Brilliant! Kevin, thank you.<span></span><br><br>On Friday, June 19, 2015, Kevin Holly [Fusl] <<a href="mailto:openvz@lists.dedilink.eu">openvz@lists.dedilink.eu</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<br>
Hi,<br>
<br>
On 06/18/2015 11:13 PM, Todd Mueller wrote:<br>
> [...]<br>
<br>
I'm not entirely sure if you understand what he asks for.<br>
<br>
When you do "vzctl set CTID --ipadd 2001:1234:1234:1234/64 --save", OpenVZ creates a route only for the network address (2001:1234:1234:1234::), but not for the entire /64 subnet which is unexpected behaviour already.<br>
<br>
Inside the container, OpenVZ automatically adds the network address (2001:1234:1234:1234::) to venet0.<br>
<br>
2001:1234:1234:1234:: is now reachable from the outside<br>
<br>
If you add 2001:1234:1234:1234::1 as an address inside the container, it should send a NDP packet to update neighbours about the new IPv6 address (including the router) but what we see instead is 2001:1234:1234:1234::1 staying unreachable.<br>
<br>
OpenVZ in this case treats the 2001:1234:1234:1234::/64 subnet as a single address (which is 2001:1234:1234:1234::) instead of the subnet we requested and throws away all subnet information.<br>
<br>
<br>
How we expect it to work instead:<br>
<br>
"vzctl set CTID --ipadd 2001:1234:1234:1234::/64 --save" should add an entire /64 route and allow the container to use the entire /64 subnet as outgoing IPv6 address<br>
<br>
vzctl should not by default add an IPv6 address from this subnet OR add 2001:1234:1234:1234:: by default to the container.<br>
<br>
Inside the container we should now be able to add 2001:1234:1234:1234::1 as another IPv6 address to venet0 and OpenVZ kernel/the hardware node should forward NDP packets for updating neighbours including routers with the new IPv6 address.<br>
<br>
The addresses 2001:1234:1234:1234:: and 2001:1234:1234:1234::1 should now be reachable from outside.<br>
<br>
<br>
I hope that I explained this enough in detail so everyone reading should get an idea of what we mean.<br>
<br>
- --<br>
Best regards<br>
<br>
Kevin Holly - <a href="javascript:;" onclick="_e(event, 'cvml', 'root@hallowe.lt')">root@hallowe.lt</a> - <a href="http://hallowe.lt/" target="_blank">http://hallowe.lt/</a><br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v2<br>
<br>
iQEcBAEBAgAGBQJVgz/dAAoJELAaqP3QtzpMLlwH/2nYUll/ZwkkmQbYCZLRWAMZ<br>
h90rdK8zh5MRKTSSlMMO6AEBc3yKiw2F5nSHpAIKS5GuvtRbKs7qkHDM3BruSvg6<br>
W60D0tiYdIQLKFCEgldo5aPmGdJirGA/DV8nq1bEYlQX41nC9rsuvRUPbupIr24n<br>
Y6YN2J34BIaTmkXrAj2kjL+O0h6AUlgTOyitohd8jzmc4aki7jn3rsuoDDC6yN38<br>
mKBp1j992zJnWPHSekmyCYAJzGRlD0JAAamasFTxlkV/5Gd3vZoFIX6tkrj7Wfu2<br>
/CGgGM9+3ubPdW9CJeBPSGO92VxAyomLf7Y68ezVO0zuK/FuqqMPwaADJ64eCLU=<br>
=sbdL<br>
-----END PGP SIGNATURE-----<br>
_______________________________________________<br>
Users mailing list<br>
<a href="javascript:;" onclick="_e(event, 'cvml', 'Users@openvz.org')">Users@openvz.org</a><br>
<a href="https://lists.openvz.org/mailman/listinfo/users" target="_blank">https://lists.openvz.org/mailman/listinfo/users</a><br>
</blockquote><br><br>-- <br>Sincerely yours, Pavel Odintsov<br>