summaryrefslogtreecommitdiff
path: root/src/etc/sysctl.d
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2024-02-07 17:40:11 +0100
committerChristian Breunig <christian@breunig.cc>2024-02-07 17:40:11 +0100
commit117fbcd6237b59f54f2c1c66986a8ce073808c84 (patch)
tree1c9236f98eb71053cfe7f9b3b60738571de80bf6 /src/etc/sysctl.d
parent9d74ae52092e97aa0ef285df4d44a5eb7ae93fbf (diff)
downloadvyos-1x-117fbcd6237b59f54f2c1c66986a8ce073808c84.tar.gz
vyos-1x-117fbcd6237b59f54f2c1c66986a8ce073808c84.zip
vrf: T5973: module is now statically compiled into the kernel
Always enable VRF strict_mode
Diffstat (limited to 'src/etc/sysctl.d')
-rw-r--r--src/etc/sysctl.d/30-vyos-router.conf2
1 files changed, 2 insertions, 0 deletions
diff --git a/src/etc/sysctl.d/30-vyos-router.conf b/src/etc/sysctl.d/30-vyos-router.conf
index 6291be5f0..c9b8ef8fe 100644
--- a/src/etc/sysctl.d/30-vyos-router.conf
+++ b/src/etc/sysctl.d/30-vyos-router.conf
@@ -108,3 +108,5 @@ net.ipv4.tcp_congestion_control=bbr
# Disable IPv6 Segment Routing packets by default
net.ipv6.conf.all.seg6_enabled = 0
net.ipv6.conf.default.seg6_enabled = 0
+
+net.vrf.strict_mode = 1