IPv6 / PPP dropout troubles

[affinityv]

I recently configured IPv6 on my NBN HFC connection in AU, early August with 20.7 version of OPNsense (not ever before this release).

This seems to cause dropouts after a number of hours and the most reliable way to get the connection back up has been to reboot OPNsense.  I've had more troubles with 20.7.1 and 20.7.2 than I've ever experienced over the life of OPNsense on the same hardware.  I started using OPNsense with version 15.1

I did also find that if I disabled or re-enabled any single firewall rule, it tended to drop the connection; reconnecting was a pain that was best fixed with a reboot!

It is also possible that my "installed" troubles may be partly related to an aging m.2 SSD drive; but I wouldn't be so sure, especially since I am now using a USB stick as a LiveCD working environment.

I am currently only using LiveCD setup  with auto-configuration and my saved config files.  When the PPP connection fails, the most reliable way to "quickly" get it back in service is to reboot, force the auto-configurator to run and then escape out (the no-so-secret way), manually restore my config in place (with original config and sshd keys intact after fixing permissions), then exiting from the shell and bypass extra config when the script continues.  Once I do this, I can get another good block of hours until the next PPP connection dropout and the dance has to begin again.

At one stage I did try to run the installer, but it took forever and didn't complete on the suspect m.2 SSD drive, so I won't try that again until I am sure the drive is good or a replacement is installed.

Being stuck on 20.7 doesn't otherwise seem to cause any grief, of course I would like it fully up to date, but getting an updated image doesn't seem to be an option at all (unless I build it myself) with OPNsense for point releases.  Not about to have that argument here.... but..... not super happy about that failing.

Any ideas how to best troubleshoot the problem, has anyone else suffered the same problems since implementing IPv6 (IPv4 was always good and it is still in use with IPv6 going over the IPv4 link).  IPv6 is experimental for the setup, but I don't want to remove it either; in time I expect to serve both IPv4 and IPv6 until some time in the future when IPv4 may be deprecated (if it ever is).  I am definitely not ready to transition away from IPv4 to IPv6 for anything production wise at this time, nor do I expect that to change any time in the near future.   I consider IPv6 a "bonus", but also something I don't want to have to give up on at this time.

[andreaslink]

I think I can second it, I posted a very detailed report here some days ago: https://forum.opnsense.org/index.php?topic=18923.0

Until today, I still have issues with IPv6, while IPv4 in parallel (and since ever before) is running fine.

I also cannot ping6 my IPv6 gateway, but traceroute6 works fine as I described here: https://forum.opnsense.org/index.php?topic=19018.0

Maybe, if you read through my threads, you might confirm something in relation to your setup and behaviour?

[affinityv]

Thanks, whom is your ISP?  Mine is now doing CGNAT, but not for me and I get some of my clients to request to be taken off CGNAT without any trouble -- they just tell the ISP that they require a proper static IP address for support reasons.

I've got a /60, with the IDs from 0 to 15, that still gives 16x /64 to play with.

btw I am a "partner / agent" for my ISP, so.... if you want to explore changing ISP as an option, I am sure you'll be able to avoid CGNAT.  Perhaps private message me.

[andreaslink]

Sounds briefly like my story. I'm behind a CGNAT net now as well since some days. My ISP is "komflat" in Germany, if this is known? It's not a very professional provider and I'm considering to move out there as well asap, we can discuss this at the side .

None-the-less, I like the dual stack approach now but I also expect IPv6 to work with my OPNsense. I get a /56 and "forward" a /60 further on to my OPNsense internally from my FritzBox. This seems to work fine, but I cannot ping my FB, which is currently a huge blocker for me.

[affinityv]

Okay, well I'm in AU, so changing to my ISP isn't an option for you; but perhaps another ISP would be happy to help or you can convince them why you need to be off CGNAT?