Hello @ all
With the rebuilding of my Server from Debian 9 to Debian 10, I also
switch from Virtual Box to Libvirt/KVM. Due to new requirements for the
VMs, now I have an actual problem, which unfortunately I can not solve.
The problem has already been discussed in the German Debian-Forum ...
unfortunately also without success.
The facts:
- ISP = Dual Stack with daily separation
- Host and VM = Debian 10
- The VMs are via macvtap-device regular LAN-Clients
- IPv4 = DHCP and NAT by DSL-Router
- IPv6 = GUA via RA and SLAAC (2003::/3)
- IPv4 works fine in the VM
- IPv6 (NDP, RA, SLAAC) works basically also fine in the VM
The existing problem in the VM:
- MAC-Based GUA (2000::/3) is ok, both inbound and outbound
- Outbound traffic via the second GUA (PE-Based) is filtered apparently,
but not via packetfiltering, I don't know where. There are no error
messages. On the part of the kernel in the VM and the IPv6-stack,
everything looks completely ok, no error messages, except that
Outbound-Traffic by the PE-Address is quietly blocked. The MAC-
Based IPv6 works unchanged and without error as before.
My questions:
1. Is there a special setting for the VM, to allow the use of Privacy
Extensions for IPv6 unlimited?
2. Or is that possibly even a known and at the moment unsolved problem?
3. Or is this a intended limitation of virtualization?
Can anyone help me with a solution or a hint? Thank you.
BR, Tom