summaryrefslogtreecommitdiff
path: root/src/etc/sysctl.d
diff options
context:
space:
mode:
authorDaniil Baturin <daniil@vyos.io>2023-11-20 18:13:19 +0000
committerGitHub <noreply@github.com>2023-11-20 18:13:19 +0000
commit3ab206b04350aec4872ed72ae4bd3440a47204f0 (patch)
treefc9732b59bb32531bb59bf385b154b3165a49f51 /src/etc/sysctl.d
parent13f6688bdbdeaf869ace5c892154c14c4b007d43 (diff)
parentf5e43b1361fb59a9c260739bdb28729d5119507c (diff)
downloadvyos-1x-3ab206b04350aec4872ed72ae4bd3440a47204f0.tar.gz
vyos-1x-3ab206b04350aec4872ed72ae4bd3440a47204f0.zip
Merge pull request #2508 from c-po/t5762-https-api-socket
http: T5762: api: make API socket backend communication the one and only default
Diffstat (limited to 'src/etc/sysctl.d')
-rw-r--r--src/etc/sysctl.d/30-vyos-router.conf8
1 files changed, 8 insertions, 0 deletions
diff --git a/src/etc/sysctl.d/30-vyos-router.conf b/src/etc/sysctl.d/30-vyos-router.conf
index 1c9b8999f..67d96969e 100644
--- a/src/etc/sysctl.d/30-vyos-router.conf
+++ b/src/etc/sysctl.d/30-vyos-router.conf
@@ -105,3 +105,11 @@ net.core.rps_sock_flow_entries = 32768
net.core.default_qdisc=fq_codel
net.ipv4.tcp_congestion_control=bbr
+# VRF - Virtual routing and forwarding
+# When net.vrf.strict_mode=0 (default) it is possible to associate multiple
+# VRF devices to the same table. Conversely, when net.vrf.strict_mode=1 a
+# table can be associated to a single VRF device.
+#
+# A VRF table can be used by the VyOS CLI only once (ensured by verify()),
+# this simply adds an additional Kernel safety net
+net.vrf.strict_mode=1