https://redmine.pfsense.org/https://redmine.pfsense.org/favicon.ico?16780521162020-01-11T01:06:29ZpfSense bugtrackerpfSense - Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failurehttps://redmine.pfsense.org/issues/9998?journal_id=441552020-01-11T01:06:29ZViktor Gurov
<ul></ul><p>I found that the interface_track6_configure() function switches original link-local address to fe80::1:1<br />Why do we need to remove the original local-link address?<br />What if we add fe80::1:1 as an alias?</p> pfSense - Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failurehttps://redmine.pfsense.org/issues/9998?journal_id=441652020-01-11T15:59:47ZJim Pingle
<ul></ul><p>Once upon a time we started using fe80::1:1 as a predictable local address sort of like 192.168.1.1, but I don't think it ever really worked like we wanted. Browsers won't properly connect to scoped link local addresses, so most of the point of it is moot. We can probably remove any references to fe80::1:1 in the code at this point.</p> pfSense - Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failurehttps://redmine.pfsense.org/issues/9998?journal_id=441732020-01-13T11:22:39ZEric Veumeric.veum@gmail.com
<ul><li><strong>File</strong> <a href="/attachments/2905">etc_inc_interfaces_inc.patch</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/2905/etc_inc_interfaces_inc.patch">etc_inc_interfaces_inc.patch</a> added</li></ul><p>Patch file supplied to set fe80::1:1 as an IPv6 alias (and NOT remove the native IPv6 link-local), to clean up the interface_track6_configure() function.</p>
<p>That should be backward compatible with anything using fe80::1:1 as well. My unbound DNS starts up clean when the router reboots finally.</p>
<p>Could you review/merge the fix here, please Jim/Victor -- Thanks!</p> pfSense - Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failurehttps://redmine.pfsense.org/issues/9998?journal_id=441752020-01-13T11:25:41ZJim Pingle
<ul></ul><p>To review that properly for inclusion, it must be submitted as a pull request on Github: <a class="external" href="https://docs.netgate.com/pfsense/en/latest/development/submitting-a-pull-request-via-github.html">https://docs.netgate.com/pfsense/en/latest/development/submitting-a-pull-request-via-github.html</a></p> pfSense - Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failurehttps://redmine.pfsense.org/issues/9998?journal_id=442082020-01-14T12:19:21ZViktor Gurov
<ul></ul><p><a class="external" href="https://github.com/pfsense/pfsense/pull/4163">https://github.com/pfsense/pfsense/pull/4163</a></p> pfSense - Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failurehttps://redmine.pfsense.org/issues/9998?journal_id=442352020-01-17T06:03:22ZRenato Botelhorenato@netgate.com
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Feedback</i></li><li><strong>Assignee</strong> set to <i>Renato Botelho</i></li><li><strong>% Done</strong> changed from <i>0</i> to <i>100</i></li></ul><p>PR has been merged. Thanks</p> pfSense - Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failurehttps://redmine.pfsense.org/issues/9998?journal_id=442572020-01-18T13:13:10ZEric Veumeric.veum@gmail.com
<ul></ul><p>Feedback/QA - I've upgraded to 2.5.0-DEV current (2020-01-17 build), and everything is working as intended. Thanks.</p> pfSense - Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failurehttps://redmine.pfsense.org/issues/9998?journal_id=442582020-01-18T14:00:17ZJim Pingle
<ul><li><strong>Status</strong> changed from <i>Feedback</i> to <i>Resolved</i></li></ul> pfSense - Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failurehttps://redmine.pfsense.org/issues/9998?journal_id=443922020-01-31T14:44:07ZRick Coats
<ul></ul><p>Isn't it a potential issue when you use a fixed ip such as fe80::1:1 that another router or host has already claimed this ip?</p>
<p>Shouldn't it go through the neighbor discovery process for it's link local address?</p>
<p>I could envision 2 pfsense routers connected to the same interface, each have separate WAN interfaces and different Prefixes for redundant paths. If they are both trying to use fe80::1:1 it would fail I would assume.</p>
<p>This configuration is a perfectly valid configuration for ipv6.</p> pfSense - Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failurehttps://redmine.pfsense.org/issues/9998?journal_id=444182020-02-03T07:37:25ZJim Pingle
