mirror of
https://github.com/kernelkit/infix.git
synced 2026-07-30 12:33:02 +02:00
Joachim Wiberg
7467b2fcf4
These changes are based on the sysctl recommendations by Frr [1]. Not all recommendations have been incorporated, e.g., ip forwarding is not enabled per interface, because in Infix this is an opt-in feature. A readme.txt has been added, documenting the various settings. New for IPv4: - Adjust IGMP max memberships: 20 -> 1000 - Use neighbor information on nexthop selection - Use inbound interface address on ICMP errors - Ignore routes with link down - Disable rp_filter ARP settings have been changed to better fit routers, i.e., systems with multiple interfaces: - Always use best local address when sending ARP - Only reply to ARP if target IP is on the inbound interface - Generate ARP requests when device is brought up or HW address changes New for IPv6: - Keep static global addresses on link down - Ignore routes with link down Fixes #829 [1]: https://github.com/FRRouting/frr/blob/master/doc/user/Useful_Sysctl_Settings.md Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
33 lines
800 B
Plaintext
33 lines
800 B
Plaintext
# Router defaults
|
|
net.ipv4.conf.default.rp_filter=0
|
|
net.ipv4.conf.all.rp_filter=0
|
|
|
|
net.ipv4.conf.lo.rp_filter=0
|
|
|
|
net.ipv4.icmp_errors_use_inbound_ifaddr=1
|
|
net.ipv4.conf.all.ignore_routes_with_linkdown=1
|
|
|
|
# Use neigh information on selection of nexthop for multipath hops
|
|
net.ipv4.fib_multipath_use_neigh=1
|
|
|
|
# Sane ARP defaults for a switch/router
|
|
net.ipv4.conf.default.arp_announce=2
|
|
net.ipv4.conf.all.arp_announce=2
|
|
|
|
net.ipv4.conf.default.arp_notify=1
|
|
net.ipv4.conf.all.arp_notify=1
|
|
|
|
net.ipv4.conf.default.arp_ignore=1
|
|
net.ipv4.conf.all.arp_ignore=1
|
|
|
|
# IP Routing
|
|
net.ipv4.ip_forward=1
|
|
net.ipv4.ip_forward_update_priority=0
|
|
|
|
net.ipv4.conf.all.forwarding=0
|
|
net.ipv4.conf.default.forwarding=0
|
|
|
|
# Multicast group subscriptions
|
|
net.ipv4.igmp_max_memberships=1000
|
|
net.ipv4.neigh.default.mcast_solicit=10
|