Bug#850620: [Pkg-utopia-maintainers] Bug#850620: Bug#850620: [network-manager] does not update lifetime of temporary ipv6 addresses anymore, resulting in connection breakage
Control: reopen -1 ! Control: found -1 1.14.6-2 On Tue, 7 Feb 2017 23:31:06 +0100 Michael Biebl < bi...@debian.org > wrote: > Version: 1.6.0-1 > > Am 25.01.2017 um 20:43 schrieb Maximilian Engelhardt: > > I can confirm this is fixed by the upstream patch. > > Thanks for testing! > > > It would be great to get this fixed for stretch. In my test I just had to > > backport the upstream fix. > > This patch is part of 1.6.0, so closing accordingly. > > Regards, > Michael Hi, I am hitting this on my laptop running buster. It's pretty much as reported, the mngtmpaddr gets its lifetime updated when a RA is received, but the temporary addresses do not, so random connections break every 10 minutes. Is anyone else experiencing this? Is it possible that it regressed, since it was fixed upstream long ago? $ ip addr show dev enx0050b6b7bd60 | grep -A1 inet6 /64 scope global dynamic mngtmpaddr noprefixroute valid_lft 594sec preferred_lft 594sec $ ip addr show dev enx0050b6b7bd60 | grep -A1 :9554:71a7:3057:5969 inet6 :9554:71a7:3057:5969/64 scope global temporary dynamic valid_lft 93sec preferred_lft 93sec As a workaround without breaking privacy, enabling RFC7217 (address randomly generated per-LAN) works as an alternative by setting: ipv6.ip6-privacy 0 ipv6.addr-gen-mode stable-privacy Here's a (sanitized) debug log output when a RA arrives: Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0703] ndisc-lndp[0x55cadac8e440,"enx0050b6b7bd60"]: received router advertisement at 105126 Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0704] ndisc[0x55cadac8e440,"enx0050b6b7bd60"]: scheduling next now/lifetime check: 600 seconds Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0704] ndisc[0x55cadac8e440,"enx0050b6b7bd60"]: neighbor discovery configuration changed [GARS]: Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0704] ndisc[0x55cadac8e440,"enx0050b6b7bd60"]: dhcp-level otherconf Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0705] ndisc[0x55cadac8e440,"enx0050b6b7bd60"]: gateway pref medium exp 599.1357 Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0705] ndisc[0x55cadac8e440,"enx0050b6b7bd60"]: address exp 599.1357 Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0705] ndisc[0x55cadac8e440,"enx0050b6b7bd60"]: address exp 7127.1357 Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0706] ndisc[0x55cadac8e440,"enx0050b6b7bd60"]: route fd00:0:0:1::/64 via :: pref medium exp 7127.1357 Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0706] ndisc[0x55cadac8e440,"enx0050b6b7bd60"]: route ::/64 via :: pref medium exp 599.1357 Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0706] ndisc[0x55cadac8e440,"enx0050b6b7bd60"]: dns_server ::1 exp 7199.1357 Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0707] device[0x55cadac7b750] (enx0050b6b7bd60): activation-stage: schedule activate_stage5_ip6_config_commit,v6 (id 51370) Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0708] device[0x55cadac7b750] (enx0050b6b7bd60): activation-stage: invoke activate_stage5_ip6_config_commit,v6 (id 51370) Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0714] device[0x55cadac7b750] (enx0050b6b7bd60): ip6-config: update (commit=1, new-config=0x55cadacc88d0) Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0716] platform: address: adding or updating IPv6 address: /64 lft forever pref forever lifetime 105126-0[4294967295,4294967295] dev 4 flags permanent,noprefixroute src unknown Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0719] platform-linux: do-add-ip6-address[4: ]: success Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0719] platform: address: adding or updating IPv6 address: /64 lft 600sec pref 600sec lifetime 105126-0[600,600] dev 4 flags mngtmpaddr,noprefixroute src unknown Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0722] platform: signal: address 6 changed: /64 lft 600sec pref 600sec lifetime 105126-105126[600,600] dev 4 flags mngtmpaddr,noprefixroute src kernel Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0722] device[0x55cadac7b750] (enx0050b6b7bd60): queued IP6 config change Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0723] platform: signal: address 6 changed: :b5c1:cabf:cc35:4873/64 lft 600sec pref 600sec lifetime 105126-105126[600,600] dev 4 flags secondary src kernel Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0724] platform-linux: do-add-ip6-address[4: ]: success Jul 29 21:31:07 bluca-lenovo NetworkManager[625]: [1564432267.0724] platform: address: adding or updating IPv6 address: /64 lft 7128sec pref 7128sec lifetime 105126-0[7128,7128] dev 4 flags mngtmpaddr,noprefixroute src unknown Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:
Bug#850620: [Pkg-utopia-maintainers] Bug#850620: [network-manager] does not update lifetime of temporary ipv6 addresses anymore, resulting in connection breakage
On Sonntag, 8. Januar 2017 17:34:09 CET Michael Biebl wrote: > Hi > > Am 08.01.2017 um 16:48 schrieb Maximilian Engelhardt: > > Package: network-manager > > Version: 1.4.4-1 > > Severity: important > > > > --- Please enter the report below this line. --- > > > > After updating to network-manger 1.4.4-1 I noticed a lot of breakages in > > ssh connections. It turned out this is related to temporary ipv6 > > addresses being deprecated, deleted and newly created at a rapid rate, > > thus after a short time the address used by my ssh connection vanishes. > > > > Having a closer look with "ip addr show" explained what is going on. My > > router advertisements have a short lifetime configured. A new router > > advertisement does only update the lifetime of the mngtmpaddr but not the > > temporary addresses. This causes them to time out and permanently being > > deleted and newly created. > > > > Disabling network-manager doesn't show this problem. Also downgrading > > network- manager to version 1.4.2-3 fixes this issue for me. > > This doesn't look like a downstream specific issue, so it would be great > if you can file this upstream at > https://bugzilla.gnome.org/enter_bug.cgi?product=NetworkManager > > You might check if it has already been reported at > https://bugzilla.gnome.org/page.cgi?id=browse.html=NetworkManager > > Once you have an upstream bug number, please report back so we can mark > this bug accordingly. > > Regards, > Michael I can confirm this is fixed by the upstream patch. It would be great to get this fixed for stretch. In my test I just had to backport the upstream fix. Thanks, Maxi signature.asc Description: This is a digitally signed message part.
