[pve-devel] tap && veth interfaces on host have ipv6 allocated

[Wolfgang Bumiller]

On Tue, Sep 27, 2016 at 02:54:47PM +0200, Alexandre DERUMIER wrote:
> Hi,
> 
> we have just notice during the training, 
> that tap && veth interfaces on host have ipv6 addresses allocated.

See http://pve.proxmox.com/pve-docs/chapter-pve-firewall.html#_avoiding_link_local_addresses_on_tap_and_veth_devices

> 
> Is is expected ?  (It's more a security concern)
> 
> 
> 
> tap104i0  Link encap:Ethernet  HWaddr c2:8b:26:2a:c9:9e  
>           inet6 addr: fe80::c08b:26ff:fe2a:c99e/64 Scope:Link
>           UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
>           RX packets:43 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:2594 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:1000 
>           RX bytes:4202 (4.1 KiB)  TX bytes:391685 (382.5 KiB)
> 
> veth103i0 Link encap:Ethernet  HWaddr fe:c2:9a:2e:c1:d2  
>           inet6 addr: fe80::fcc2:9aff:fe2e:c1d2/64 Scope:Link
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           RX packets:15 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:13 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:1000 
>           RX bytes:2538 (2.4 KiB)  TX bytes:1038 (1.0 KiB)
> 
> veth103i1 Link encap:Ethernet  HWaddr fe:12:ed:0a:73:2d  
>           inet6 addr: fe80::fc12:edff:fe0a:732d/64 Scope:Link
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           RX packets:9 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:56 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:1000 
>           RX bytes:798 (798.0 B)  TX bytes:8579 (8.3 KiB)