Am 07.05.2018 um 18:37 schrieb Luke Jordan:
> did you mean link-local (fe80::...) instead of link-level?
with link-local-addresses in providers-file the problem is the same.
after a time:
ping from a server (external) to isp 1 - he give a response, but the
response time is a nightmare:
$ ping6 2a01:170:1150:4:a:a:a:a
PING 2a01:170:1150:4:a:a:a:a(2a01:170:1150:4:a:a:a:a) 56 data bytes
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=1 ttl=55 time=12129 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=2 ttl=55 time=11130 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=3 ttl=55 time=10130 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=4 ttl=55 time=9130 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=5 ttl=55 time=8130 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=6 ttl=55 time=7130 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=7 ttl=55 time=6130 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=8 ttl=55 time=5131 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=9 ttl=55 time=4131 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=10 ttl=55 time=3131 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=11 ttl=55 time=2131 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=12 ttl=55 time=1132 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=13 ttl=55 time=132 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=14 ttl=55 time=16.5 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=15 ttl=55 time=15.4 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=16 ttl=55 time=14.6 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=17 ttl=55 time=22.0 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=18 ttl=55 time=15.0 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=19 ttl=55 time=14.9 ms
64 bytes from 2a01:170:1150:4:a:a:a:a: icmp_seq=20 ttl=55 time=14.4 ms
--- 2a01:170:1150:4:a:a:a:a ping statistics ---
20 packets transmitted, 20 received, 0% packet loss, time 19009ms
rtt min/avg/max/mdev = 14.406/3990.782/12129.978/4195.572 ms, pipe 13
after this ping there's normal for minutes, but later it's the same shit.
tcpdump:
20:31:47.803139 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 1
20:31:47.803184 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 1
20:31:48.806257 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 2
20:31:48.806284 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 2
20:31:49.802315 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 3
20:31:49.802341 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 3
20:31:50.803488 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 4
20:31:50.803518 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 4
20:31:51.803903 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 5
20:31:51.803934 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 5
20:31:52.801776 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 6
20:31:52.801807 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 6
20:31:52.808550 IP6 (hlim 255, next-header ICMPv6 (58) payload length:
32) fe80::e228:6dff:fe68:f913 > fe80::f6f2:6dff:fe06:182c: [icmp6 sum
ok] ICMP6, neighbor solicitation, length 32, who has
fe80::f6f2:6dff:fe06:182c
source link-address option (1), length 8 (1): e0:28:6d:68:f9:13
0x0000: e028 6d68 f913
20:31:52.808599 IP6 (hlim 255, next-header ICMPv6 (58) payload length:
24) fe80::f6f2:6dff:fe06:182c > fe80::e228:6dff:fe68:f913: [icmp6 sum
ok] ICMP6, neighbor advertisement, length 24, tgt is
fe80::f6f2:6dff:fe06:182c, Flags [router, solicited]
20:31:52.815223 IP6 (hlim 255, next-header ICMPv6 (58) payload length:
32) fe80::f6f2:6dff:fe06:182c > fe80::e228:6dff:fe68:f913: [icmp6 sum
ok] ICMP6, neighbor solicitation, length 32, who has
fe80::e228:6dff:fe68:f913
source link-address option (1), length 8 (1): f4:f2:6d:06:18:2c
0x0000: f4f2 6d06 182c
20:31:52.815666 IP6 (hlim 255, next-header ICMPv6 (58) payload length:
24) fe80::e228:6dff:fe68:f913 > fe80::f6f2:6dff:fe06:182c: [icmp6 sum
ok] ICMP6, neighbor advertisement, length 24, tgt is
fe80::e228:6dff:fe68:f913, Flags [router, solicited]
20:31:53.802121 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 7
20:31:53.802146 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 7
20:31:54.801799 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 8
20:31:54.801830 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 8
20:31:55.801951 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 9
20:31:55.801979 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 9
20:31:56.801798 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 10
