mirror of
https://github.com/kernelkit/infix.git
synced 2026-07-22 01:13:00 +02:00
Services could not bind to addresses not yet present on an interface, e.g. floating VIPs managed by a routing daemon, since nonlocal bind was left at the kernel default of disabled. Enable net.ipv4.ip_nonlocal_bind and net.ipv6.ip_nonlocal_bind among the router defaults in /etc/sysctl.d. Closes #1022 Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
28 lines
819 B
Plaintext
28 lines
819 B
Plaintext
# Router defaults
|
|
net.ipv6.route.max_size=131072
|
|
net.ipv6.conf.all.ignore_routes_with_linkdown=1
|
|
|
|
# IP Routing is disabled by default, enabled globally, and per
|
|
# interface, for each interface in confd. See also accept_ra.
|
|
net.ipv6.conf.all.forwarding=0
|
|
net.ipv6.conf.default.forwarding=0
|
|
|
|
# Allow binding to non-local addresses, e.g. floating VIPs not yet
|
|
# configured on an interface, see issue #1022
|
|
net.ipv6.ip_nonlocal_bind=1
|
|
|
|
# Accept router advertisements even when forwarding is enabled
|
|
net.ipv6.conf.all.accept_ra=2
|
|
net.ipv6.conf.default.accept_ra=2
|
|
|
|
# IPv6 SLAAC
|
|
net.ipv6.conf.all.autoconf=0
|
|
net.ipv6.conf.default.autoconf=0
|
|
|
|
# Keep permanent addresses on an admin down
|
|
net.ipv6.conf.all.keep_addr_on_down=1
|
|
net.ipv6.conf.default.keep_addr_on_down=1
|
|
|
|
# Multicast group subscriptions
|
|
net.ipv6.mld_max_msf=512
|