Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cilium causes host applications to use IPv6 instead of IPv4 #267

Closed
aanm opened this issue Jan 25, 2017 · 6 comments · Fixed by #1555
Closed

Cilium causes host applications to use IPv6 instead of IPv4 #267

aanm opened this issue Jan 25, 2017 · 6 comments · Fixed by #1555
Assignees
Labels
kind/bug This is a bug in the Cilium logic.

Comments

@aanm
Copy link
Member

aanm commented Jan 25, 2017

I had to delete cilium_host as a workaround.

[aanm@AM-laptop ~]$ ping irc.freenode.net
PING irc.freenode.net(leguin-admin.acc.umu.se (2001:6b0:e:2a18::118)) 56 data bytes
^C
--- irc.freenode.net ping statistics ---
2 packets transmitted, 0 received, 100% packet loss, time 1021ms
[aanm@AM-laptop ~]$ sudo ip l d cilium_host
[aanm@AM-laptop ~]$ ping irc.freenode.net
PING chat.freenode.net (130.239.18.119) 56(84) bytes of data.
64 bytes from leguin.acc.umu.se (130.239.18.119): icmp_seq=1 ttl=45 time=92.1 ms
^C
--- chat.freenode.net ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 92.176/92.176/92.176/0.000 ms
@aanm aanm added the kind/bug This is a bug in the Cilium logic. label Jan 25, 2017
@tgraf
Copy link
Member

tgraf commented Jan 25, 2017

Was cilium_host the only interface with an IPv6 address on it?

@aanm
Copy link
Member Author

aanm commented Jan 25, 2017

With the scope global yes.

@tgraf
Copy link
Member

tgraf commented Jan 25, 2017

OK, that explains it. I think we can change the scope to host as packets on that interface never leave the host.

@tgraf
Copy link
Member

tgraf commented Jan 25, 2017

Can you try

ip addr add $HOST_IP/128 dev $HOST_DEV1 scope host

in bpf/init.sh?

@aanm
Copy link
Member Author

aanm commented Jan 25, 2017

doesn't work, seems like f00d:: is mandatory to be scope global.

sudo ip addr del f00d::c0a8:66:0:ffff/128 dev cilium_host 2> /dev/null || true
sudo ip addr add f00d::c0a8:66:0:ffff/128 dev cilium_host scope host
ip -6 a s cilium_host
52: cilium_host@cilium_net: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 f00d::c0a8:66:0:ffff/128 scope global 
       valid_lft forever preferred_lft forever
    inet6 fe80::a86d:ffff:fe8c:cf/64 scope link 
       valid_lft forever preferred_lft forever

Should we change the f00d prefix?

@tgraf tgraf added this to the 0.9 milestone Mar 18, 2017
@tgraf tgraf modified the milestones: 0.10, 0.9 May 15, 2017
@tgraf
Copy link
Member

tgraf commented Jun 20, 2017

Possible solution: use of a site local IPv6 address for the cilium_host

@tgraf tgraf self-assigned this Jun 20, 2017
@tgraf tgraf removed this from the 0.10 milestone Jul 22, 2017
@tgraf tgraf assigned aanm and unassigned tgraf Sep 18, 2017
tgraf added a commit that referenced this issue Sep 20, 2017
This resolves an issue where running Cilium will configure a global
scope address for the system which causes getaddrinfo() to start
returning IPv6 addresses for DNS requests even though the system may not
have actual IPv6 connectivity.

Fixes: #267

Signed-off-by: Thomas Graf <thomas@cilium.io>
tgraf added a commit that referenced this issue Sep 20, 2017
This resolves an issue where running Cilium will configure a global
scope address for the system which causes getaddrinfo() to start
returning IPv6 addresses for DNS requests even though the system may not
have actual IPv6 connectivity.

Fixes: #267

Signed-off-by: Thomas Graf <thomas@cilium.io>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug This is a bug in the Cilium logic.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants