vyos-1x.git/src/etc/sysctl.d, branch rolling

sysctl: T7379: always disable IPv6 autoconf and accept_ra during startup

2025-04-22T14:06:19+00:00

T6570: firewall: add global-option to configure sysctl parameter for enabling/disabling sending traffic from bridge layer to ipvX layer

2024-08-01T16:25:39+00:00

vrf: T5973: module is now statically compiled into the kernel

2024-02-07T16:40:11+00:00

Always enable VRF strict_mode

srv6: T591: enable SR enabled packet processing on defined interfaces

2023-12-20T21:38:52+00:00

The Linux Kernel needs to be told if IPv6 SR enabled packets whether should be processed or not. This is done using /proc/sys/net/conf//seg6_* variables: seg6_enabled - BOOL Accept or drop SR-enabled IPv6 packets on this interface. Relevant packets are those with SRH present and DA = local. 0 - disabled (default) not 0 - enabled Or the VyOS CLI command: * set protocols segment-routing interface eth0 srv6

vrf: T591: define sysctl setting for net.vrf.strict_mode

2023-12-20T21:25:47+00:00

Enable/Disable VRF strict mode, when net.vrf.strict_mode=0 (default) it is possible to associate multiple VRF devices to the same table. Conversely, when net.vrf.strict_mode=1 a table can be associated to a single VRF device. A VRF table can be used by the VyOS CLI only once (ensured by verify()), this simply adds an additional Kernel safety net, but a requirement for IPv6 segment routing headers.

http: T5762: api: make API socket backend communication the one and only default

2023-11-20T16:17:25+00:00

Why: Smoketests fail as they can not establish IPv6 connection to uvicorn backend server. https://github.com/vyos/vyos-1x/pull/2481 added a bunch of new smoketests. While debugging those failing, it was uncovered, that uvicorn only listens on IPv4 connections vyos@vyos# netstat -tulnp | grep 8080 (Not all processes could be identified, non-owned process info will not be shown, you would have to be root to see it all.) tcp 0 0 127.0.0.1:8080 0.0.0.0:* LISTEN - As the CLI already has an option to move the API communication from an IP to a UNIX domain socket, the best idea is to make this the default way of communication, as we never directly talk to the API server but rather use the NGINX reverse proxy.

Change to BBR as TCP congestion control, or at least make it an config option

2023-10-08T17:32:37+00:00

T5575: ARP/NDP table-size isnt set properly

2023-09-13T11:54:47+00:00

T5489: Add sysctl TCP congestion control by default to BBR

2023-09-05T13:38:03+00:00

Add by default sysctl TCP congestion control to BBR. Default value `cubic` is not optimal. net.core.default_qdisc=fq net.ipv4.tcp_congestion_control=bbr

T5001: Replace links to the phabricator site

2023-02-12T19:55:16+00:00

Replace links to the phabricator site from https://phabricator.vyos.net to https://vyos.dev