So, it turns out, that if you want a dual stack OpenBSD box, operating as a relayd proxy, to be able to talk to another server on the same VLAN using IPv6, you kinda need some pf firewall rules to allow inbound IPv6 stuff for it to work. You know, stuff like neighbour discovery works much better when the packets can actually arrive at the interface.
I’ve been fighting this weirdness, on and off, for months and in the end just used legacy IP for the back haul instead. I had an epiphany just now while adding relayd config for another backend server in a different VLAN that just worked over IPv6.
I was always convinced it was a “me” problem, as nobody else seemed to have issues. Turns out I was just looking in the wrong place (my relayd config) all along.
Loves tech. The concept, not the current implementation. Exact topic depends on my current hyper-fixation. I used to be insanely into Kubernetes, but currently mostly value simple setups. Thus I am currently mostly playing around with FreeBSD and OpenBSD on my servers. IPv4 is legacy tech and we need to stop pretending otherwise. "You aren’t actually running IPv6, until you disable IPv4." #nobot
