Project

General

Profile

Feature #11103

radvd: use virtual link local IP as source address in HA setups

Added by Lorenz Schori 5 months ago. Updated 26 days ago.

Status:
Feedback
Priority:
Normal
Category:
IPv6 Router Advertisements (RADVD)
Target version:
Start date:
11/25/2020
Due date:
% Done:

0%

Estimated time:
Release Notes:
Default

Description

If radvd is configured with RA interface set to a virtual link local IP, then add it to AdvRASrcAddress in radvd.conf. This ensures that the virtual IP is advertised as the gateway address to clients.

More background:

Associated revisions

Revision 8d4adafb (diff)
Added by znerol 5 months ago

Add AdvRASrcAddress to radvd.conf if linklocal vip is selected, refs: #11103

Revision ad27159f (diff)
Added by znerol about 2 months ago

Do not deprecate prefix if AdvRASrcAddress is specified, refs: #11103

History

#1 Updated by Lorenz Schori 5 months ago

Filed PR: https://github.com/pfsense/pfsense/pull/4487

Instructions for testing this feature:

  • Setup HA cluster with primary and fallback
  • Setup a IPv6 link-local VIP on the LAN interface, e.g.: fe80::1:1
  • Configure the link-local VIP as the RA Interface on primary and fallback hosts

Observe that:

  • radvd.conf is present with a configuration section for the LAN interface on both machines (primary and fallback)
  • radvd.conf includes an AdvRASrcAddress section
  • RA packets are sent by the primary host with the VIP as source address, no RA packets are sent by the fallback host.
  • RA packets are sent by the fallback host with the VIP as source address as soon as the VIP switches over to the fallback host. No RA packets are sent by the primary host.
  • Default route on client machines stays the same regardless whether the VIP is currently on primary or fallback host.

#2 Updated by Jim Pingle 4 months ago

  • Status changed from New to Pull Request Review
  • Target version set to CE-Next

#3 Updated by Renato Botelho about 2 months ago

  • Status changed from Pull Request Review to Feedback
  • Assignee set to Renato Botelho

PR has been merged. Thanks!

#4 Updated by Lorenz Schori about 2 months ago

Thanks for merging. I just opened a PR for a small followup:

https://github.com/pfsense/pfsense/pull/4502

Sorry that I did not notice that earlier.

#5 Updated by Renato Botelho 26 days ago

MErged. Thanks!

Also available in: Atom PDF