Re: IPv6 TCP: first two SYN packets to local v6 unicast addresses ignored

From: Michael Butler <imb_at_protected-networks.net>
Date: Sat, 16 Apr 2022 13:19:57 UTC
On 4/16/22 01:22, Gleb Smirnoff wrote:
>    Hi Florian, Hi Michael,
> 
> On Fri, Apr 15, 2022 at 06:11:13PM -0400, Michael Butler wrote:
> M> >> I can reproduce this locally, will try to figure out what is going on.
> M> >> If you can bisect it, it would be great.
> M> >
> M> > Found the culprit 1817be481b8703ae86730b151a6f49cc3022930f. And indeed
> M> > toggling net.inet6.ip6.source_address_validation makes the issue go away
> M> > on latest main.
> M>
> M> I found this commit and the ipv4 analog also cause packets between
> M> non-VNET jails on the same host and to the host itself to be dropped :-(
> 
> I see your mails and will look into the problem ASAP.
> 
> Meanwhile...
> 
> Florian, can you please confirm you are using jails too?
> 
> Michael, can you please confirm or decline that you see the packets
> that are dropped when you tcpdump on lo0?

All the jails are aliased to share a single bridge interface. That 
results in the route to each jail being on lo0 so .. probably :-)

	Michael