Unable to specify TTL value for tunnels

Bug #1846783 reported by Rudy Adams
46
This bug affects 8 people
Affects Status Importance Assigned to Milestone
Netplan
Fix Released
Undecided
Unassigned

Bug Description

netplan has the ability to configure SIT tunnels after #1799487. However, it doesn't expose the setting item of configuring the TTL of a tunnel. This can cause issues, especially for users trying to do traceroute over a 6in4 tunnel like the popular one from tunnelbroker.net

According to ip-tunnel(8), the default TTL value for an IPv4 tunnel is "inherit". In the case of an SIT tunnel, the TTL of the encapsulating IPv4 packet will be the same as the Hop Limit field of the IPv6 packet in it. The first few packets sent by traceroute will expire before they reach the other endpoint of tunnel, and the IPv6 applications in the upper layer could not detect it. It appears as if the first few hops are not responding ICMP Time Expired messages, and after that everything seems to be fine.
Such behaviour makes traceroute somehow unusable, and it violates Section 3.3 of RFC4213, which says these tunnels are 'modeled as "single-hop" from the IPv6 perspective'.

The example configuration provided by tunnelbroker.net set the TTL of the tunnel to 255. I think netplan should expose such setting to users. I also wonder if it can be backported to bionic if this feature gets added.

Revision history for this message
Konrad Zemek (kzemek) wrote :

Similarly for other kinds of tunnels, e.g. GRE.

Revision history for this message
Fionera (fionera) wrote :

I need to override this when I run BGP over a SIT Tunnel. Now I have to do this with a init.rc script as workaround.

Revision history for this message
Stéphane Graber (stgraber) wrote :

Got hit by this here too, this is really needed for anyone using sit tunnels at least.

Changed in netplan:
status: New → Confirmed
tags: added: id-5f4911260b04803b0c63d23c
Revision history for this message
Edle8 (edle8) wrote :

Same problem here when trying to configure custom TTL for a IPIP tunnel.

Revision history for this message
Lukas Märdian (slyon) wrote :

There is some work going on here: https://github.com/CanonicalLtd/netplan/pull/139

Revision history for this message
Lukas Märdian (slyon) wrote :

This should be fixed as of v0.102

Changed in netplan:
status: Confirmed → Fix Released
Revision history for this message
Lukas Märdian (slyon) wrote :

Unfortunately, this feature introduced an ABI incompatibility and we needed to remove it from the 0.102 release. So I'm re-opening the bug report.

Please see: https://github.com/canonical/netplan/pull/194

Changed in netplan:
status: Fix Released → Confirmed
status: Confirmed → Triaged
Revision history for this message
Lukas Märdian (slyon) wrote :

Fixed as of v0.103

Changed in netplan:
status: Triaged → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.