Blogs

DAD Jails IPv6 ()

There is a slight issue when it comes to IPv6 and FreeBSD jails: DAD can place a curfew on the services binding to an IPv6 address within a jail. shame

What happens is that IPv6 has something called DAD: Duplicate Address Detection. This is a procedure for determining if an IPv6 address is available on the local link. The procedure has a delay of sorts. In the case of FreeBSD, it is the sysctl net.inet6.ip6.dad_count which defaults to 1.

Read more