ipv6 connectivity

[22decembre]

Hello.

I have something really weird currently. Some issues with ipv6 connectivity to my openbsd server :

- ssh -6 connection are extremely slow to establish.
- httpd does not listen on inet6

I have no idea why ! I obviously made running them on verbose mode.

Ssh -6 is just slow (takes minutes to establish, the hang happens at the time presenting keys). Whereas ssh -4 is almost immediate.

httpd simply does not notice (apparently) there are ipv6 address to listen to.

The weird thing is that ping(6) is not affected, nor the ipv6 connectivity through the server (has it serves as a virtual router).

Do someone has a suggestion, where to start to investigate ? What should I show you either ?

[jggimi]

I'm going to take a wild guess that Reverse DNS is not provisioned properly for your IPv6 addresses. See FAQ 8.22.

[22decembre]

Ok, thanks for the tricks to dns reverse. I will see.

What for httpd ?

stephane@blackblock:/home/stephane netstat -t -f inet |grep https
tcp          0      0  blackblock.https       latitude77.org.18057 ESTABLISHED
stephane@blackblock:/home/stephane netstat -t -f inet6 |grep https                                   
stephane@blackblock:/home/stephane

I don't see what forbids httpd to listen to inet6.

server "blackblock.22decembre.eu" {
        include "/etc/httpd.tls"

        root "/blackblock"
        directory index index.html

        log error blackblock-error.log
        log access blackblock-access.log

        location "/owncloud/"   { directory index index.php }
        location "/links/"      { directory index index.php }
        location "/wallabag/"   { directory index index.php }

        location "*.php" { fastcgi socket "/tmp/php.sock" }
}

server "blackblock.22decembre.eu" {
        listen on egress        port 80
        block return 301 "https://$SERVER_NAME$REQUEST_URI"
}

the include :

listen on re0 tls port 443

tls     key             "/etc/ssl/private/server.key"
tls     certificate     "/etc/ssl/server.crt"
tls     protocols       "TLSv1.2,TLSv1.1"

# common ciphers
tls     ciphers "AES256+EECDH:AES256+EDH"

[22decembre]

Solved, I simply added

listen on *     port 80
listen on ::    port 80

and https counterpart everywhere.