diff options
author | Christian Poessinger <christian@poessinger.com> | 2020-03-04 19:53:58 +0100 |
---|---|---|
committer | Christian Poessinger <christian@poessinger.com> | 2020-03-04 21:45:41 +0100 |
commit | 93f7ae7f1ed1e218ef64d2582d11ac0ed769a438 (patch) | |
tree | 9ec8c29b220496481e90a23265221f8632e48a92 /interface-definitions | |
parent | 5bf9dfd17096af6e7cf06e8e20eb16e8e55b9177 (diff) | |
download | vyos-1x-93f7ae7f1ed1e218ef64d2582d11ac0ed769a438.tar.gz vyos-1x-93f7ae7f1ed1e218ef64d2582d11ac0ed769a438.zip |
vrf: T31: rename 'vrf disable-bind-to-all ipv4' to 'vrf bind-to-all'
By default the scope of the port bindings for unbound sockets is limited to the
default VRF. That is, it will not be matched by packets arriving on interfaces
enslaved to an l3mdev and processes may bind to the same port if they bind to
an l3mdev.
TCP & UDP services running in the default VRF context (ie., not bound to any
VRF device) can work across all VRF domains by enabling the 'vrf bind-to-all'
option.
Diffstat (limited to 'interface-definitions')
-rw-r--r-- | interface-definitions/vrf.xml.in | 15 |
1 files changed, 4 insertions, 11 deletions
diff --git a/interface-definitions/vrf.xml.in b/interface-definitions/vrf.xml.in index a6c67e9dd..f1895598e 100644 --- a/interface-definitions/vrf.xml.in +++ b/interface-definitions/vrf.xml.in @@ -7,19 +7,12 @@ <priority>210</priority> </properties> <children> - <node name="disable-bind-to-all"> + <leafNode name="bind-to-all"> <properties> - <help>Disable services running on the default VRF from other VRF (ssh, bgp, ...)</help> + <help>Enable binding services to all VRFs</help> + <valueless/> </properties> - <children> - <leafNode name="ipv4"> - <properties> - <valueless/> - <help>Enable binding across all VRF domains for IPv4</help> - </properties> - </leafNode> - </children> - </node> + </leafNode> <tagNode name="name"> <properties> <help>VRF instance name</help> |