Linux has a bug: it doesn't make route cache entries for remote hosts
if there's already a host route, and it only attaches path-MTU
information to cache entries. The result is that it doesn't handle
ICMPv6 `packet too big' messages properly for destinations with host
routes.
I'm bodging this by replacing all of the host routes with tiny /112
networks. It's awful, but it seems to work. The convention is that
the `host part' of the net is always zero.
defnet vpn safe
addr 172.29.199.128/27 2001:ba8:1d9:6000::/64
via househub colohub
defnet vpn safe
addr 172.29.199.128/27 2001:ba8:1d9:6000::/64
via househub colohub
- host crybaby 1
- host terror 2
- host orange 3
+ host crybaby 1 ::1:0
+ host terror 2 ::2:0
+ host orange 3 ::3:0
defnet anycast trusted
addr 172.29.199.224/27 2001:ba8:1d9:0::/64
via dmz unsafe safe untrusted jump colo vpn
defnet anycast trusted
addr 172.29.199.224/27 2001:ba8:1d9:0::/64
via dmz unsafe safe untrusted jump colo vpn