[Bug Report] 移除 net.ipv6.conf.all.forwarding=1 后在某些场景下似乎存在一些问题

[9bingyin]

Checks

• I have searched the existing issues
• I have read the documentation
• Is it your first time sumbitting an issue

Current Behavior

在使用 unstable-20240412.r683.89a059 时会出现 IPv6 无法使用的问题，同样的配置下 unstable-20240408.r682.c1a7a6 是正常的，可能是移除 net.ipv6.conf.all.forwarding=1 导致的（因为这两个版本只有这个变动）

Expected Behavior

我的 dae 是 fd43:8c5c:96bf:ae86::30，主网关为 fd43:8c5c:96bf:ae86::1，通过 NAT66 连接外网
我使用的是“旁路由”接入的 dae，在使用 unstable-20240412.r683.89a059 时，所有直接接入主路由的终端都是可以正常使用 IPv6 的，接入 dae 的无法使用 IPv6

使用 unstable-20240412.r683.89a059 时

使用 unstable-20240408.r682.c1a7a6 时

Steps to Reproduce

No response

Environment

Anything else?

No response

[dae-prow]

Thanks for opening this issue!

[jschwinger233]

谢谢

这个 PR 能不能解决问题：#499

如果不能就考虑 revert #496

[9bingyin]

#499 似乎并没有效果

dae:~# dae --version
dae version unstable-20240413.r1.114edf3
go runtime go1.21.3 linux/amd64
Copyright (c) 2022-2024 @daeuniverse
License GNU AGPLv3 <https://github.com/daeuniverse/dae/blob/main/LICENSE>

[mzz2017]

你的配置和拓扑是怎样的？

[9bingyin]

/usr/local/etc/dae/config.dae

global {
    tproxy_port: 12345
    log_level: info

    lan_interface: eth0
    auto_config_kernel_parameter: true

    tcp_check_url: 'http://detectportal.firefox.com,34.107.221.82,2600:1901:0:38d7::'
    tcp_check_http_method: GET
    udp_check_dns: 'dns.quad9.net:53,9.9.9.9,2620:fe::fe'
    check_interval: 30s

    dial_mode: domain+
    allow_insecure: false
    sniffing_timeout: 100ms
}

subscription {
    Bingyin: 'suburl'
}

dns {
    upstream {
        adguardhome: 'udp://192.168.5.53:53'
    }
    routing {
        request {
            fallback: adguardhome
        }
    }
}

group {
    proxy {
        filter: name(keyword: Singapore)
        policy: fixed(1)
    }
}

routing {
    # Main
    pname("NetworkManager")->direct("must")
    dip(geoip:"private")->direct
    dip(geoip:"cn")->direct
    domain(geosite:"category-public-tracker")->direct
    domain(geosite:"google@cn")->direct
    domain(geosite:"google")->proxy
    domain(geosite:"microsoft@cn")->direct
    domain(geosite:"microsoft")->proxy
    domain(geosite:"github")->proxy
    domain(geosite:"netflix")->proxy
    domain(geosite:"twitter")->proxy
    domain(geosite:"twitch")->proxy
    dip(geoip:"telegram")->proxy
    domain(geosite:"telegram")->proxy
    domain(geosite:"nvidia@cn")->direct
    domain(geosite:"nvidia")->proxy
    domain(geosite:"bing")->proxy
    domain(geosite:"yahoo@cn")->direct
    domain(geosite:"yahoo")->proxy
    domain(suffix:"cm.steampowered.com")->direct
    domain(suffix:"steamserver.net")->direct
    domain(geosite:"steam@cn")->direct
    domain(geosite:"steam")->proxy
    domain(geosite:"ubisoft@cn")->direct
    domain(geosite:"ubisoft")->proxy
    domain(geosite:"cloudflare@cn")->direct
    domain(geosite:"cloudflare")->proxy
    domain(geosite:"docker")->proxy
    domain(geosite:"tmdb")->proxy
    domain(geosite:"gfw")->proxy
    # Finance
    domain(geosite:"ifast")->proxy
    domain(geosite:"paypal")->proxy
    domain(geosite:"stripe")->proxy
    domain(geosite:"wise")->proxy
    domain(geosite:"okx")->proxy
    domain(suffix:"kraken.com")->proxy
    domain(suffix:"trading212.com")->proxy
    domain(suffix:"nexo.io")->proxy
    domain(suffix:"nexo.com")->proxy
    domain(suffix:"redotpay.com")->proxy
    # Static CDN
    domain(geosite:"jsdelivr")->proxy
    domain(suffix:"unpkg.com")->proxy
    domain(suffix:"fontshare.com")->proxy
    # IDC
    domain(geosite:"vultr")->proxy
    domain(geosite:"hetzner")->proxy
    domain(suffix:"misaka.io")->proxy
    domain(suffix:"apernet.io")->proxy
    domain(suffix:"idc.wiki")->proxy
    domain(suffix:"frantech.ca")->proxy
    domain(suffix:"buyvm.net")->proxy
    domain(suffix:"nube.lol")->proxy
    domain(suffix:"ggvision.net")->proxy
    domain(suffix:"linode.com")->proxy
    domain(suffix:"zhnet.co.uk")->proxy
    # Tools
    domain(geosite:"anthropic")->proxy
    domain(geosite:"openai")->proxy
    domain(geosite:"quora")->proxy
    domain(suffix:"suno.ai")->proxy
    domain(suffix:"deepl.com")->proxy
    domain(geosite:"pikpak")->proxy
    domain(geosite:"f-droid")->proxy
    domain(suffix:"huggingface.co")->proxy
    domain(suffix:"phind.com")->proxy
    domain(geosite:"fflogs@cn")->direct
    domain(geosite:"fflogs")->proxy
    domain(suffix:"xivanalysis.com")->proxy
    domain(suffix:"nextdns.io")->proxy
    domain(geosite:"hurricaneelectric")->proxy
    domain(suffix:"bgp.tools")->proxy
    domain(full:"ip.skk.moe")->proxy
    domain(geosite:"pingsx")->proxy
    domain(suffix:"jellyfin.org")->proxy
    domain(suffix:"omdbapi.com")->proxy
    domain(suffix:"bangumi.tv")->proxy
    domain(suffix:"bgm.tv")->proxy
    domain(suffix:"chii.in")->proxy
    domain(geosite:"lastfm")->proxy
    domain(suffix:"mikanani.me")->proxy
    domain(suffix:"mikanime.tv")->proxy
    domain(suffix:"acg.rip")->proxy
    domain(suffix:"bangumi.moe")->proxy
    domain(suffix:"vcb-s.com")->proxy
    domain(suffix:"swiftgram.app")->proxy
    domain(suffix:"nicegram.app")->proxy
    domain(suffix:"mbrx.app")->proxy
    domain(suffix:"nssurge.com")->proxy
    # Others
    domain(geosite:"patreon")->proxy
    domain(geosite:"pixiv")->proxy
    domain(geosite:"mikrotik")->proxy
    domain(suffix:"launchdarkly.com")->proxy
    domain(geosite:"cnbeta")->proxy
    domain(suffix:"nodeseek.com")->proxy
    domain(geosite:"hcaptcha")->proxy
    domain(geosite:"intercom")->proxy
    # Fallback
    fallback:"direct"
}

拓扑