if I never even pulled that LAN cable (and DID NOT RUN THOSE STAIRS, dammit). ;)

Then went downstairs again, just put LAN cable between fritzbox and pfsense back in, crawled upstairs again...tadaa: no reboot, still getting my GUA now for all interfaces with active v6 and all devices get their GUA as well (as another ip a showed).

I tried all that with their ULA, not DNS name...

At least I got my pe today.

Bob.Dig

Maybe the problem is related to that patch? Now who has that patch and who doesn't.

the other

@Bob-Dig hey there,
indeed, after the 2.72 "bug" that broke ULA routing I downloaded the patch (assuming that's the one you meant) and applied it.
It worked and I just looked: must have reverted it sometime ago, it is not "active" in my system/patches view...
But if I remember correctly: wasn't the problem to that patch, that even with v6 online and working one could not route ULAs only? Aliases and VIPs were somehow not working (which did prior to 2.7.2). But it's Monday and late and I might recall that incorrectly. :)

Bob.Dig

@the-other Hi, the problem with that patch is that you can not get IPv6 working on another interface after it is applied. Now has @gwabber this patch too? If yes, it is not related to that patch.

the other

@Bob-Dig yes, I recall that there was a problem with the patch now...I read that and tried as well with no positive result...couldn't apply v6 to another interface as well (one that was pure v4 before). Maybe that's why I reverted it.
And funfact: the user @gwabber started that post back then as well (about the 2.7.2 ULA problem)...just read that one. :)

Here: 2.7.2 broke ULA routing thread

the other

@gwabber yes, when I pulled the plug (before rebooting) GUAs stayed active (shown with ifconfig and Status/Interfaces) as well...same when I just deactivted v6 on my Fritzbox...but also: in all scenarios ULA routing worked.
So: do you have said patch applied on your system?

gwabber

@the-other thanks for trying the options! I have the said patch active on my system.

Weird that when you pull the plug, your GUA's stay active. Mine disappear completely. What could be diffrent in the default config...

Tomorrow is my day off, I'm gonna try the different scenario's!

gwabber

@gwabber allright. Girlfriend went to bed. I went behind my pc.

I set, for testpurposes, the gateway on "Disable Gateway Monitoring Action". I pulled the plug. My GUA's were gone again.

I visited one of my servers with the ULA. I could reach it... same for my pi and stuff. One weird thing. My pings to those servers became slower and timed out once in a while.... What that's about... I don't know.

So it works, like most of it, but not what it's supposed to be I think...

EDIT
never mind... it was a fluke. It broke down again. I don't get it anymore

EDIT2:
With the fake gateways it works! I still have the feeling that it should be easier then creating a fake gateway per LAN, but it works for now :)