20:31:56.801832 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 10
20:31:57.802981 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 11
20:31:57.803013 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 11
20:31:58.802697 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 12
20:31:58.802724 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 12
20:31:59.801796 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 13
20:31:59.801828 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 13
20:32:00.804569 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 14
20:32:00.804602 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 14
20:32:01.805256 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 15
20:32:01.805289 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 15
20:32:02.805847 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 16
20:32:02.805872 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 16
20:32:03.815191 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 17
20:32:03.815250 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 17
20:32:04.681234 IP6 (hlim 255, next-header ICMPv6 (58) payload length:
32) fe80::f6f2:6dff:fe06:182c > ff02::1:ff0e:f74d: [icmp6 sum ok] ICMP6,
neighbor solicitation, length 32, who has fe80::73a8:7f55:540e:f74d
source link-address option (1), length 8 (1): f4:f2:6d:06:18:2c
0x0000: f4f2 6d06 182c
20:32:04.808911 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 18
20:32:04.808937 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 18
20:32:05.683118 IP6 (hlim 255, next-header ICMPv6 (58) payload length:
32) fe80::f6f2:6dff:fe06:182c > ff02::1:ff0e:f74d: [icmp6 sum ok] ICMP6,
neighbor solicitation, length 32, who has fe80::73a8:7f55:540e:f74d
source link-address option (1), length 8 (1): f4:f2:6d:06:18:2c
0x0000: f4f2 6d06 182c
20:32:05.810537 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 19
20:32:05.810563 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 19
20:32:06.679555 IP6 (hlim 255, next-header ICMPv6 (58) payload length:
32) fe80::f6f2:6dff:fe06:182c > ff02::1:ff0e:f74d: [icmp6 sum ok] ICMP6,
neighbor solicitation, length 32, who has fe80::73a8:7f55:540e:f74d
source link-address option (1), length 8 (1): f4:f2:6d:06:18:2c
0x0000: f4f2 6d06 182c
20:32:06.811066 IP6 (flowlabel 0x88bc8, hlim 57, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a01:170:1150:4:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 20
20:32:06.811092 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a01:170:1150:4:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 20
ping from a server (external) to isp 2:
$ ping6 2a02:8106:f:e04:a:a:a:a
PING 2a02:8106:f:e04:a:a:a:a(2a02:8106:f:e04:a:a:a:a) 56 data bytes
64 bytes from 2a02:8106:f:e04:a:a:a:a: icmp_seq=1 ttl=53 time=32.5 ms
--- 2a02:8106:f:e04:a:a:a:a ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 32.580/32.580/32.580/0.000 ms
tcpdump:
20:31:46.967511 IP6 (flowlabel 0xc1c84, hlim 53, next-header ICMPv6 (58)
payload length: 64) 2a01:4f8:172:e49:2:5:ffff:2 >
2a02:8106:f:e04:a:a:a:a: [icmp6 sum ok] ICMP6, echo request, seq 1
20:31:46.967556 IP6 (hlim 64, next-header ICMPv6 (58) payload length:
64) 2a02:8106:f:e04:a:a:a:a > 2a01:4f8:172:e49:2:5:ffff:2: [icmp6 sum
ok] ICMP6, echo reply, seq 1
20:31:49.331200 IP6 (hlim 255, next-header ICMPv6 (58) payload length:
32) fe80::f6f2:6dff:fe06:589f > fe80::e228:6dff:fe44:3e61: [icmp6 sum
ok] ICMP6, neighbor solicitation, length 32, who has
fe80::e228:6dff:fe44:3e61
source link-address option (1), length 8 (1): f4:f2:6d:06:58:9f
0x0000: f4f2 6d06 589f
20:31:49.331431 IP6 (hlim 255, next-header ICMPv6 (58) payload length:
24) fe80::e228:6dff:fe44:3e61 > fe80::f6f2:6dff:fe06:589f: [icmp6 sum
ok] ICMP6, neighbor advertisement, length 24, tgt is
fe80::e228:6dff:fe44:3e61, Flags [router, solicited]
20:32:10.031367 IP6 (hlim 255, next-header ICMPv6 (58) payload length:
32) fe80::f6f2:6dff:fe06:589f > fe80::e228:6dff:fe44:3e61: [icmp6 sum
ok] ICMP6, neighbor solicitation, length 32, who has
fe80::e228:6dff:fe44:3e61
source link-address option (1), length 8 (1): f4:f2:6d:06:58:9f
0x0000: f4f2 6d06 589f
20:32:10.031581 IP6 (hlim 255, next-header ICMPv6 (58) payload length:
24) fe80::e228:6dff:fe44:3e61 > fe80::f6f2:6dff:fe06:589f: [icmp6 sum
ok] ICMP6, neighbor advertisement, length 24, tgt is
fe80::e228:6dff:fe44:3e61, Flags [router, solicited]
with isp 2 no problems. isp 2 is the default for system with shorewall6
(rtrules from lo).
routers before shorewall6 are not the problem - they're routing the
subnet's to system with shorewall6 without delay.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users
