IPv6 routes leaking between FIBs?

2014-12-27 Thread Jason Healy
Hello, Trying out FreeBSD for the first time to build a firewall box that’s multi-core and runs PF. I’m very interested in the FIB code, as it lines up well with the way my core networking equipment works and should allow me to route traffic on an interface that’s logically separate from the m

Re: IPv6 routes leaking between FIBs?

2014-12-28 Thread Bjoern A. Zeeb
> On 28 Dec 2014, at 03:19 , Jason Healy wrote: > > Hello, > > Trying out FreeBSD for the first time to build a firewall box that’s > multi-core and runs PF. I’m very interested in the FIB code, as it lines up > well with the way my core networking equipment works and should allow me to > r

Re: IPv6 routes leaking between FIBs?

2014-12-28 Thread Julian Elischer
On 12/28/14 11:19 AM, Jason Healy wrote: Hello, Trying out FreeBSD for the first time to build a firewall box that’s multi-core and runs PF. I’m very interested in the FIB code, as it lines up well with the way my core networking equipment works and should allow me to route traffic on an int

Re: IPv6 routes leaking between FIBs?

2014-12-29 Thread Alan Somers
On Sun, Dec 28, 2014 at 3:16 AM, Bjoern A. Zeeb wrote: > >> On 28 Dec 2014, at 03:19 , Jason Healy wrote: >> >> Hello, >> >> Trying out FreeBSD for the first time to build a firewall box that’s >> multi-core and runs PF. I’m very interested in the FIB code, as it lines up >> well with the way

Re: IPv6 routes leaking between FIBs?

2014-12-29 Thread Bjoern A. Zeeb
> On 29 Dec 2014, at 16:03 , Alan Somers wrote: > > On Sun, Dec 28, 2014 at 3:16 AM, Bjoern A. Zeeb wrote: >> >> People simply broke it (again). Please file a bug report. You may mention >> that there are regression test scripts in src/tools/ somewhere to test all >> the cases for IPv6. >

Re: IPv6 routes leaking between FIBs?

2014-12-29 Thread Alan Somers
On Mon, Dec 29, 2014 at 10:19 AM, Bjoern A. Zeeb wrote: > >> On 29 Dec 2014, at 16:03 , Alan Somers wrote: >> >> On Sun, Dec 28, 2014 at 3:16 AM, Bjoern A. Zeeb wrote: >>> >>> People simply broke it (again). Please file a bug report. You may >>> mention that there are regression test scripts

Re: IPv6 routes leaking between FIBs?

2014-12-29 Thread Jason Healy
On Dec 29, 2014, at 1:28 AM, Julian Elischer wrote: > to some extent this is what it was written for.. teh fib code was written for > Ironport/Cisco for separating the management port from the data ports onn > their appliances, however the VNET code that came later is an even cleaner > way of

Re: IPv6 routes leaking between FIBs?

2014-12-29 Thread Julian Elischer
On 12/30/14 1:59 AM, Jason Healy wrote: On Dec 29, 2014, at 1:28 AM, Julian Elischer wrote: to some extent this is what it was written for.. teh fib code was written for Ironport/Cisco for separating the management port from the data ports onn their appliances, however the VNET code that cam

Re: IPv6 routes leaking between FIBs?

2014-12-29 Thread Bjoern A. Zeeb
> On 29 Dec 2014, at 19:17 , Julian Elischer wrote: > > On 12/30/14 1:59 AM, Jason Healy wrote: >> On Dec 29, 2014, at 1:28 AM, Julian Elischer wrote: >> >>> to some extent this is what it was written for.. teh fib code was written >>> for Ironport/Cisco for separating the management port fro

Re: IPv6 routes leaking between FIBs?

2014-12-29 Thread Jason Healy
On Dec 29, 2014, at 2:34 PM, Bjoern A. Zeeb wrote: > pf and VNETs are a cause for panic at the moment; don’t go that route (yet). Good to know. With that in mind, I think my best workaround for now is to disable IPv6 on the management interface, leaving the transit interface as the only one