Alexander Bluhm: > I also see issues with IPv6 and NDP, but no IPsec involved. There > are several other threads on bugs@ about broken IPv6. > > It seems that sending neighbor solicitation retries for expired ND > entries does not work. The diff below helps in my case, although > it is only a workaround and not MP safe. It would be interesting > to know wether it also affects your scenario.
It does not. > --- netinet6/nd6.c 3 Oct 2016 12:33:21 -0000 1.193 > +++ netinet6/nd6.c 13 Oct 2016 21:47:25 -0000 > @@ -827,7 +827,7 @@ nd6_free(struct rtentry *rt, int gc) > * caches, and disable the route entry not to be used in already > * cached routes. > */ > - if (!ISSET(rt->rt_flags, RTF_STATIC|RTF_CACHED)) > + if (!ISSET(rt->rt_flags, RTF_STATIC)) > rtdeletemsg(rt, ifp, ifp->if_rdomain); > splx(s); > -- Christian "naddy" Weisgerber na...@mips.inka.de