Pinging the container from the host and the other way around works. Also external pinging of the container IPv6 works.
Does this state anything it shouldn’t?
Host ip -6 r
:
2a02:c207:1234:1234::1 dev eth0 proto kernel metric 256 pref medium
2a02:c207:1234:1234::/64 dev lxdbr0 proto kernel metric 256 expires 3077sec pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev lxdbr0 proto kernel metric 256 pref medium
default via fe80::1 dev eth0 proto static metric 1024 pref medium
Container ip -6 r
:
2a02:c207:1234:1234::/64 dev eth0 proto ra metric 100 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
default via fe80::4047:b0ff:fe37:1e86 dev eth0 proto ra metric 100 mtu 1500 pref medium
I guess it’s that host lxdbr0 line with the expires 3077sec. How can one make it persistent?
Also shouldn’t the container have the single ipv6 that I see when using lxc list
instead of the /64?
(Side question, where does the weird utility ipv6 in the last line of the container ip -6 r
come from?)
And sudo tcpdump -l -nn -i lxdbr0 icmp6 and 'ip6[40] = 134'
on the host:
user@server:~$ sudo tcpdump -l -nn -i lxdbr0 icmp6 and 'ip6[40] = 134'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on lxdbr0, link-type EN10MB (Ethernet), capture size 262144 bytes
17:04:25.587085 IP6 fe80::4047:b0ff:fe37:1e86 > ff02::1: ICMP6, router advertisement, length 88
Running only sudo tcpdump -l -nn -i lxdbr0 icmp6
shows some destination unreachable
problems:
(2a02:c207:1234:1234:216:3eff:fe80:38e2 is one of five container ipv6)
user@server:~$ sudo tcpdump -l -nn -i lxdbr0 icmp6
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on lxdbr0, link-type EN10MB (Ethernet), capture size 262144 bytes
17:14:33.142934 IP6 2a02:c207:1234:1234:216:3eff:fe80:38e2 > fe80::4047:b0ff:fe37:1e86: ICMP6, neighbor advertisement, tgt is 2a02:c207:1234:1234:216:3eff:fe80:38e2, length 24
17:14:58.994779 IP6 fe80::4047:b0ff:fe37:1e86 > 2a02:c207:1234:1234:216:3eff:fe88:5fce: ICMP6, neighbor solicitation, who has 2a02:c207:1234:1234:216:3eff:fe88:5fce, length 32
17:14:58.994742 IP6 fe80::216:3eff:fe88:5fce > fe80::4047:b0ff:fe37:1e86: ICMP6, neighbor solicitation, who has fe80::4047:b0ff:fe37:1e86, length 32
17:14:58.994991 IP6 fe80::4047:b0ff:fe37:1e86 > fe80::216:3eff:fe88:5fce: ICMP6, neighbor advertisement, tgt is fe80::4047:b0ff:fe37:1e86, length 24
17:14:58.995042 IP6 2a02:c207:1234:1234:216:3eff:fe88:5fce > fe80::4047:b0ff:fe37:1e86: ICMP6, neighbor advertisement, tgt is 2a02:c207:1234:1234:216:3eff:fe88:5fce, length 24
17:15:04.114833 IP6 fe80::4047:b0ff:fe37:1e86 > fe80::216:3eff:fe88:5fce: ICMP6, neighbor solicitation, who has fe80::216:3eff:fe88:5fce, length 32
17:15:04.118804 IP6 fe80::216:3eff:fe88:5fce > fe80::4047:b0ff:fe37:1e86: ICMP6, neighbor advertisement, tgt is fe80::216:3eff:fe88:5fce, length 24
17:15:15.122715 IP6 fe80::4047:b0ff:fe37:1e86 > 2a02:c207:1234:1234:216:3eff:fed2:5a0e: ICMP6, neighbor solicitation, who has 2a02:c207:1234:1234:216:3eff:fed2:5a0e, length 32
17:15:15.122911 IP6 2a02:c207:1234:1234:216:3eff:fed2:5a0e > fe80::4047:b0ff:fe37:1e86: ICMP6, neighbor advertisement, tgt is 2a02:c207:1234:1234:216:3eff:fed2:5a0e, length 24
