mirror of
https://gitlab.freedesktop.org/NetworkManager/NetworkManager.git
synced 2026-04-04 17:50:37 +02:00
a8a2e6d727
Add support for configuring per-interface IPv4 sysctl forwarding setting in NetworkManager. The feature allows users to configure the net.ipv4.conf.<interface>.forward setting directly through NetworkManager, enabling targeted forwarding configurations for interfaces. This is particularly useful for cases such as enabling forwarding for MetalLB load balancing without requiring a global ip_forward=1 setting. While forwarding setting can be managed via /etc/sysctl.conf, configuring sysctl options for dynamically created or software-configured interfaces (e.g., bridges) poses challenges. With this feature, NetworkManager can configure these settings when interfaces are created or updated, users no longer need to rely on nm-dispatcher scripts for per-interface sysctl configuration, which can be error-prone and complex. This feature ensures a more seamless and integrated way to manage per-interface forwarding configurations, reducing user overhead and improving usability in complex network setups. We do not support configuring per-device IPv6 sysctl forwarding because in order to make per-device IPv6 sysctl forwarding work, we also need to enable the IPv6 global sysctl forwarding setting, but this has potential security concerns because it changes the behavior of the system to function as a router, which expose the system to new risks and unintended traffic flows, especially when enabling forwarding on the interface the user previously explicitly disabled. Also enabling per-device IPv6 sysctl setting will change the behavior of router advertisement (accept_ra), which is not expected. Therefore, we only support configuring per-device IPv4 sysctl forwarding option in NetworkManager. Resolves: https://issues.redhat.com/browse/RHEL-60237 https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2071 https://gitlab.freedesktop.org/NetworkManager/NetworkManager-ci/-/merge_requests/1833 |
||
|---|---|---|
| .. | ||
| client | ||
| check-systemd-unit.sh | ||
| README.md | ||
tests
Contains some unit tests that don't clearly fit a category to be placed in a different location.
Maybe a better place should be found and this directory should go away.