[Bug 286322] IPv6 doesn't work across different FIBs (epair)

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 02 Jun 2025 10:55:16 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=286322

--- Comment #15 from Paige Thompson <paige@paige.bio> ---
Summary of things so far: 

net.inet6.ip6.source_address_validation does not appear to be working correctly
when its set to 1 (default.) Turning it off allows me to use the desired
configuration, but it feels wrong doesn't it? I'd like to understand this a bit
better still. 

net.inet.ip.source_address_validation (ipv4) doesn't have this problem, you can
substitute 192.0.0.0/31 and 192.0.0.1/31 for fcff::a/64 and fcff::b/64 to test
IPv4, but I've demonstrated that before in the work log. 

IPv6 doesn't really have this problem on other interfaces types or a real
Ethernet device, it seems specific to epair but I'm not firm on that.

I net.ipv4.conf.default.rp_filter to 1 and tested the identical configuration
using VRF on Linux and it works. 

-- net.inet6.ip6.source_address_validation  I thought this applied to
forwarding, evidently forwarding doesn't apply to this you can turn
net.inet6.ip6.forwarding on or off and it doesn't affect this (sorry I almost
said this is called next-hop I may have earlier, I think this is commonly
referred to as 'on-link')  

I think the right thing to do here though is figure out why source validation
is  apparently not working, I'll start looking into it next.

-- 
You are receiving this mail because:
You are the assignee for the bug.