Description of problem: When an IPv6 interface uses SLAAC to get its address it sometime takes 30 seconds after booting under fedora 23 with NetworkManager. If unbound is configured to run on such a delayed address then it will exit instead of waiting for that interface to be created. Version-Release number of selected component (if applicable): unbound.x86_64 1.5.6-1.fc23 @updates How reproducible: always with a slow IPv6 router solicitation rarely with a fast router solicitation Steps to Reproduce: 1. Reboot 2. systemctl status unbound 3. Actual results: Dec 14 03:37:17.503802 arbol.wsrcc.com systemd[1]: Starting Unbound recursive Domain Name Server... Dec 14 03:37:17.546244 arbol.wsrcc.com unbound-checkconf[1069]: unbound-checkconf: no errors in /etc/unbound/unbound.conf Dec 14 03:37:17.658756 arbol.wsrcc.com systemd[1]: Started Unbound recursive Domain Name Server. Dec 14 03:37:17.674293 arbol.wsrcc.com unbound[1104]: Dec 14 03:37:17 unbound[1104:0] error: can't bind socket: Cannot assign requested address for fd47:3cf0:52aa:0:a60:6eff:fe74:6fe2 Dec 14 03:37:17.674578 arbol.wsrcc.com unbound[1104]: Dec 14 03:37:17 unbound[1104:0] fatal error: could not open ports Dec 14 03:37:17.675401 arbol.wsrcc.com systemd[1]: unbound.service: Main process exited, code=exited, status=1/FAILURE Dec 14 03:37:17.677509 arbol.wsrcc.com systemd[1]: unbound.service: Unit entered failed state. Dec 14 03:37:17.677918 arbol.wsrcc.com systemd[1]: unbound.service: Failed with result 'exit-code'. Expected results: no errors or exit Additional info: It appears that NetworkManager is slow to get a router solicitation. I now see from the logs that it tries several times until it succeeds. If that were working better this wouldn't be so much of an issue. It would be nice if unbound just set a timer and tried to open the interface periodically.
in unbound-1.5.7 you can use: ip-transparent: <yes or no> If yes, then use IP_TRANSPARENT socket option on sockets where unbound is listening for incoming traffic. Default no. Allows you to bind to non-local interfaces. For example for non-existant IP addresses that are going to exist later on, with host failover configuration. This is a lot like interface-automatic, but that one services all interfaces and with this option you can select which (future) interfaces unbound provides service on. This option needs unbound to be started with root permissions on some systems. I have not tested this option yet. And we do not yet enable it per default. Does that address your issue?
(In reply to Paul Wouters from comment #1) > in unbound-1.5.7 you can use: > > ip-transparent: <yes or no> Thanks! I just tried it. It seems to be doing the trick on a short test. I'll update this bugzilla if I see it failing. This option's name didn't catch my eye. Something with "retry" or "non-existent" in the name would have been better. It might be good to also add it to /etc/unbound/unbound.conf . Thanks again for the quick reply.
unbound-1.5.8-1.fc23 has been submitted as an update to Fedora 23. https://bodhi.fedoraproject.org/updates/FEDORA-2016-3a8f0c9c3c
unbound-1.5.8-1.fc23 has been pushed to the Fedora 23 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-3a8f0c9c3c
unbound-1.5.8-1.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report.