Feature #2587

Add IPv6 Privacy settings.

Added by Robert Guerra 9 months ago. Updated 4 months ago.

Status:Closed Start date:08/10/2012
Priority:Normal Due date:
Assignee:Renato Botelho % Done:

100%
Category:DHCP6
Target version:2.1
Affected version:2.1-IPv6 Affected Architecture:

Description

IPv6 Privacy addresses are not enabled by default.

Settings seem to be missing. Suggest they be added and default be set to - on - as per the blog post @ http://ipv6int.net/systems/freebsd-ipv6.html

Privacy Extensions

Activate Generation - net.inet6.ip6.use_tempaddr=1
Prefer privacy addresses and use them over the normal addresses - net.inet6.ip6.prefer_tempaddr=1

History

#1 Updated by Renato Botelho 4 months ago

  • Status changed from New to Feedback
  • Assignee set to Renato Botelho
  • % Done changed from 0 to 100

#2 Updated by Cyrill B 4 months ago

There was a very short discussion about the IPv6 privacy extensions in the forum [1], with the key-point being that it is for clients and not routers. So 99.9% of the users won't need that option. Adding more and more options with their default values to the "System Tunables" just makes it harder to spot the actually relevant options and may cause more harm than help.

Maybe someone else wants to comment on this as well, but for the previously mentioned reasons I wouldn't add those options by default.

[1] http://forum.pfsense.org/index.php/topic,52462.0.html

#3 Updated by Chris Buechler 4 months ago

  • Status changed from Feedback to Closed

yeah this really shouldn't have been left here, though it can be applicable in appliance usage scenarios. In general I agree with Cyrill, but it's done already.

Also available in: Atom PDF