Comment 1 for bug 1858503

Revision history for this message
XSpielinbox (xspielinbox) wrote :

I can still reproduce this issue in Ubuntu 22.04 and Ubuntu 22.10.

I agree that it would be very good to change the default. This is especially dangerous as the kernel default is not only accept_ra=1, but also autoconf=1, what Netplan does not override for the interface when setting a static IPv6. This results in the machine not only accepting potential router advertisements but also possibly configuring itself another unexpected IPv6. This can even result in machines being unexpectedly exposed on the public internet, even though there were not supposed to, because the router/firewall configuration was not considering this extra IPv6.

As a user I expect that when I configure static addresses and a gateway the computer will only have these static addresses and always use my configured gateway (except link-local addresses, of course).

Ifupdown in Debian does it exactly the proposed way too, according to their changelog: When one sets a static IPv6 autoconf gets disabled and when a static gateway is configured router advertisements get disabled as well.

I would therefore also be very happy, if this could be changed or at least be very clear during the configuration and in the documentation that the Netplan config has these absurd side effects.

And wouldn't it be for LP#1807569 I wouldn't be aware of any option at the moment to disable SLAAC within Netplan.