Bezüglich Alexander V. Chernikov's Nachricht vom 13.10.2014 11:21 (localtime): > On 13.10.2014 13:16, Harald Schmalzbauer wrote: >> Bezüglich Alexander V. Chernikov's Nachricht vom 13.10.2014 10:42 >> (localtime): >>> On 13.10.2014 12:35, Harald Schmalzbauer wrote: >>>> Bezüglich Julian Elischer's Nachricht vom 23.04.2014 09:55 >>>> (localtime): >> ... >>>>> yes, we made two behaviours. >>>>> Add interface routes to all active FIBS or only add them to the first >>>>> fib and let the user populate other fibs as needed. >>>>> It appears you want the second behaviour, so I suggest you use that >>>>> option and set up all your routes manually. >>>> Hello, >>>> >>>> last time I had the iface-route problem, I just reverted r248895 (for >>>> 9.3). There was inconsitent behaviour with v6 iface routes and >>>> net.add_addr_allfibs=0. >>>> Now I checked with 10.1 ans it seems net.add_addr_allfibs=0 doesn't >>>> work >>>> any more: >>>> netstat -f inet -nr >>>> Routing tables >>>> >>>> Internet: >>>> Destination Gateway Flags Netif Expire >>>> default 172.21.32.1 UGS egn >>>> 127.0.0.1 link#2 UH lo0 >>>> 172.21.32.0/19 link#1 U egn >>>> 172.21.35.1 link#1 UHS lo0 >>>> >>>> netstat -F 1 -f inet -nr >>>> Routing tables (fib: 1) >>>> >>>> Internet: >>>> Destination Gateway Flags Netif Expire >>>> 127.0.0.1 link#2 UH lo0 >>>> 172.21.32.0/19 link#1 U egn >>>> >>>> 'sysctl net.add_addr_allfibs' >>>> net.add_addr_allfibs: 0 >>> Are you sure net.add_addr_allfibs was applied before interface address >>> added? >> Sorry, I messed it up. Forgot that on my production systems (where I >> tested), / is read-only with /etc as union-mount. >> Adding net.add_addr_allfibs=0 to the correct sysctl.conf made the inet >> routing table stay empty. >> >> But unfortunately not the inet6 routing table :-( >> So I still need to delete iface routes for my jail setups, hence need to >> revert r248895. > Hm. If the problem happens with inet6 routes only, why do you need to > revert r248895 ?
For consistency. Either I populate own iface-routes for both, inet and inet6, or I clean both. The latter is what my script has been doing for some time (I think I wrote it when I tested 9.1-RC), so for me it's much less effort to make my script working by reverting r248895 instead of adding another one which cares about inet (v4) only (for the moment). Probably net.add_addr_allfibs will also influence inet6 routing as well in the future, then I'll redo my rc.jails_fibprepare. Thanks, -Harry
signature.asc
Description: OpenPGP digital signature
