opnsense / core

OPNsense GUI, API and systems backend
https://opnsense.org/
BSD 2-Clause "Simplified" License
3.26k stars 725 forks source link

IPv6 not updated on rtadvd when PPPoE IP/6rd IPv6 update #5198

Closed neelchauhan closed 2 years ago

neelchauhan commented 3 years ago

Describe the bug

I have an OPNsense 21.7 box on CenturyLink Fiber, and whenever the PPPoE session changes the IPv4 (which for some reason happens often), and therefore the IPv6 which is via 6rd, rtadvd continues to broadcast the old prefix unless i restart rtadvd or reboot the router.

To Reproduce

  1. Setup PPPoE/6rd.
  2. Wait for the IPv4 to change
  3. IPv6 router advertisements advertise the old IPv4, unless you restart rtadvd

Expected behavior

A clear and concise description of what you expected to happen.

Describe alternatives you considered

A clear and concise description of any alternative solutions or workaround you considered.

Screenshots

N/A (for now)

Relevant log files

N/A (for now)

Additional context

IPv6 is via 6rd - no native IPv6.

Environment

Software version used and hardware type if relevant, e.g.:

OPNsense 21.7 (amd64, OpenSSL). Intel Core i3-10100 HP S01-pF1013w Intel i350-T4 + Realtek Onboard for PPPoE (Yes, I know Realtek NICs are "bad")

fichtner commented 3 years ago

Hi @neelchauhan,

I don't have any experience with 6RD on PPPoE so I need more help to get the full picture.

What are your PPPoE settings? Specifically are you using the "Use IPv4 connectivity" advanced option? What is the contents of /var/etc/radvd.conf before and after manual fix?

Also, 21.7.1 has a fix for shifting prefix on PPPoE in general so it would be good to know that this is not what you're looking for.

Cheers, Franco

fichtner commented 3 years ago

@neelchauhan ping :)

hemirunner426 commented 2 years ago

I’m seeing the same behavior in 21.7.3. I do have prefer ipv4 setting checked.

I’ll have to get a dump of radvd.conf and post it here. Happy to provide any other info.

hemirunner426 commented 2 years ago

Here is my radvd.conf

interface igb1 {
        AdvSendAdvert on;
        MinRtrAdvInterval 200;
        MaxRtrAdvInterval 600;
        AdvLinkMTU 1280;
        AdvDefaultPreference medium;
        AdvManagedFlag on;
        AdvOtherConfigFlag on;
        prefix 2602:ae:11a8:ca00::/64 {
                DeprecatePrefix on;
                AdvOnLink on;
                AdvAutonomous on;
        };
        RDNSS 2602:ae:11a8:ca00::1 {
        };
        DNSSL anderson.lan guest.anderson.lan iot.anderson.lan vpn.anderson.lan contoso.local {
        };
};

For now, I've turned off the prefer IPv4 setting to see if this changes any behavior.

hemirunner426 commented 2 years ago

Grabbed a new IPv4 address today and the radvd service required a restart to pick up the change.

neelchauhan commented 2 years ago

For me, I'm now primarily using Hurricane Electric tunnels since:

The only thing I did is blackhole Netflix and CenturyLink's website from the tunnel, so I'm not blocked.

Google Fiber/Webpass in my previous place, "dynamic" IPs were generally very stable. CenturyLink Fiber, "dynamic" is truly dynamic.

hemirunner426 commented 2 years ago

For me, I'm now primarily using Hurricane Electric tunnels since:

  • HE 6in4 has better performance than CenturyLink 6rd, despite having to travel AS209->AS3356->AS6939
  • HE tunnels have static IPv6 prefixes, whereas a router reboot can change CenturyLink's IPv6 prefixes (nor surprising)

The only thing I did is blackhole Netflix and CenturyLink's website from the tunnel, so I'm not blocked.

Google Fiber/Webpass in my previous place, "dynamic" IPs were generally very stable. CenturyLink Fiber, "dynamic" is truly dynamic.

This is not a bad idea. I wouldn't of thought 6in4 would net better performance.

OPNsense-bot commented 2 years ago

This issue has been automatically timed-out (after 180 days of inactivity).

For more information about the policies for this repository, please read https://github.com/opnsense/core/blob/master/CONTRIBUTING.md for further details.

If someone wants to step up and work on this issue, just let us know, so we can reopen the issue and assign an owner to it.