Configuring IPv6 on jails

Andrey V. Elsukov bu7cher at yandex.ru
Mon Oct 29 17:36:31 UTC 2018


On 29.10.2018 17:56, Dries Michiels wrote:
> *	Use IPFW IPv6 prefix translation for the jail /64 prefix; translate
> between global routable /64 prefix and fd00::1/64 (as example). The latter
> can be statically configured in jail.conf.
> 
> My problem here is that the IPFW rule needs the external prefix as an
> argument. My prefix is dynamic so this might be tricky and indicates
> scripting to me.
> 
> Isn't there a way to let IPFW determine what interface to use (and thus IPv6
> prefix) for external translation? (for IPv4 NAT there is no need to specify
> the external IPv4 address)

Hi,

I think I can add this feature to ipfw_nptv6 module, but I need some
spare time to implement it. If you are interested, I'll send the patch
to you later. What version do you use? I suspect the patch will use some
features, that are present only in head/ yet.

-- 
WBR, Andrey V. Elsukov

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 554 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-net/attachments/20181029/6584e261/attachment.sig>


More information about the freebsd-net mailing list