Posts tagged 'ipv6'

Updated to OpenBSD 6.3? Found your IPv6 Broken?

I have an OpenBSD box hosted with Bytemark. I recently updated it to the latest, OpenBSD 6.3. After the update, my IPv6 networking stopped working.

This is a documented change in the upgrade notes, but I guess I didn't read close enough, or didn't realise the impact this change would have. Hopefully noting it here might be useful for anyone else that spends half an hour scratching their head wondering what happened.

After doing the upgrade all my IPv6 stopped working, and I could no longer ping the default gateway on it's linklocal address, fe80::1%vio0.

The workaround is simple, just add -soii to your hostname.if file in order to restore the previous behaviour of addresses generated from the MAC address.

eg.

traci# cat /etc/hostname.vio0
inet 46.43.0.47 255.255.255.0
inet6 2001:41c8:011a::1 56
inet6 2001:41c9:1:41d::47 64 alias
up
-soii

After restarting the networking with sh /etc/netstart vio0 I'm able to ping again:

traci# ping6 fe80::1%vio0 
PING fe80::1%vio0 (fe80::1%vio0): 56 data bytes
64 bytes from fe80::1%vio0: icmp_seq=0 hlim=64 time=12.483 ms
64 bytes from fe80::1%vio0: icmp_seq=1 hlim=64 time=0.674 ms
64 bytes from fe80::1%vio0: icmp_seq=2 hlim=64 time=0.772 ms
64 bytes from fe80::1%vio0: icmp_seq=3 hlim=64 time=1.074 ms
^C
--- fe80::1%vio0 ping statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 0.674/3.751/12.483/5.044 ms

I'm guessing that as this is a virtual server, perhaps the underlying hypervisor/router is expecting a particular address.

Jenkins, Github, and IPv6

Github and some other sites don't yet support IPv6. But I want our build servers to be IPv6 only. Here is how I achieved it using OpenBSD's NAT64 and unbound's DNS64 functions

IPv6 Privacy Addresses

IPv6 has a mechanism for generating random addresses to maintain some privacy for hosts