Date: Fri, 28 Jun 2013 18:56:30 GMT From: Bernd Walter <ticso@cicely.de> To: freebsd-gnats-submit@FreeBSD.org Subject: kern/180067: Multicast support within jails Message-ID: <201306281856.r5SIuU0u098409@oldred.freebsd.org> Resent-Message-ID: <201306281900.r5SJ008L091561@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 180067
>Category: kern
>Synopsis: Multicast support within jails
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: change-request
>Submitter-Id: current-users
>Arrival-Date: Fri Jun 28 19:00:00 UTC 2013
>Closed-Date:
>Last-Modified:
>Originator: Bernd Walter
>Release: 9.1-STABLE
>Organization:
>Environment:
>Description:
To have multicast support in Jails it is required to allow group addresses to be configured for the jail.
In reality this is impossible as multicast groups are not always a local decision.
It also disallows joining the same multicast group within multiple jails.
The tiny patch allows IPv6 multicast adresses to be used within jails without special configuration.
It is used in production since more than one year, but considered more as an example than a complete patch.
A similar check should also be done for IPv4 and maybe placed under a sysctl or jail option which is disabled by default.
This change was worked out together with Aron Schlesinger <as@paefchen.net>.
>How-To-Repeat:
>Fix:
Index: kern/kern_jail.c
===================================================================
--- kern/kern_jail.c (revision 251406)
+++ kern/kern_jail.c (working copy)
@@ -3282,6 +3282,9 @@
{
int i, a, z, d;
+ if (IN6_IS_ADDR_MULTICAST(ia6))
+ return (0);
+
/*
* Check the primary IP.
*/
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201306281856.r5SIuU0u098409>