6RD status?

[lrosenman]

I'm currently back to pfSense as they correctly support ATT Fiber's 6rd IPv6.   I really(!) prefer Opnsense, but *NEED* 6RD to work.

What's the current 6rd status in Opnsense 17.7?

[franco]

The 6rd enhancement in pfSense was written by Ermal for the FreeBSD sources, but never made it to FreeBSD itself. It is a bit like the "shared forwarding" code that we wrote for OPNsense. The point is in these cases the project itself works on the feature and as an open source project releases the patches to the public.

Since we jumped to FreeBSD 11.0 long ahead of pfSense in January 2017, 6rd has been defunct because there have been no efforts to bring 6rd to 11.0 in pfSense yet. These efforts have in the last two months been made and I heard there are mostly working in the upcoming pfSense 2.4:

https://redmine.pfsense.org/issues/7272

Here comes the interesting bit. For one reason or another, pfSense stopped releasing their FreeBSD source code work on July 28, so we cannot know what how and when they did it:

https://github.com/pfsense/FreeBSD-src/tree/RELENG_2_4

Jim Thompson, the owner of Netgate declined to comment. Nobody seems to know why the open source project has to go this route, a route they already went in 2014 before, which incidentally created OPNsense.

If you will, please ask them what their motivation is for not sharing with the open source world to grow together.


Cheers,
Franco

[lrosenman]

I'm actually on the 2.4-RC, and you are correct that it's mostly working, and I'm in that bug thread.

I'm also (somewhat) friendly with the netgate folk (they & I are in Austin, TX).

I'll poke at them.

[franco]

Thank you :)


Franco

[franco]

Soo... https://forum.pfsense.org/index.php?topic=137636.msg754001#msg754001

1. Howdy Jim, how is it going.
2. Jim refuses to address the elephant in the room: where is the source for his open source.
3. He is keeping this code away from FreeBSD, away from review and general adoption.
4. OPNsense doesn't work with 6rd, no harm done either way. :)


Cheers,
Franco

[lrosenman]

Yep.  And it may make me rethink what I use for a firewall.  I may move to a Ubiquiti USG (I have Ubiquiti AP's anyway). 

I sent a tersely worded PM to Jim.  I'm *NOT* happy.  I also posted to the freebsd-net list about this.   

[franco]

We used to say this a lot in the beginning use that tool that works and makes you feel happy. Best of luck. :)

Maybe some fine day this can be revisited. Always open to integrate something that we can see.


Cheers,
Franco

[franco]

Just an FYI, we are back at it for 18.7: https://github.com/opnsense/core/issues/1501


Cheers,
Franco