From owner-freebsd-stable@FreeBSD.ORG Mon Oct 13 09:42:12 2014 Return-Path: Delivered-To: freebsd-stable@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B8DC82F8; Mon, 13 Oct 2014 09:42:12 +0000 (UTC) Received: from mx0.gentlemail.de (mx0.gentlemail.de [IPv6:2a00:e10:2800::a130]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 3E557AE1; Mon, 13 Oct 2014 09:42:12 +0000 (UTC) Received: from mh0.gentlemail.de (mh0.gentlemail.de [IPv6:2a00:e10:2800::a135]) by mx0.gentlemail.de (8.14.5/8.14.5) with ESMTP id s9D9gAhu042272; Mon, 13 Oct 2014 11:42:10 +0200 (CEST) (envelope-from h.schmalzbauer@omnilan.de) Received: from titan.inop.mo1.omnilan.net (titan.inop.mo1.omnilan.net [IPv6:2001:a60:f0bb:1::3:1]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mh0.gentlemail.de (Postfix) with ESMTPSA id A81DA3053; Mon, 13 Oct 2014 11:42:09 +0200 (CEST) Message-ID: <543B9E70.9060609@omnilan.de> Date: Mon, 13 Oct 2014 11:42:08 +0200 From: Harald Schmalzbauer Organization: OmniLAN User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; de-DE; rv:1.9.2.8) Gecko/20100906 Lightning/1.0b2 Thunderbird/3.1.2 MIME-Version: 1.0 To: "Alexander V. Chernikov" Subject: Re: Deleting IPv4 iface-routes from extra FIBs References: <53569ABA.60007@omnilan.de> <535771F3.4070007@freebsd.org> <543B8ED5.6040206@omnilan.de> <543B9075.2000102@FreeBSD.org> <543B9873.3040605@omnilan.de> <543B998D.2020003@FreeBSD.org> In-Reply-To: <543B998D.2020003@FreeBSD.org> X-Enigmail-Version: 1.1.2 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig81B20D416B47109DFDD66864" X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.7 (mx0.gentlemail.de [IPv6:2a00:e10:2800::a130]); Mon, 13 Oct 2014 11:42:10 +0200 (CEST) X-Milter: Spamilter (Reciever: mx0.gentlemail.de; Sender-ip: ; Sender-helo: mh0.gentlemail.de; ) Cc: "freebsd-net@freebsd.org" , Julian Elischer , FreeBSD X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Oct 2014 09:42:12 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig81B20D416B47109DFDD66864 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Bez=C3=BCglich Alexander V. Chernikov's Nachricht vom 13.10.2014 11:21 (localtime): > On 13.10.2014 13:16, Harald Schmalzbauer wrote: >> Bez=C3=BCglich Alexander V. Chernikov's Nachricht vom 13.10.2014 10:= 42 >> (localtime): >>> On 13.10.2014 12:35, Harald Schmalzbauer wrote: >>>> Bez=C3=BCglich Julian Elischer's Nachricht vom 23.04.2014 09:55 >>>> (localtime): >> ... >>>>> yes, we made two behaviours. >>>>> Add interface routes to all active FIBS or only add them to the fir= st >>>>> fib and let the user populate other fibs as needed. >>>>> It appears you want the second behaviour, so I suggest you use that= >>>>> option and set up all your routes manually. >>>> Hello, >>>> >>>> last time I had the iface-route problem, I just reverted r248895 (fo= r >>>> 9.3). There was inconsitent behaviour with v6 iface routes and >>>> net.add_addr_allfibs=3D0. >>>> Now I checked with 10.1 ans it seems net.add_addr_allfibs=3D0 doesn'= t >>>> work >>>> any more: >>>> netstat -f inet -nr >>>> Routing tables >>>> >>>> Internet: >>>> Destination Gateway Flags Netif Expire >>>> default 172.21.32.1 UGS egn >>>> 127.0.0.1 link#2 UH lo0 >>>> 172.21.32.0/19 link#1 U egn >>>> 172.21.35.1 link#1 UHS lo0 >>>> >>>> netstat -F 1 -f inet -nr >>>> Routing tables (fib: 1) >>>> >>>> Internet: >>>> Destination Gateway Flags Netif Expire >>>> 127.0.0.1 link#2 UH lo0 >>>> 172.21.32.0/19 link#1 U egn >>>> >>>> 'sysctl net.add_addr_allfibs' >>>> net.add_addr_allfibs: 0 >>> Are you sure net.add_addr_allfibs was applied before interface addres= s >>> added? >> Sorry, I messed it up. Forgot that on my production systems (where I >> tested), / is read-only with /etc as union-mount. >> Adding net.add_addr_allfibs=3D0 to the correct sysctl.conf made the in= et >> routing table stay empty. >> >> But unfortunately not the inet6 routing table :-( >> So I still need to delete iface routes for my jail setups, hence need = to >> revert r248895. > Hm. If the problem happens with inet6 routes only, why do you need to > revert r248895 ?=20 For consistency. Either I populate own iface-routes for both, inet and inet6, or I clean both. The latter is what my script has been doing for some time (I think I wrote it when I tested 9.1-RC), so for me it's much less effort to make my script working by reverting r248895 instead of adding another one which cares about inet (v4) only (for the moment). Probably net.add_addr_allfibs will also influence inet6 routing as well in the future, then I'll redo my rc.jails_fibprepare. Thanks, -Harry --------------enig81B20D416B47109DFDD66864 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (FreeBSD) iEYEARECAAYFAlQ7nnEACgkQLDqVQ9VXb8h86gCgr59GmiQsbjteXxN5zlvKL6cU CZsAoKEz0GhkZNIR5a5iqi1Q88+QwFPy =8eck -----END PGP SIGNATURE----- --------------enig81B20D416B47109DFDD66864--