From 4e4c645b47e81ec54c8b02d2f4377664e5689a86 Mon Sep 17 00:00:00 2001 From: Christian Breunig Date: Wed, 7 Feb 2024 17:40:11 +0100 Subject: vrf: T5973: module is now statically compiled into the kernel Always enable VRF strict_mode (cherry picked from commit 117fbcd6237b59f54f2c1c66986a8ce073808c84) --- src/etc/sysctl.d/30-vyos-router.conf | 2 ++ 1 file changed, 2 insertions(+) (limited to 'src/etc/sysctl.d/30-vyos-router.conf') diff --git a/src/etc/sysctl.d/30-vyos-router.conf b/src/etc/sysctl.d/30-vyos-router.conf index 6291be5f0..c9b8ef8fe 100644 --- a/src/etc/sysctl.d/30-vyos-router.conf +++ b/src/etc/sysctl.d/30-vyos-router.conf @@ -108,3 +108,5 @@ net.ipv4.tcp_congestion_control=bbr # Disable IPv6 Segment Routing packets by default net.ipv6.conf.all.seg6_enabled = 0 net.ipv6.conf.default.seg6_enabled = 0 + +net.vrf.strict_mode = 1 -- cgit v1.2.3