On 17 Dec 2024, at 22:49, Mark Johnston wrote: > I do see one wrinkle: when an interface is moved into a jail with > net.fibs > 1 and assigned to a FIB that's invalid in the host, we need > to somehow reset the interface FIB when the interface is moved back. > > I suspect it's fine to just reset the interface FIB to 0 when moving > back, and we should probably be doing that anyway. Maybe we are > already, but I don't see it. > We should, yes. We already remove most other interface configuration between jails. I think if_detach_internal() is the appropriate place to reset the fib.
Best regards, Kristof