The Grumpy Troll

Ramblings of a grumpy troll.

IPv6 troubles

As those who know The Grumpy Troll are aware, the troll uses IPv6 fairly extensively. I like it as a protocol suite, mostly. I have some negative opinions about the standards work behind transition mechanisms and some of the areas and will acknowledge that many of the improvements have been back-ported to IPv4 already. But still, I like the expanded address-space for my own use.

I'm having to disable IPv6 to home for the time being, until I am Less Grumpy. I can use:
  1. HE.net tunnel: intermittent hangs and connection drops, makes long-lived SSH painful
  2. sixxs.net tunnel: MTU problems to a box at Cambridge University, used for Exim development, despite my having a 1280 MTU on my tunnel. Effect: connection hangs shortly after init.
  3. 6to4: sigh

6to4 used to work just fine for me, mostly. When there are glitches it can be hard to debug though, and it was a little irritating being on the West Coast of the USA and having all my traffic exit via a place in Germany. Fortunately, my colo-box is in The Netherlands, so that worked out fine, and actually had a slightly lower latency than native IPv4 connectivity. Route optimisation.

Alas, the lack of determinism in the reverse path means that, when I turn up 6to4 (East Coast, Comcast business class) now, I have lost return connectivity from my colo-box. The machine at Cambridge is fine. When I ping my colo-box, the ICMPv6 packets make it there, return packets are generated, but they don't reach me. The reverse path stops in telia.net. Administrative prohibition!

Comcast turned up 6to4 relays. That's nice. But peering spats are an area I just don't want to go into. *sigh*

UPDATE: I forgot that the diagnostic codes in traceroute6 differ from those in traceroute. The !A does not mean Administrative prohibition, it means address unreachable. Admin prohibition moved to !P — oops. Consistency, who needs it?

Comments

Phil P
They're in a thread on exim-dev. Looks like something is breaking PMTUD and I don't have sufficient insight along the path to figure out where. (Best argument yet for not using a closed-source router, the Apple Airport I have and otherwise like).
Tony Finch
If you can give me more details of the peoblem with tahini I'll get our networks guys to investigate.