<ul><li><strong>Status</strong> changed from <i>Resolved</i> to <i>Feedback</i></li></ul><p>It might be, though with IPv6, DAD will typically kick in and one of them will back off using the address automatically.</p>
<p>I'm thinking maybe it would be better off to just remove this. I'm not sure anyone is actually relying on it, and if someone is, they could add it as a VIP if they really need/want it.</p> pfSense - Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failurehttps://redmine.pfsense.org/issues/9998?journal_id=444222020-02-03T07:48:38ZEric Veumeric.veum@gmail.com
<ul></ul><p>(1) Rick - there is no WAN interface taking the alias fe80::1:1 -- its only on the IPv6 LAN interface. none of the routing advertisements on the LAN would be using it actually, if you review the PDF attached.</p>
<p>(2) On a WAN IPv6, yes there might be some issues doing the same, but that is not the situation with this alias as its only LAN. This is not done on all interfaces.</p>
<p>(1) The 1-liner mwexec setting the LAN link local alias can likely removed, yes. Services are actually using the link-local IP, which were not starting up on boot because of the old redefinition of the link-local, which is the reason for the bug. Since I dont have a full suite of component and unit test, the patch file supplied to you made the additional LAN6 alias.</p> pfSense - Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failurehttps://redmine.pfsense.org/issues/9998?journal_id=444232020-02-03T07:53:17ZJim Pingle
<ul></ul><p>He's talking about two routers attached to the same LAN, not WAN. For example, an HA pair. Or a case where you have a separate router for another purpose (e.g. dedicated VPN router or using another circuit isolated to its own router for whatever reason).</p> pfSense - Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failurehttps://redmine.pfsense.org/issues/9998?journal_id=444242020-02-03T08:16:49ZEric Veumeric.veum@gmail.com
<ul></ul><p>(4): HA comment: If you are using a HA pair, yes, they'd both have the same hard-coded alias, so that would seem problematic. That would happen with the old code base using the hard-coded link-local, and with the patch/fix supplied as well (same BEFORE/AFTER).</p>
<p>(5): Service/Socket Bindings (CORE ISSUES OF BUB): What is needed is to have the auto-assigned link-local used, as the FreeBSD kernel/IP stack is now designed to do. Outlined fully in write-up. It looks like the whole commit was reverted, which does not solve the issue for DHCPv6 and DNS services configuration. The fix without the IP alias or link-local redefinition to fe80::1:1 statement is needed.</p> pfSense - Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failurehttps://redmine.pfsense.org/issues/9998?journal_id=444252020-02-03T11:47:23ZRick Coats
<ul></ul><p>Jim Pingle wrote:</p>
<blockquote>
<p>He's talking about two routers attached to the same LAN, not WAN. For example, an HA pair. Or a case where you have a separate router for another purpose (e.g. dedicated VPN router or using another circuit isolated to its own router for whatever reason).</p>
</blockquote>
<p>This is what I am talking about, internal side of the network where you have more than one router on a network link.</p>
<p>So this is an existing implementation issue that also affects those trying to use multiple prefixes in a single subnet. I am thinking especially those trying to use ULA in combination with GUA addresses for critical items such as dns servers where the ISP providers change prefixes.</p> pfSense - Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failurehttps://redmine.pfsense.org/issues/9998?journal_id=490722020-10-30T12:20:58ZJim Pingle
<ul><li><strong>Category</strong> changed from <i>DNS Resolver</i> to <i>Interfaces</i></li><li><strong>Affected Version</strong> deleted (<del><i>2.5.x</i></del>)</li></ul> pfSense - Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failurehttps://redmine.pfsense.org/issues/9998?journal_id=508032021-02-03T00:16:30ZViktor Gurov
<ul><li><strong>Status</strong> changed from <i>Feedback</i> to <i>Resolved</i></li></ul><p>2.5.0.a.20210201.2350<br />works as expected</p>