17:15:19.218692 IP6 fe80::4047:b0ff:fe37:1e86 > 2a02:c207:1234:1234:216:3eff:fe93:e8b1: ICMP6, neighbor solicitation, who has 2a02:c207:1234:1234:216:3eff:fe93:e8b1, length 32
17:15:19.218852 IP6 2a02:c207:1234:1234:216:3eff:fe93:e8b1 > fe80::4047:b0ff:fe37:1e86: ICMP6, neighbor advertisement, tgt is 2a02:c207:1234:1234:216:3eff:fe93:e8b1, length 24
17:15:20.754705 IP6 fe80::4047:b0ff:fe37:1e86 > 2a02:c207:1234:1234:216:3eff:fe80:38e2: ICMP6, neighbor solicitation, who has 2a02:c207:1234:1234:216:3eff:fe80:38e2, length 32
17:15:20.754919 IP6 2a02:c207:1234:1234:216:3eff:fe80:38e2 > fe80::4047:b0ff:fe37:1e86: ICMP6, neighbor advertisement, tgt is 2a02:c207:1234:1234:216:3eff:fe80:38e2, length 24
17:15:23.726837 IP6 2001:7f8::3417:0:1 > 2a02:c207:1234:1234:216:3eff:fe80:38e2: ICMP6, destination unreachable, unreachable address 2400:cb00:71:1024::a29e:5d92, length 80
17:15:24.728178 IP6 2001:7f8::3417:0:1 > 2a02:c207:1234:1234:216:3eff:fe80:38e2: ICMP6, destination unreachable, unreachable address 2400:cb00:71:1024::a29e:5d92, length 80
17:15:25.767583 IP6 2001:7f8::3417:0:1 > 2a02:c207:1234:1234:216:3eff:fe80:38e2: ICMP6, destination unreachable, unreachable address 2400:cb00:71:1024::a29e:5d92, length 80
17:15:26.453283 IP6 2001:7f8::3417:0:1 > 2a02:c207:1234:1234:216:3eff:fe80:38e2: ICMP6, destination unreachable, unreachable address 2400:cb00:71:1024::a29e:5d92, length 68
17:15:26.773007 IP6 2001:7f8::3417:0:1 > 2a02:c207:1234:1234:216:3eff:fe80:38e2: ICMP6, destination unreachable, unreachable address 2400:cb00:71:1024::a29e:5d92, length 80
17:16:07.602719 IP6 fe80::4047:b0ff:fe37:1e86 > 2a02:c207:1234:1234:216:3eff:fe80:38e2: ICMP6, neighbor solicitation, who has 2a02:c207:1234:1234:216:3eff:fe80:38e2, length 32
17:16:07.603002 IP6 2a02:c207:1234:1234:216:3eff:fe80:38e2 > fe80::4047:b0ff:fe37:1e86: ICMP6, neighbor advertisement, tgt is 2a02:c207:1234:1234:216:3eff:fe80:38e2, length 24
17:16:13.490703 IP6 fe80::4047:b0ff:fe37:1e86 > 2a02:c207:1234:1234:216:3eff:fed2:5a0e: ICMP6, neighbor solicitation, who has 2a02:c207:1234:1234:216:3eff:fed2:5a0e, length 32
17:16:13.490852 IP6 2a02:c207:1234:1234:216:3eff:fed2:5a0e > fe80::4047:b0ff:fe37:1e86: ICMP6, neighbor advertisement, tgt is 2a02:c207:1234:1234:216:3eff:fed2:5a0e, length 24
Here’s ps aux | grep dnsmasq
on the host:
user@server:~$ ps aux | grep dnsmasq
user 21645 0.0 0.0 11464 964 pts/1 S+ 17:00 0:00 grep --color=auto dnsmasq
lxd 28143 0.0 0.0 49964 3592 ? Ss May14 0:15 dnsmasq --keep-in-foreground --strict-order --bind-interfaces --except-interface=lo --no-ping --interface=lxdbr0 --quiet-dhcp --quiet-dhcp6 --quiet-ra --listen-address=10.10.100.1 --dhcp-no-override --dhcp-authoritative --dhcp-leasefile=/var/snap/lxd/common/lxd/networks/lxdbr0/dnsmasq.leases --dhcp-hostsfile=/var/snap/lxd/common/lxd/networks/lxdbr0/dnsmasq.hosts --dhcp-range 10.10.100.2,10.10.100.254,1h --listen-address=2a02:c207:1234:1234::1 --enable-ra --dhcp-range ::,constructor:lxdbr0,ra-only -s lxd -S /lxd/ --conf-file=/var/snap/lxd/common/lxd/networks/lxdbr0/dnsmasq.raw -u lxd