From b2a7c0aac539f050bb33a3faf05cede37e542566 Mon Sep 17 00:00:00 2001 From: Joachim Wiberg Date: Sat, 4 Jul 2026 14:12:41 +0200 Subject: [PATCH] board: enable ip_nonlocal_bind for IPv4 and IPv6 Services could not bind to addresses not yet present on an interface, e.g. floating VIPs managed by a routing daemon, since nonlocal bind was left at the kernel default of disabled. Enable net.ipv4.ip_nonlocal_bind and net.ipv6.ip_nonlocal_bind among the router defaults in /etc/sysctl.d. Closes #1022 Signed-off-by: Joachim Wiberg --- board/common/rootfs/etc/sysctl.d/ipv4.conf | 4 ++++ board/common/rootfs/etc/sysctl.d/ipv6.conf | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/board/common/rootfs/etc/sysctl.d/ipv4.conf b/board/common/rootfs/etc/sysctl.d/ipv4.conf index efc47f7a..664a6a86 100644 --- a/board/common/rootfs/etc/sysctl.d/ipv4.conf +++ b/board/common/rootfs/etc/sysctl.d/ipv4.conf @@ -24,6 +24,10 @@ net.ipv4.conf.all.arp_ignore=1 net.ipv4.ip_forward=1 net.ipv4.ip_forward_update_priority=0 +# Allow binding to non-local addresses, e.g. floating VIPs not yet +# configured on an interface, see issue #1022 +net.ipv4.ip_nonlocal_bind=1 + net.ipv4.conf.all.forwarding=0 net.ipv4.conf.default.forwarding=0 diff --git a/board/common/rootfs/etc/sysctl.d/ipv6.conf b/board/common/rootfs/etc/sysctl.d/ipv6.conf index fa683484..d0f54528 100644 --- a/board/common/rootfs/etc/sysctl.d/ipv6.conf +++ b/board/common/rootfs/etc/sysctl.d/ipv6.conf @@ -7,6 +7,10 @@ net.ipv6.conf.all.ignore_routes_with_linkdown=1 net.ipv6.conf.all.forwarding=0 net.ipv6.conf.default.forwarding=0 +# Allow binding to non-local addresses, e.g. floating VIPs not yet +# configured on an interface, see issue #1022 +net.ipv6.ip_nonlocal_bind=1 + # Accept router advertisements even when forwarding is enabled net.ipv6.conf.all.accept_ra=2 net.ipv6.conf.default.accept_ra=2