Feature #11103: Use virtual link local IP address as RA source address for HA environments - pfSense - pfSense bugtracker

Custom queries

2.8.1 - Resolved/Closed
2.9.0 - Resolved/Closed
26.03 Plus - All Closed Issues
26.03 Target - All Closed Issues
26.03.1 Plus - All Closed Issues
26.03.1 Target - All Closed Issues
26.07 Plus - All Closed Issues
26.07 Target - All Closed Issues
26.10 Plus - All Closed Issues
26.10 Plus - All Open Issues
26.10 Plus - Feedback Issues
26.10 Plus - Needs Attention/Work
26.10 Plus - New/Confirmed/In Progress Issues
26.10 Plus - Pull Request Review
26.10 Plus - Waiting on Merge
26.10 Target - All Closed Issues
26.10 Target - All Open Issues
All Open Issues assigned to Me
All Open Pull Requests
Any Target - All Open Regressions
Any Target - Feedback Issues
CE-Next - All Closed Issues (Move to specific target)
CE-Next - All Open Issues
CE-Next - Feedback (Likely needs target changed)
New Issues by Category - Future Target
New Issues by Category - No Target
New Issues by Category - No Target+Future
No Target - All Open Issues (Base Only)
No Target - New Issues (Base Only)
No Target - New Issues (Base and Packages)
Plus-next Feedback/Closed (likely needs target changed)
Release Notes - CE Target Version (DO NOT EDIT)
Release Notes - Plus Target Version (DO NOT EDIT)
Release Notes - Target Version (DO NOT EDIT)

Actions

Copy link

Feature #11103

closed

ZZ RB

Use virtual link local IP address as RA source address for HA environments

Feature #11103: Use virtual link local IP address as RA source address for HA environments

Added by znerol znerol almost 6 years ago. Updated over 5 years ago.

Status:

Resolved

Priority:

Normal

Assignee:

Renato Botelho

Category:

IPv6 Router Advertisements (radvd/rtsold)

Target version:

2.5.2

Start date:

11/25/2020

Due date:

% Done:

Estimated time:

Plus Target Version:

21.05

Release Notes:

Default

Description

If radvd is configured with RA interface set to a virtual link local IP, then add it to AdvRASrcAddress in radvd.conf. This ensures that the virtual IP is advertised as the gateway address to clients.

More background:

https://fy.blackhats.net.au/blog/html/2018/11/01/high_available_radvd_on_linux.html
https://github.com/reubenhwk/radvd/issues/45

Related issues 1 (0 open — 1 closed)

Related to Regression #12582: RADVD can be started on both HA nodes when configured with an IPv6 link-local address

Resolved

Viktor Gurov

Actions

Issue # Delay: days Cancel Multiple values allowed (comma separated).

History
Notes
Property changes

ZZ Updated by znerol znerol almost 6 years ago Actions
Copy link
#1

Filed PR: https://github.com/pfsense/pfsense/pull/4487

Instructions for testing this feature:

Setup HA cluster with primary and fallback
Setup a IPv6 link-local VIP on the LAN interface, e.g.: fe80::1:1
Configure the link-local VIP as the RA Interface on primary and fallback hosts

Observe that:

radvd.conf is present with a configuration section for the LAN interface on both machines (primary and fallback)
radvd.conf includes an AdvRASrcAddress section
RA packets are sent by the primary host with the VIP as source address, no RA packets are sent by the fallback host.
RA packets are sent by the fallback host with the VIP as source address as soon as the VIP switches over to the fallback host. No RA packets are sent by the primary host.
Default route on client machines stays the same regardless whether the VIP is currently on primary or fallback host.

JP Updated by Jim Pingle almost 6 years ago Actions
Copy link
#2

Status changed from New to Pull Request Review
Target version set to CE-Next

RB Updated by Renato Botelho over 5 years ago Actions
Copy link
#3

Status changed from Pull Request Review to Feedback
Assignee set to Renato Botelho

PR has been merged. Thanks!

ZZ Updated by znerol znerol over 5 years ago Actions
Copy link
#4

Thanks for merging. I just opened a PR for a small followup:

https://github.com/pfsense/pfsense/pull/4502

Sorry that I did not notice that earlier.

RB Updated by Renato Botelho over 5 years ago Actions
Copy link
#5

MErged. Thanks!

ZZ Updated by znerol znerol over 5 years ago Actions
Copy link
#6

Found another thing I've missed before:
https://github.com/pfsense/pfsense/pull/4515

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
#7

Status changed from Feedback to Pull Request Review
Target version changed from CE-Next to 2.6.0

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
#8

Plus Target Version set to 21.05

Updated by Anonymous over 5 years ago Actions
Copy link
#9

Status changed from Pull Request Review to Feedback

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
#10

Subject changed from radvd: use virtual link local IP as source address in HA setups to Use virtual link local IP address as RA source address for HA environments

Updating subject for release notes.

