-
Bug
-
Resolution: Unresolved
-
Medium
-
None
-
None
-
None
ip6 nd proxy feature has the following 3 issues:
1. the CLI help & the documentation is incorrect, it says:
vpp# set ip6 nd proxy ? set ip6 nd proxy set ip6 nd proxy <HOST> <INTERFACE>
which does not work, the actual arguments need to be switched (first the interface, then the host):
vpp# set ip6 nd proxy 2001:fd00::10 tap0 unknown input `2001:fd00::10 tap0' vpp# set ip6 nd proxy tap0 2001:fd00::10 vpp#
2. It only allows configuring the proxy for a single address, not for a whole subnet. If whole subnet needs to be configured, it would require sending multiple CLIs / binary APIs (that is too many binary APIs for a /64 IPv6 subnet, for instance)
3. it does not seem to work: (vpp v18.10-22~g13f5dcf9)
vpp# set ip6 nd proxy tap0 2001:fd00::10 vpp# vat# ip6nd_proxy_dump host 2001:fd00::10 sw_if_index 3 vpp# sh inter addr GigabitEthernet0/8/0 (up): L3 2001:fd00::2/64 L3 fe80::a00:27ff:fef3:9cfe/64 tap0 (up): unnumbered, use GigabitEthernet0/8/0 L3 2001:fd00::2/64 L3 fe80::a00:27ff:fef3:9cfe/64
VPP does not respond to ICMP neighbor_solicitation for 2001:fd00::10 on tap0:
Packet 2:
02:52:27:036587: virtio-input
virtio: hw_if_index 3 next-index 4 vring 0 len 86
hdr: flags 0x00 gso_type 0x00 hdr_len 0 gso_size 0 csum_start 0 csum_offset 0 num_buffers 1
02:52:27:036598: ethernet-input
IP6: 00:00:00:00:00:02 -> 33:33:ff:00:00:10
02:52:27:036601: ip6-input
ICMP6: 2001:fd00::2 -> ff02::1:ff00:10
tos 0x00, flow label 0x0, hop limit 255, payload length 32
ICMP neighbor_solicitation checksum 0x3f77
target address 2001:fd00::10
02:52:27:036603: ip6-mfib-forward-lookup
fib 0 entry 2
02:52:27:036607: ip6-mfib-forward-rpf
entry 2 itf -1 flags
02:52:27:036610: ip6-drop
ICMP6: 2001:fd00::2 -> ff02::1:ff00:10
tos 0x00, flow label 0x0, hop limit 255, payload length 32
ICMP neighbor_solicitation checksum 0x3f77
target address 2001:fd00::10
02:52:27:036611: error-drop
ip4-input: Multicast RPF check failed
vagrant@k8s-master:~$ ip -6 neigh 2001:fd00::10 dev vpp1 FAILED
