No IPv6 in jail

[Thinkcat]

Hello

I have one jail which I intend to use to run servers. I created it with VIMAGE on. My problem is, I have no IPv6 connectivity from it.

From the general jails configuration, I have disabled both IPv4 and IPv6 autoconfiguration. I have given ranges to both, 192.168.1.200 to 192.168.1.240 to IPv4, with network specified as 192.168.1.0/24.

The IPv6 network is x:x:x:x::/64 and the range is in form x:x:x:x::1:100 to x:x:x:x::1:200. The actual jail has static addresses within these ranges, with only the address and the mask configured for IPv4 and address and prefix length for IPv6.

Running ifconfig inside the jail it gives me the correct addresses for IPv4 and IPv6. I can log in and do whatever using IPv4, but IPv6 has no connectivity.

The main system image has both IPv4 and IPv6 connectivity working flawlessly.

epair0b: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500

options=8<VLAN_MTU>
ether 02:98:b6:00:09:0b
inet 192.168.1.231 netmask 0xffffff00 broadcast 192.168.1.255
inet6 x:x:x:x::1:110 prefixlen 64
nd6 options=9<PERFORMNUD,IFDISABLED>
media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
status: active​

EDIT: Found out that putting IPv6 to autoconfigure will work. But I want a static address for it too.

EDIT: On the FreeNAS host side it looks like this:

bridge0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500

ether 02:d0:91:c3:2c:00
nd6 options=1<PERFORMNUD>
id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15
maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200
root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0
member: epair0a flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>

ifmaxaddr 0 port 8 priority 128 path cost 2000​

member: igb0 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>

ifmaxaddr 0 port 2 priority 128 path cost 55​

epair0a: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500

options=8<VLAN_MTU>
ether 02:19:d1:00:08:0a
inet6 fe80::19:d1ff:fe00:80a%epair0a prefixlen 64 scopeid 0x8
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
status: active​

 

[Thinkcat]

Well. Instead of getting to use the jail and run a httpd there that is reachable via IPv6, I've been fighting to get functional IPv6.

I got it the way I wanted on the main system by using ifconfig. I haven't booted the machine since, so I am not sure if my changes are permanent. But the GUI was an absolute no-go with no way to set any kind of static IPv6 address. And the menu on the console is also flaky and buggy. More details here: https://bugs.freenas.org/issues/12418

Now the only remaining problem is the jail. I have tried a dozen approaches already. What I am after is that I would have the jail respond to requests sent to x:x:x:x::1:110/64. Only way to do this is to use autoconf in the GUI and then use ifconfig inside the jail to set the alias. But the change is lost after restarting the jail.

Only way to configure the jail's IPv6 and have it work using the GUI is to enable autoconf. But then there is no way to set a static alias in the GUI. As soon as I disable autoconf in the gui, there is no way to configure the jail so that it would respond to ping from any IPv6 address. I have tried to set the main IPv6 address to the address it otherwise gets through autoconf, and use my preferred static address as an alias. Didn't work.

Then I tried to set the main address to a link-local address and have two aliases: the autoconf address and my preferred static address. Didn't work. They are all there if I run ifconfig, but there is no connectivity.

 

[dlavigne]

I know IPv6 wasn't fully implemented (and won't be) in the 9.x jails framework. 10 (whenever it arrives) is supposed to resolve that.

 

[DrKK]

IPv6 is a dirty lie.

 

[BigDave]

 

[Ericloewe]

We've run out of IPv4 addresses more often than Voyager 1 has left the solar system.

 

[Inquirer]

@Thinkcat
Just enable IPv6 autoconfiguration and add an ipv6 alias in your jail /etc/rc.conf with your static v6:
ifconfig_epair0b_alias0="inet6 2A02:xxxx:xxxx:2500::50 prefixlen 64"

After these changes my ifconfig output looks like this :
root@transmission_1:/ # ifconfig epair0b
epair0b: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=8<VLAN_MTU>
ether 02:ff:b0:00:05:0b
inet 10.0.200.50 netmask 0xffffff00 broadcast 10.0.200.255
inet6 fe80::ff:b0ff:fe00:50b%epair0b prefixlen 64 scopeid 0x2
inet6 2a02:xxxx:xxxx:2500::50 prefixlen 64
inet6 2a02:xxxx:xxxx:2500:ff:b0ff:fe00:50b prefixlen 64 autoconf
nd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>
media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
status: active