netdev - PROBLEM: Linux 3.9 more-specific ipv6 route ignored until next-hop is in neighbor cache

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 3 Jul 2013 00:04:33 +0200
From:	Pierre Emeriaud <petrus.lt@...il.com>
To:	netdev@...r.kernel.org
Subject: PROBLEM: Linux 3.9 more-specific ipv6 route ignored until next-hop is
 in neighbor cache

Hello,

Linux 3.9 more-specific ipv6 route ignored until next-hop is in neighbor cache.

When adding a route to 2000::/3 with a next-hop that is not in the
neighbor cache, the route is not preferred over the default.

Tested against 3.9.1-debian and 3.9.8-arch. Not able to reproduce with 3.8.0
$ cat /proc/version
Linux version 3.9.8-1-ARCH (tobias@...ting-i686) (gcc version 4.8.1
(GCC) ) #1 SMP PREEMPT Fri Jun 28 07:43:59 CEST 2013

How to reproduce:

# ip -6 route
2001:db8:ee8c:180::/64 dev eth0  proto kernel  metric 256  expires 86176sec
fe80::/64 dev eth0  proto kernel  metric 256
fe80::/64 dev eth1  proto kernel  metric 256
default via fe80::f6ca:e5ff:fe43:d114 dev eth0  proto ra  metric 1024
expires 1576sec

# ip -6 addr add 2001:db8::1/64 dev eth1
# ip -6 route add 2000::/3 via 2001:db8::2/64

$ ip -6 route show
2001:db8::/64 dev eth1  proto kernel  metric 256
2001:db8:ee8c:180::/64 dev eth0  proto kernel  metric 256  expires 86360sec
2000::/3 via 2001:db8::2 dev eth1  metric 1024
fe80::/64 dev eth0  proto kernel  metric 256
fe80::/64 dev eth1  proto kernel  metric 256
default via fe80::f6ca:e5ff:fe43:d114 dev eth0  proto ra  metric 1024
expires 1760sec


$ ip -6 route get 2a00:1450:4007:806::1001
2a00:1450:4007:806::1001 from :: via fe80::f6ca:e5ff:fe43:d114 dev
eth0  src 2001:db8:ee8c:180:21b:77ff:fe30:9e36  metric 0

# ip -6 neig add 2001:db8::2 dev eth1 lladdr 86:74:4c:45:18:f2 nud permanent

# ip -6 route get 2a00:1450:4007:806::1001
2a00:1450:4007:806::1001 from :: via 2001:db8::2 dev eth1  src
2001:db8::1  metric 0


Workaround:
Next hop has to be in the neighbor cache. Static or dynamic entry.
Sending a ping6 to the next-hop works fine.


Regards,
Pierre.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html