eve icon indicating copy to clipboard operation
eve copied to clipboard

[WIP] Stable IPv6 addresses

Open eriknordmark opened this issue 4 years ago • 6 comments

We switched to RFC7217 but are not setting a secret hence the IPv6 addresses differ on each boot.

eriknordmark avatar Aug 12 '21 19:08 eriknordmark

this seems to be sitting on top of that other questionable PR. Any chance we can split those? (so that IPv6 stuff gets in separately) @eriknordmark ?

That was why it was a WIP/Draft. Cleaned it up. But need some tweak because the IPv6 addresses still change on EVE-OS reboot.

eriknordmark avatar Aug 24 '21 11:08 eriknordmark

LGTM. Any reason not to merge this @eriknordmark ?

Yes, because it isn't sufficient. IPv6 addresses still change on every device reboot.

eriknordmark avatar Aug 26 '21 06:08 eriknordmark

Hey @eriknordmark -- this has been open for quite a long time now -- any updates on what do you plan to do with this?

rvs avatar Nov 03 '21 16:11 rvs

Yes, because it isn't sufficient. IPv6 addresses still change on every device reboot

@eriknordmark Erik, I assume we need to set 'addr_gen_mode = 2' as well:

addr_gen_mode - INTEGER
         Defines how link-local and autoconf addresses are generated.

         0: generate address based on EUI64 (default)
         1: do no generate a link-local address, use EUI64 for addresses generated
            from autoconf
         2: generate stable privacy addresses, using the secret from
            stable_secret (RFC7217)
         3: generate stable privacy addresses, using a random secret if unset

rouming avatar Dec 05 '22 09:12 rouming