Thanks! This system is using netplan, with ipv6-privacy enabled in netplan (subsequent to the fix in bug #1750392):
root@pentos:~# cat /etc/netplan/01-netcfg.yaml
# This file describes the network interfaces available on your system
# For more information, see netplan(5).
network:
version: 2
renderer: networkd
ethernets:
ens5:
dhcp4: true
ipv6-privacy: true
The issue reproduces with the ens5 interface. Stopping systemd-networkd does not change any addresses, but starting it again removes all the "deprecated" addresses, even if they are in use by TCP connections:
root@pentos:~# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether [mac-redacted] brd ff:ff:ff:ff:ff:ff
inet 192.168.1.103/24 brd 192.168.1.255 scope global dynamic ens5
valid_lft 52839sec preferred_lft 52839sec
inet6 [redacted-ipv6-/64]:8d03:bfce:131d:190/64 scope global temporary dynamic
valid_lft 596sec preferred_lft 596sec
inet6 [redacted-ipv6-/64]:306e:2bf2:9d28:ef32/64 scope global temporary deprecated dynamic
valid_lft 596sec preferred_lft 0sec
inet6 [redacted-ipv6-/64]:c060:f52:5638:10e9/64 scope global temporary deprecated dynamic
valid_lft 596sec preferred_lft 0sec
inet6 [redacted-ipv6-/64]:d941:e7ff:cc75:9968/64 scope global temporary deprecated dynamic
valid_lft 596sec preferred_lft 0sec
inet6 [redacted-ipv6-/64]:2dae:1ae3:c572:ed57/64 scope global temporary deprecated dynamic
valid_lft 596sec preferred_lft 0sec
inet6 [redacted-ipv6-/64]:90ec:5051:54de:f345/64 scope global temporary deprecated dynamic
valid_lft 596sec preferred_lft 0sec
inet6 [redacted-ipv6-/64]:5497:3bdc:6452:c67f/64 scope global temporary deprecated dynamic
valid_lft 596sec preferred_lft 0sec
inet6 [redacted-ipv6-/64]:[slaac-redacted]/64 scope global dynamic mngtmpaddr noprefixroute
valid_lft 596sec preferred_lft 596sec
inet6 fe80::[ll-redacted]/64 scope link
valid_lft forever preferred_lft forever
root@pentos:~# systemctl stop systemd-networkd
root@pentos:~# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether [mac-redacted] brd ff:ff:ff:ff:ff:ff
inet 192.168.1.103/24 brd 192.168.1.255 scope global dynamic ens5
valid_lft 52794sec preferred_lft 52794sec
inet6 [redacted-ipv6-/64]:8d03:bfce:131d:190/64 scope global temporary dynamic
valid_lft 587sec preferred_lft 587sec
inet6 [redacted-ipv6-/64]:306e:2bf2:9d28:ef32/64 scope global temporary deprecated dynamic
valid_lft 587sec preferred_lft 0sec
inet6 [redacted-ipv6-/64]:c060:f52:5638:10e9/64 scope global temporary deprecated dynamic
valid_lft 587sec preferred_lft 0sec
inet6 [redacted-ipv6-/64]:d941:e7ff:cc75:9968/64 scope global temporary deprecated dynamic
valid_lft 587sec preferred_lft 0sec
inet6 [redacted-ipv6-/64]:2dae:1ae3:c572:ed57/64 scope global temporary deprecated dynamic
valid_lft 587sec preferred_lft 0sec
inet6 [redacted-ipv6-/64]:90ec:5051:54de:f345/64 scope global temporary deprecated dynamic
valid_lft 587sec preferred_lft 0sec
inet6 [redacted-ipv6-/64]:5497:3bdc:6452:c67f/64 scope global temporary deprecated dynamic
valid_lft 587sec preferred_lft 0sec
inet6 [redacted-ipv6-/64]:[slaac-redacted]/64 scope global dynamic mngtmpaddr noprefixroute
valid_lft 587sec preferred_lft 587sec
inet6 fe80::[ll-redacted]/64 scope link
valid_lft forever preferred_lft forever
root@pentos:~# systemctl start systemd-networkd
root@pentos:~# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether [mac-redacted] brd ff:ff:ff:ff:ff:ff
inet 192.168.1.103/24 brd 192.168.1.255 scope global dynamic ens5
valid_lft 86386sec preferred_lft 86386sec
inet6 [redacted-ipv6-/64]:8d03:bfce:131d:190/64 scope global temporary dynamic
valid_lft 598sec preferred_lft 598sec
inet6 [redacted-ipv6-/64]:[slaac-redacted]/64 scope global dynamic mngtmpaddr noprefixroute
valid_lft 598sec preferred_lft 598sec
inet6 fe80::[ll-redacted]/64 scope link
valid_lft forever preferred_lft forever
root@pentos:~#
Thanks! This system is using netplan, with ipv6-privacy enabled in netplan (subsequent to the fix in bug #1750392):
