On Thu, Mar 14, 2019 at 10:43:03AM +0100, Claudio Jeker wrote:
> On Thu, Mar 14, 2019 at 10:36:58AM +0100, Otto Moerbeek wrote:
> > Hi,
> >
> > So i have a little IPv6 problem.
> >
> > I have a machine in colocation that has IPv6. I have my home cable
> > modem connection that does not have it.
> >
> > So I thought: I make my own tunnel. First I tried gif(4), that worked,
> > but only after some fighting with mtu settings on all hosts on my home
> > net via rad. Performance was kinda bad. So I'm looking for an
> > alternative. I thougt: IPSEC should be able to do this.
> >
> > I have a flow from my locally created IPv6 net to any and vice versa.
> > THe flow itself works.
> >
> > There I ran into the trouble that you cannot specify a default
> > gateway, since my remote gw (the host in colo) it is not reachable
> > according to route(8).
> >
> > How does one solve the default route problem? I never really
> > understood how routing works in the presense of IPSEC flows.
> >
>
> IPSec flows steal the traffic away before it is being sent out. You still
> need routes in place to get to this point though. In your case adding a
> dummy default route should work. Never tried but I think you should be
> able to use the loopback for this and add a route like 'route add -inet6
> default ::1' also don't forget to enable net.inet6.ip6.forwarding
>
> --
> :wq Claudio
>
Indeed, that seems to work. Thanks,
-Otto
