-
Notifications
You must be signed in to change notification settings - Fork 11
Investigate: Evaluate semantics of IPv6 forwarding #785
New issue
Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? # to your account
Milestone
Comments
CCB decision: use nftables. |
New idea: Disable global IPv6 forwarding handle until at least one interface has IPv6 forwarding true. |
CCB: good idea. Decision, implement suggestion: "disable global IPv6 forwarding handle until at least one interface has IPv6 forwarding". |
troglobit
added a commit
that referenced
this issue
Feb 24, 2025
Enabled by user enabling IPv6 forwarding on any interface. This change also enables net.ipv6.conf.all.accept_ra (=2) to accept any IPv6 route advertisements even when acting as a router. Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
troglobit
added a commit
that referenced
this issue
Feb 25, 2025
Enabled by user enabling IPv6 forwarding on any interface. This change also enables net.ipv6.conf.all.accept_ra (=2) to accept any IPv6 route advertisements even when acting as a router. Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
troglobit
added a commit
that referenced
this issue
Feb 25, 2025
Enabled by user enabling IPv6 forwarding on any interface. This change also enables net.ipv6.conf.all.accept_ra (=2) to accept any IPv6 route advertisements even when acting as a router. Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
troglobit
added a commit
that referenced
this issue
Feb 25, 2025
Enabled by user enabling IPv6 forwarding on any interface. This change also enables net.ipv6.conf.all.accept_ra (=2) to accept any IPv6 route advertisements even when acting as a router. Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
# for free
to join this conversation on GitHub.
Already have an account?
# to comment
The way Infix handles the IPv6 forwarding primitive differs significantly from what's stated in ietf-ip.yang.
Is this how we want it?
New idea on 2025-02-05: Disable global IPv6 forwarding handle until at least one interface has IPv6 forwarding true.
Quote from Infix documentation:
Quote from ietf-ip.yang.
The text was updated successfully, but these errors were encountered: