Some packets seem to reach our endpoint with the 0:0:0:0:20:0:0:0 bit flipped...

[jbwisemo]

 :( Some random percentage of traffic from our HQ (on native IPv6) to our tunnels in NL (2001:470:1f14::/47) seem to arrive there with one bit in the host part flipped compared to the same packets captured as they leave the HQ firewall.

??? For example some packets to 2001:470:1f14:xxxx::2 are seen on the NL machine (tunnel endpoint) with a destination IP of 2001:470:1f14:xxxx:20::2, while some packets to addresses on the routed /64 get the same bit flipped, for example some packets to 2001:470:1f15:xxxx::zzz exit the tunnel with a destination IP of 2001:470:1f15:xxxx:20::zzz .

:'( This obviously causes those packets to be lost and connections interrupted (since not all packets in a stream are affected).

(Technical data on endpoint hardware/software deleted)

:-\ Does anyone have any idea if this is a problem in the HE network/tunnel endpoint or in one of our two edge routers?

P.S. Since there was no response for several days, I have removed information about our internal systems from public view.