VG Updated by Viktor Gurov over 5 years ago Actions
Copy link
#11

Status changed from Feedback to Resolved

works as expected on 21.05.r.20210526.1807

`AdvRASrcAddress` in `/var/etc/radvd.conf`:

# Automatically Generated, do not edit
# Generated for DHCPv6 Server lan
interface vtnet0 {
    AdvSendAdvert on;
    AdvRASrcAddress {
        fe80:88::7272;
    };
    MinRtrAdvInterval 5;
    MaxRtrAdvInterval 20;
    AdvDefaultLifetime 60;
    AdvLinkMTU 1500;
    AdvDefaultPreference medium;
    AdvManagedFlag on;
    AdvOtherConfigFlag on;
    prefix fc00:88::/64 {
        DeprecatePrefix off;
        AdvOnLink on;
        AdvAutonomous on;
        AdvValidLifetime 86400;
        AdvPreferredLifetime 14400;
    };
    route ::/0 {
        AdvRoutePreference medium;
        RemoveRoute off;
    };
    RDNSS fc00:88::72 {
        AdvRDNSSLifetime 60;
    };
    DNSSL home.arpa  { };
};

it's better to hide non-linklocal VIPs from the dropdown menu, but this is not critical

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
#12

Target version changed from 2.6.0 to 2.5.2

VG Updated by Viktor Gurov almost 5 years ago Actions
Copy link
#13

Related to Regression #12582: RADVD can be started on both HA nodes when configured with an IPv6 link-local address added

Actions

Copy link

Also available in: Atom

Project

General

Profile

pfSense

Custom queries

Feature #11103

Use virtual link local IP address as RA source address for HA environments

ZZ Updated by znerol znerol almost 6 years ago Actions
Copy link
#1

JP Updated by Jim Pingle almost 6 years ago Actions
Copy link
#2

RB Updated by Renato Botelho over 5 years ago Actions
Copy link
#3

ZZ Updated by znerol znerol over 5 years ago Actions
Copy link
#4

RB Updated by Renato Botelho over 5 years ago Actions
Copy link
#5

ZZ Updated by znerol znerol over 5 years ago Actions
Copy link
#6

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
#7

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
#8

Updated by Anonymous over 5 years ago Actions
Copy link
#9

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
#10

VG Updated by Viktor Gurov over 5 years ago Actions
Copy link
#11

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
#12

VG Updated by Viktor Gurov almost 5 years ago Actions
Copy link
#13

Project

General

Profile

pfSense

Custom queries

Feature #11103

Use virtual link local IP address as RA source address for HA environments

ZZ Updated by znerol znerol almost 6 years ago ActionsCopy link #1

JP Updated by Jim Pingle almost 6 years ago ActionsCopy link #2

RB Updated by Renato Botelho over 5 years ago ActionsCopy link #3

ZZ Updated by znerol znerol over 5 years ago ActionsCopy link #4

RB Updated by Renato Botelho over 5 years ago ActionsCopy link #5

ZZ Updated by znerol znerol over 5 years ago ActionsCopy link #6

JP Updated by Jim Pingle over 5 years ago ActionsCopy link #7

JP Updated by Jim Pingle over 5 years ago ActionsCopy link #8

Updated by Anonymous over 5 years ago ActionsCopy link #9

JP Updated by Jim Pingle over 5 years ago ActionsCopy link #10

VG Updated by Viktor Gurov over 5 years ago ActionsCopy link #11

JP Updated by Jim Pingle over 5 years ago ActionsCopy link #12

VG Updated by Viktor Gurov almost 5 years ago ActionsCopy link #13

ZZ Updated by znerol znerol almost 6 years ago Actions
Copy link
#1

JP Updated by Jim Pingle almost 6 years ago Actions
Copy link
#2

RB Updated by Renato Botelho over 5 years ago Actions
Copy link
#3

ZZ Updated by znerol znerol over 5 years ago Actions
Copy link
#4

RB Updated by Renato Botelho over 5 years ago Actions
Copy link
#5

ZZ Updated by znerol znerol over 5 years ago Actions
Copy link
#6

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
#7

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
#8

Updated by Anonymous over 5 years ago Actions
Copy link
#9

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
#10

VG Updated by Viktor Gurov over 5 years ago Actions
Copy link
#11

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
#12

VG Updated by Viktor Gurov almost 5 years ago Actions
Copy link
#13