As the subject says, I'm running FreeBSD 10.3 in a Xen domu with a gentoo linux dom0 host. Currently, I can ping my local network (both IPv4 and IPv6), and I can ping and complete TCP transactions via IPv6, but I can neither ping nor get any other kind of throughput via IPv4 outside of my local network.
I'm using the FreeBSD VM image from the website, specifically the qcow2 image (Xen doesn't seem to like the vhd image for some reason). Under such, I get the following from a 'uname -a':
Samples:
My local rc.conf contents:
Note that I've disabled TSO and LSO on the FreeBSD (domU) side. My gateway is pointing to a pfsense firewall running under another domu on the same host.
I had an issue a while back that prevented the host (and all real network devices) from using the firewall for TCP traffic, but that was resolved by passing the internet-facing NIC directly to the pfsense firewall rather than using the virtual device.
I'm using the FreeBSD VM image from the website, specifically the qcow2 image (Xen doesn't seem to like the vhd image for some reason). Under such, I get the following from a 'uname -a':
Code:
root@:~ # uname -a
FreeBSD 10.3-RELEASE FreeBSD 10.3-RELEASE #0 r297264: Fri Mar 25 02:10:02 UTC 2016 root@releng1.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC amd64Samples:
Code:
root@:~ # ifconfig
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
inet 127.0.0.1 netmask 0xff000000
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
xn0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=3<RXCSUM,TXCSUM>
ether 00:16:3e:fe:ce:af
inet 10.4.12.9 netmask 0xffffff00 broadcast 10.4.12.255
inet6 fe80::216:3eff:fefe:ceaf%xn0 prefixlen 64 scopeid 0x2
inet6 <public::ip> prefixlen 64
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
media: Ethernet manual
status: active
root@:~ # netstat -rn
Routing tables
Internet:
Destination Gateway Flags Netif Expire
default 10.4.12.10 UGS xn0
10.4.12.0/24 link#2 U xn0
10.4.12.9 link#2 UHS lo0
127.0.0.1 link#1 UH lo0
Internet6:
Destination Gateway Flags Netif
Expire
::/96 ::1 UGRS lo0
default 2001:470:5:745::1 UGS xn0
::1 link#1 UH lo0
::ffff:0.0.0.0/96 ::1 UGRS lo0
<public::network>::/64 link#2 U xn0
<public::network>::5 link#2 UHS lo0
fe80::/10 ::1 UGRS lo0
fe80::%lo0/64 link#1 U lo0
fe80::1%lo0 link#1 UHS lo0
fe80::%xn0/64 link#2 U xn0
fe80::216:3eff:fefe:ceaf%xn0 link#2 UHS lo0
ff01::%lo0/32 ::1 U lo0
ff01::%xn0/32 fe80::216:3eff:fefe:ceaf%xn0 U xn0
ff02::/16 ::1 UGRS lo0
ff02::%lo0/32 ::1 U lo0
ff02::%xn0/32 fe80::216:3eff:fefe:ceaf%xn0 U xn0
root@:~ # ping -c4 10.4.12.10
PING 10.4.12.10 (10.4.12.10): 56 data bytes
64 bytes from 10.4.12.10: icmp_seq=0 ttl=64 time=1.330 ms
64 bytes from 10.4.12.10: icmp_seq=1 ttl=64 time=0.449 ms
64 bytes from 10.4.12.10: icmp_seq=2 ttl=64 time=0.558 ms
64 bytes from 10.4.12.10: icmp_seq=3 ttl=64 time=0.169 ms
--- 10.4.12.10 ping statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 0.169/0.627/1.330/0.430 ms
root@:~ # ping -c4 8.8.8.8
PING 8.8.8.8 (8.8.8.8): 56 data bytes
--- 8.8.8.8 ping statistics ---
4 packets transmitted, 0 packets received, 100.0% packet loss
root@:~ # ping6 <router::ip>
PING6(56=40+8+8 bytes) <local:public::ip> --> <router::ip>
16 bytes from <router::ip>, icmp_seq=0 hlim=64 time=1.734 ms
16 bytes from <router::ip>, icmp_seq=1 hlim=64 time=0.611 ms
16 bytes from <router::ip>, icmp_seq=2 hlim=64 time=0.500 ms
16 bytes from <router::ip>, icmp_seq=3 hlim=64 time=0.636 ms
^C
--- <router::ip> ping6 statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 0.500/0.870/1.734/0.501 ms
root@:~ # ping6 -c4 google.com
PING6(56=40+8+8 bytes) <local:public::ip> --> 2607:f8b0:4002:c03::65
16 bytes from 2607:f8b0:4002:c03::65, icmp_seq=0 hlim=48 time=39.873 ms
16 bytes from 2607:f8b0:4002:c03::65, icmp_seq=1 hlim=48 time=41.131 ms
16 bytes from 2607:f8b0:4002:c03::65, icmp_seq=2 hlim=48 time=40.161 ms
16 bytes from 2607:f8b0:4002:c03::65, icmp_seq=3 hlim=48 time=38.208 ms
--- google.com ping6 statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 38.208/39.843/41.131/1.053 ms
Code:
root@:~ # cat /etc/rc.conf
ifconfig_xn0="inet 10.4.12.9 netmask 255.255.255.0 -lro -tso"
defaultrouter="10.4.12.10"
ifconfig_xn0_ipv6="inet6 <local:public::ip> prefixlen 64"
ipv6_defaultrouter="<router::ip>"
hostname="myhostname.mydomain.com"I had an issue a while back that prevented the host (and all real network devices) from using the firewall for TCP traffic, but that was resolved by passing the internet-facing NIC directly to the pfsense firewall rather than using the virtual device.
