Deleting IPv4 iface-routes from extra FIBs

[Harald Schmalzbauer]

 Bezüglich Alexander V. Chernikov's Nachricht vom 13.10.2014 11:21
(localtime):
> On 13.10.2014 13:16, Harald Schmalzbauer wrote:
>>   Bezüglich Alexander V. Chernikov's Nachricht vom 13.10.2014 10:42
>> (localtime):
>>> On 13.10.2014 12:35, Harald Schmalzbauer wrote:
>>>>    Bezüglich Julian Elischer's Nachricht vom 23.04.2014 09:55
>>>> (localtime):
>> ...
>>>>> yes, we made two behaviours.
>>>>> Add interface routes to all active FIBS or only add them to the first
>>>>> fib and let the user populate other fibs as needed.
>>>>> It appears you want the second behaviour, so I suggest you use that
>>>>> option and set up all your routes manually.
>>>> Hello,
>>>>
>>>> last time I had the iface-route problem, I just reverted r248895 (for
>>>> 9.3). There was inconsitent behaviour with v6 iface routes and
>>>> net.add_addr_allfibs=0.
>>>> Now I checked with 10.1 ans it seems net.add_addr_allfibs=0 doesn't
>>>> work
>>>> any more:
>>>> netstat -f inet -nr
>>>> Routing tables
>>>>
>>>> Internet:
>>>> Destination        Gateway            Flags      Netif Expire
>>>> default            172.21.32.1        UGS         egn
>>>> 127.0.0.1          link#2             UH          lo0
>>>> 172.21.32.0/19     link#1             U           egn
>>>> 172.21.35.1        link#1             UHS         lo0
>>>>
>>>> netstat -F 1 -f inet -nr
>>>> Routing tables (fib: 1)
>>>>
>>>> Internet:
>>>> Destination        Gateway            Flags      Netif Expire
>>>> 127.0.0.1          link#2             UH          lo0
>>>> 172.21.32.0/19     link#1             U           egn
>>>>
>>>> 'sysctl net.add_addr_allfibs'
>>>> net.add_addr_allfibs: 0
>>> Are you sure net.add_addr_allfibs was applied before interface address
>>> added?
>> Sorry, I messed it up. Forgot that on my production systems (where I
>> tested), / is read-only with /etc as union-mount.
>> Adding net.add_addr_allfibs=0 to the correct sysctl.conf made the inet
>> routing table stay empty.
>>
>> But unfortunately not the inet6 routing table :-(
>> So I still need to delete iface routes for my jail setups, hence need to
>> revert r248895.
> Hm. If the problem happens with inet6 routes only, why do you need to
> revert r248895 ? 

For consistency. Either I populate own iface-routes for both, inet and
inet6, or I clean both. The latter is what my script has been doing for
some time (I think I wrote it when I tested 9.1-RC), so for me it's much
less effort to make my script working by reverting r248895 instead of
adding another one which cares about inet (v4) only (for the moment).
Probably net.add_addr_allfibs will also influence inet6 routing as well
in the future, then I'll redo my rc.jails_fibprepare.

Thanks,

-Harry


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 196 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20141013/f622b673/attachment.sig>