Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
23.7 Legacy Series
»
DS-Lite on 23.7.6+ (23.7.10_1)
« previous
next »
Print
Pages:
1
2
3
[
4
]
Author
Topic: DS-Lite on 23.7.6+ (23.7.10_1) (Read 3430 times)
Patrick M. Hausen
Hero Member
Posts: 5085
Karma: 426
Re: DS-Lite on 23.7.6+ (23.7.10_1)
«
Reply #45 on:
May 06, 2024, 04:13:03 pm »
Thanks, @meyergru! Also consider that an explicit assignment of a single address from a LAN /64 to a different interface is possible if a prefix length of /128 is used.
We use this for all our hosts at Hetzner who also give us a single /64 per server by default.
<prefix>::1/128 goes to the outside interface of the host (with a link-local default gateway, of course - fe80::1).
<prefix>::2/64 goes to "jail0" which is an isolated bridge interface without any external interface as a member. This address acts as the default gateway for all the VNET jails connected to that bridge.
<prefix>:<random address for jail>/64 goes to the individual jails.
So you could e.g. use the WAN MAC address to create a GUA from the prefix in SLAAC style and assign it as /128.
Kind regards,
Patrick
Logged
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do.
(Isaac Asimov)
franco
Administrator
Hero Member
Posts: 16111
Karma: 1421
Re: DS-Lite on 23.7.6+ (23.7.10_1)
«
Reply #46 on:
May 07, 2024, 09:34:49 am »
> So you could e.g. use the WAN MAC address to create a GUA from the prefix in SLAAC style and assign it as /128.
I was actually considering taking a /64 from the PD for WAN and only assigning a /128 instead of a /64 to work around this limitation, but the delegation in dhcp6c only works with prefixes as narrow as /64.
Thanks for your input so far. I also tend to agree that the limitation no longer applies and I'll consider patching dhcp6c for 24.7 and bringing back the WAN tracking code.
Cheers,
Franco
Logged
meyergru
Hero Member
Posts: 1150
Karma: 105
IT Aficionado
Re: DS-Lite on 23.7.6+ (23.7.10_1)
«
Reply #47 on:
May 07, 2024, 11:05:45 am »
I'll be glad to test it. There will be a
few hurdles
, of course...
Logged
Intel Core i9-12900H, 2 x I226, 2x Intel 710, 16 GByte, 1 TByte NVME, ZTE F6005
1100 down / 440 up
,
Bufferbloat A+
franco
Administrator
Hero Member
Posts: 16111
Karma: 1421
Re: DS-Lite on 23.7.6+ (23.7.10_1)
«
Reply #48 on:
May 07, 2024, 11:11:00 am »
PPPoE specific fails are not on my panic list today
Cheers,
Franco
Logged
jbourne
Newbie
Posts: 10
Karma: 0
Re: DS-Lite on 23.7.6+ (23.7.10_1)
«
Reply #49 on:
May 07, 2024, 11:17:42 am »
FWIW I am happy to test as well in the weird environment that Japanese IPv6 is, if that is helpful. Especially since I'm the one who revived this thread
Logged
Print
Pages:
1
2
3
[
4
]
« previous
next »
OPNsense Forum
»
English Forums
»
23.7 Legacy Series
»
DS-Lite on 23.7.6+ (23.7.10_1)