Date: Tue, 12 Jun 2012 15:15:42 +0200 From: Damien Fleuriot <ml@my.gd> To: Pete French <petefrench@ingresso.co.uk> Cc: freebsd-stable@freebsd.org Subject: Re: IPv6 and CARP crashes boxes Message-ID: <4FD740FE.9000709@my.gd> In-Reply-To: <E1SeQkz-00082O-Vn@dilbert.ingresso.co.uk> References: <E1SeQWZ-0007x5-Uu@dilbert.ingresso.co.uk> <4FD73C7B.4090309@my.gd> <E1SeQkz-00082O-Vn@dilbert.ingresso.co.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
On 6/12/12 3:03 PM, Pete French wrote: >> Thanks for the feedback Pete, what are you running ? >> >> We're on 8-STABLE here. > > Yup, same here - aactually running a very recent STABLE now, > but for most of this year it's been on one from January. The > one running on the firewalls is from May 7th, and that works > beautifully. > Hmmm you might want to update again then, 2 SAs published late in may: http://security.freebsd.org/advisories/FreeBSD-SA-12:01.openssl.asc http://security.freebsd.org/advisories/FreeBSD-SA-12:02.crypt.asc >> I've got some spare time on my hands actually, I'm gonna try some more >> today, both on an ipv6-only carp, then on a v4+v6. > > Ok, let us know how you get on - the config here is very simple, reproduced > below for your viewing pleasure ;) This is from the 'active' firewall: > > ifconfig_em0="inet 10.32.10.1/16" > ipv6_ifconfig_em0="2a02:1658:1:2:a32f::1/64" > ifconfig_em1="inet 178.250.73.196/27" > ipv6_ifconfig_em1="2a02:1658:1:1::1:2/64" > > ifconfig_carp0="vhid 10 pass xxxxyyyy 10.32.10.6/16" > ifconfig_carp1="vhid 20 pass xxxxyyyy 178.250.73.198/27" > ipv6_ifconfig_carp2="vhid 30 pass xxxxyyyy 2a02:1658:1:2:a32f::6/64" > ipv6_ifconfig_carp3="vhid 40 pass xxxxyyyy 2a02:1658:1:1::1:1/64" > > -pete. Thanks, will keep the thread updated ;)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4FD740FE.9000709>