Bug#850620: [Pkg-utopia-maintainers] Bug#850620: [network-manager] does not update lifetime of temporary ipv6 addresses anymore, resulting in connection breakage
Hi Am 08.01.2017 um 16:48 schrieb Maximilian Engelhardt: > Package: network-manager > Version: 1.4.4-1 > Severity: important > > --- Please enter the report below this line. --- > > After updating to network-manger 1.4.4-1 I noticed a lot of breakages in ssh > connections. It turned out this is related to temporary ipv6 addresses being > deprecated, deleted and newly created at a rapid rate, thus after a short > time > the address used by my ssh connection vanishes. > > Having a closer look with "ip addr show" explained what is going on. My > router > advertisements have a short lifetime configured. A new router advertisement > does only update the lifetime of the mngtmpaddr but not the temporary > addresses. This causes them to time out and permanently being deleted and > newly created. > > Disabling network-manager doesn't show this problem. Also downgrading network- > manager to version 1.4.2-3 fixes this issue for me. This doesn't look like a downstream specific issue, so it would be great if you can file this upstream at https://bugzilla.gnome.org/enter_bug.cgi?product=NetworkManager You might check if it has already been reported at https://bugzilla.gnome.org/page.cgi?id=browse.html=NetworkManager Once you have an upstream bug number, please report back so we can mark this bug accordingly. Regards, Michael -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth? signature.asc Description: OpenPGP digital signature
Bug#850620: [network-manager] does not update lifetime of temporary ipv6 addresses anymore, resulting in connection breakage
Package: network-manager Version: 1.4.4-1 Severity: important --- Please enter the report below this line. --- After updating to network-manger 1.4.4-1 I noticed a lot of breakages in ssh connections. It turned out this is related to temporary ipv6 addresses being deprecated, deleted and newly created at a rapid rate, thus after a short time the address used by my ssh connection vanishes. Having a closer look with "ip addr show" explained what is going on. My router advertisements have a short lifetime configured. A new router advertisement does only update the lifetime of the mngtmpaddr but not the temporary addresses. This causes them to time out and permanently being deleted and newly created. Disabling network-manager doesn't show this problem. Also downgrading network- manager to version 1.4.2-3 fixes this issue for me. This bugs breaks all ipv6 network connections that are active longer than a few minutes for me. Thanks, Maxi --- System information. --- Architecture: Kernel: Linux 4.8.0-2-amd64 Debian Release: stretch/sid 500 testing httpredir.debian.org 500 stable security.debian.org --- Package information. --- Depends (Version) | Installed ==-+-= libaudit1 (>= 1:2.2.1) | 1:2.6.7-1 libbluetooth3(>= 4.91) | 5.43-1 libc6(>= 2.17) | libglib2.0-0 (>= 2.43.2) | libgnutls30 (>= 3.5.0) | libgudev-1.0-0(>= 165) | libmm-glib0 (>= 1.0.0) | libndp0 (>= 1.2) | libnewt0.52| libnl-3-200(>= 3.2.21) | libnm0 (>= 1.4.0) | libpolkit-agent-1-0 (>= 0.99) | libpolkit-gobject-1-0 (>= 0.104) | libreadline7 (>= 6.0) | libselinux1 (>= 1.32) | libsoup2.4-1 (>= 2.40) | libsystemd0 (>= 209) | libteamdctl0 (>= 1.9) | libuuid1 (>= 2.16) | init-system-helpers (>= 1.18~) | lsb-base (>= 3.2-14) | wpasupplicant (>= 0.7.3-1) | dbus(>= 1.1.2) | udev | adduser| libpam-systemd | policykit-1| Recommends(Version) | Installed ===-+- ppp | 2.4.7-1+4 dnsmasq-base| 2.76-5 iptables| 1.6.0+snapshot20161117-4 modemmanager| crda| 3.13-1+b2 isc-dhcp-client (>= 4.1.1-P1-4) | 4.3.5-1 iputils-arping | 3:20161105-1 Suggests (Version) | Installed -+-=== libteam-utils| signature.asc Description: This is a digitally signed message part.