root@pentos:~# cat /etc/netplan/ 01-netcfg. yaml
# This file describes the network interfaces available on your system
# For more information, see netplan(5).
network:
version: 2
renderer: networkd
ethernets:
ens5:
dhcp4: true
ipv6-privacy: true
The issue reproduces with the ens5 interface. Stopping systemd-networkd does not change any addresses, but starting it again removes all the "deprecated" addresses, even if they are in use by TCP connections:
root@pentos:~# ip addr UP,LOWER_ UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 MULTICAST, UP,LOWER_ UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 ipv6-/64] :8d03:bfce: 131d:190/ 64 scope global temporary dynamic ipv6-/64] :306e:2bf2: 9d28:ef32/ 64 scope global temporary deprecated dynamic ipv6-/64] :c060:f52: 5638:10e9/ 64 scope global temporary deprecated dynamic ipv6-/64] :d941:e7ff: cc75:9968/ 64 scope global temporary deprecated dynamic ipv6-/64] :2dae:1ae3: c572:ed57/ 64 scope global temporary deprecated dynamic ipv6-/64] :90ec:5051: 54de:f345/ 64 scope global temporary deprecated dynamic ipv6-/64] :5497:3bdc: 6452:c67f/ 64 scope global temporary deprecated dynamic ipv6-/64] :[slaac- redacted] /64 scope global dynamic mngtmpaddr noprefixroute ll-redacted] /64 scope link UP,LOWER_ UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 MULTICAST, UP,LOWER_ UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 ipv6-/64] :8d03:bfce: 131d:190/ 64 scope global temporary dynamic ipv6-/64] :306e:2bf2: 9d28:ef32/ 64 scope global temporary deprecated dynamic ipv6-/64] :c060:f52: 5638:10e9/ 64 scope global temporary deprecated dynamic ipv6-/64] :d941:e7ff: cc75:9968/ 64 scope global temporary deprecated dynamic ipv6-/64] :2dae:1ae3: c572:ed57/ 64 scope global temporary deprecated dynamic ipv6-/64] :90ec:5051: 54de:f345/ 64 scope global temporary deprecated dynamic ipv6-/64] :5497:3bdc: 6452:c67f/ 64 scope global temporary deprecated dynamic ipv6-/64] :[slaac- redacted] /64 scope global dynamic mngtmpaddr noprefixroute ll-redacted] /64 scope link UP,LOWER_ UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 MULTICAST, UP,LOWER_ UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 ipv6-/64] :8d03:bfce: 131d:190/ 64 scope global temporary dynamic ipv6-/64] :[slaac- redacted] /64 scope global dynamic mngtmpaddr noprefixroute ll-redacted] /64 scope link
1: lo: <LOOPBACK,
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens5: <BROADCAST,
link/ether [mac-redacted] brd ff:ff:ff:ff:ff:ff
inet 192.168.1.103/24 brd 192.168.1.255 scope global dynamic ens5
valid_lft 52839sec preferred_lft 52839sec
inet6 [redacted-
valid_lft 596sec preferred_lft 596sec
inet6 [redacted-
valid_lft 596sec preferred_lft 0sec
inet6 [redacted-
valid_lft 596sec preferred_lft 0sec
inet6 [redacted-
valid_lft 596sec preferred_lft 0sec
inet6 [redacted-
valid_lft 596sec preferred_lft 0sec
inet6 [redacted-
valid_lft 596sec preferred_lft 0sec
inet6 [redacted-
valid_lft 596sec preferred_lft 0sec
inet6 [redacted-
valid_lft 596sec preferred_lft 596sec
inet6 fe80::[
valid_lft forever preferred_lft forever
root@pentos:~# systemctl stop systemd-networkd
root@pentos:~# ip addr
1: lo: <LOOPBACK,
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens5: <BROADCAST,
link/ether [mac-redacted] brd ff:ff:ff:ff:ff:ff
inet 192.168.1.103/24 brd 192.168.1.255 scope global dynamic ens5
valid_lft 52794sec preferred_lft 52794sec
inet6 [redacted-
valid_lft 587sec preferred_lft 587sec
inet6 [redacted-
valid_lft 587sec preferred_lft 0sec
inet6 [redacted-
valid_lft 587sec preferred_lft 0sec
inet6 [redacted-
valid_lft 587sec preferred_lft 0sec
inet6 [redacted-
valid_lft 587sec preferred_lft 0sec
inet6 [redacted-
valid_lft 587sec preferred_lft 0sec
inet6 [redacted-
valid_lft 587sec preferred_lft 0sec
inet6 [redacted-
valid_lft 587sec preferred_lft 587sec
inet6 fe80::[
valid_lft forever preferred_lft forever
root@pentos:~# systemctl start systemd-networkd
root@pentos:~# ip addr
1: lo: <LOOPBACK,
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens5: <BROADCAST,
link/ether [mac-redacted] brd ff:ff:ff:ff:ff:ff
inet 192.168.1.103/24 brd 192.168.1.255 scope global dynamic ens5
valid_lft 86386sec preferred_lft 86386sec
inet6 [redacted-
valid_lft 598sec preferred_lft 598sec
inet6 [redacted-
valid_lft 598sec preferred_lft 598sec
inet6 fe80::[
valid_lft forever preferred_lft forever
root@pentos:~#