Hello,

On Thu, Jan 18, 2024 at 08:00:54AM -0300, Crystal Kolipe wrote:
</snip>

> On Thu, Jan 18, 2024 at 01:01:31AM +0100, Alexandr Nedvedicky wrote:
> 
> In these situations, it would be nice to have a modifier like :0 that
> returns 'the first non-deprecated IPv6 address with global scope'.
> 
> That way, you could do something like:
> 
> pass out on rge2 from foobar nat-to (rge2:1)
> 
> where :1 is the hypothetical new modifier described above.

    this seems to make sense to me. to get there we will have
    to figure out how to provide pf(4) with hint to indicate
    IPv6 address is deprecated. pf(4) currently keeps addresses
    assigned to interface in radix table. It is unaware of whether
    particular address is deprecated or preferred.

    :1 does not read intuitive. I think we should just introduce
    a modifier named :preferred. But the biggest hurdle is to
    figure out how to let pf(4) know about IPv6 address state.

regards
sashan

Reply via email to