Are v6/sit tunnels working with VRFs? For instance, I have a very simple configuration with three VMs running 4.13.0-16 (Ubuntu Server 17.10) kernels. VM3 is setup as a router for separation. VM1 and VM2 have static routes to each other via VM3. All VMs have v4 interfaces configured. If I setup a sit tunnel with v6 addrs from V1 to V2, tunneled data flows as expected (verified with ping) and can be seen via tcpdump on VM3. However, if I create a VRF on VM2 and enslave the v4 interface and tunnel to that VRF, data does not leave VM2 and ping displays "Destination Host Unreachable". I did verify that basic v4 ping works between VM1 and VM2 with the v4 interface on VM2 enslaved to VRF device.
If this should work, I can provide more details with configuration commands. Thanks, Jeff