Support for sit (ipv6) tunnels

Bug #1799487 reported by Stéphane Graber on 2018-10-23
34
This bug affects 5 people
Affects Status Importance Assigned to Milestone
netplan
High
Unassigned
netplan.io (Ubuntu)
High
Unassigned
Bionic
Undecided
Unassigned
Cosmic
Undecided
Unassigned

Bug Description

[Impact]
Ubuntu users who need to configure IP tunnels for their network.

[Test case]
1) Sign-up / set up an Hurricane Electric tunnel at www.tunnelbroker.net.
2) Configure netplan for the new tunnel. e.g.

network:
  version: 2
  renderer: networkd
  ethernets:
    eth0:
      addresses:
        - 1.1.1.1/24
        - "2001:cafe:face::1/64" # provided by HE as routed /64
      gateway4: 1.1.1.254
  tunnels:
    he-ipv6:
      mode: sit
      remote: 2.2.2.2
      local: 1.1.1.1
      addresses:
        - "2001:dead:beef::2/64"
      gateway6: "2001:dead:beef::1"

3) Run 'netplan apply' or reboot to apply the new configuration.

[Regression potential]
None; this adds a new type of device not previously available to users.

---

Like many I use tunnelbroker.net for IPv6 connectivity on servers that lack native IPv6 connectivity through their provider.

Back in ifupdown, this was done with a nice and short snippet that looked like this:
```
auto he-ipv6
iface he-ipv6 inet6 v4tunnel
    address 2001:470:1c:1d7::2
    netmask 64
    endpoint 216.66.38.58
    local 192.222.186.156
    mtu 1480
    ttl 64
```

There is however no equivalent in netplan that I could find (on 18.04 at least), instead I had to do the following to get networkd to setup the tunnel.

1) Define a netdev (/etc/systemd/network/he-ipv6.netdev)
```
[NetDev]
Name=he-ipv6
Kind=sit
MTUBytes=1480

[Tunnel]
Local=54.39.107.213
Remote=216.66.38.58
TTL=64
```

2) Define a network (/etc/systemd/network/he-ipv6.network)
```
[Match]
Name=he-ipv6

[Network]
Address=2001:470:1c:b62::2/64
Gateway=2001:470:1c:b62::1
```

3) Setup a dependency between my WAN interface and the tunnel (/etc/systemd/network/10-netplan-eth0.network.d/tunnel.conf)
```
[Network]
Tunnel=he-ipv6
```

This then all works fine but has the very annoying side-effect of splitting my network config into a bunch of different pieces with everything in my netplan.yaml except for that tunnel which I have to configure directly in networkd and use systemd unit overrides to add the needed Tunnel statement to the netplan managed wan interface.

Confirming/Triaged. This is already on roadmap, one of the very next things to implement.

Changed in netplan:
status: New → Triaged
importance: Undecided → High
assignee: nobody → Mathieu Trudel-Lapierre (cyphermox)
Daniel Axtens (daxtens) wrote :

This is a dup of LP: #1771742, but seeing as that bug went untriaged I will mark that as a dup of this rather than the other way around.

Changed in netplan:
status: Triaged → Fix Committed
Alec Larsen (aleclarsen42) wrote :

I'm sorry. I did not mean to change the status of this bug, and it seems I do not have the permission to change it back.

Changed in netplan:
status: Fix Committed → Fix Released
Changed in netplan:
status: Fix Released → Fix Committed

This has landed already in Disco:

 netplan.io (0.95) disco; urgency=medium
 .
   * New upstream release:
     - Added support for WPA Enterprise / 802.1x authentication (LP: #1739578)
     - Added support for setting up IP tunnels; supporting the types: ipip,
       gretap, VTI, ISATAP (NetworkManager only), sit, gre, ipip6 and ip6ip6.
       + Fixes sit (ipv6) tunnels using Hurricane Electric (LP: #1799487)
     - Add support to override networkd UseMTU setting (LP: #1807273)
     - Generate output files in dependency order
     - Refactored unit and integration tests, along with various cleanups.
     - Add DHCP overrides to control route usage and default metric for DHCP
       routes. (LP: #1776228)
     - Mitigate against bad matching on devices behind bonds then they share
       the same MAC from a physical interface. (LP: #1804861)
     - Added snapcraft.yaml.

Changed in netplan.io (Ubuntu):
status: New → Fix Released
importance: Undecided → High
Changed in netplan:
status: Fix Committed → Fix Released
assignee: Mathieu Trudel-Lapierre (cyphermox) → nobody
description: updated

Hello Stéphane, or anyone else affected,

Accepted netplan.io into cosmic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/netplan.io/0.96-0ubuntu0.18.10.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-cosmic to verification-done-cosmic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-cosmic. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

Changed in netplan.io (Ubuntu Cosmic):
status: New → Fix Committed
tags: added: verification-needed verification-needed-cosmic
Timo Aaltonen (tjaalton) wrote :

Hello Stéphane, or anyone else affected,

Accepted netplan.io into bionic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/netplan.io/0.96-0ubuntu0.18.04.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-bionic to verification-done-bionic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-bionic. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

Changed in netplan.io (Ubuntu Bionic):
status: New → Fix Committed
tags: added: verification-needed-bionic
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Duplicates of this bug

Other bug subscribers