Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 9f0761c1 authored by Hannes Frederic Sowa's avatar Hannes Frederic Sowa Committed by David S. Miller
Browse files

ipv6: add documentation for stable_secret, idgen_delay and idgen_retries knobs 



Cc: Erik Kline <ek@google.com>
Cc: Fernando Gont <fgont@si6networks.com>
Cc: Lorenzo Colitti <lorenzo@google.com>
Cc: YOSHIFUJI Hideaki/吉藤英明 <hideaki.yoshifuji@miraclelinux.com>
Signed-off-by: default avatarHannes Frederic Sowa <hannes@stressinduktion.org>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 1855b7c3

Documentation/networking/ip-sysctl.txt

+25 −0
Original line number Diff line number Diff line
@@ -1220,6 +1220,17 @@ anycast_src_echo_reply - BOOLEAN 
	FALSE: disabled

	Default: FALSE



idgen_delay - INTEGER

	Controls the delay in seconds after which time to retry

	privacy stable address generation if a DAD conflict is

	detected.

	Default: 1 (as specified in RFC7217)



idgen_retries - INTEGER

	Controls the number of retries to generate a stable privacy

	address if a DAD conflict is detected.

	Default: 3 (as specified in RFC7217)



mld_qrv - INTEGER

	Controls the MLD query robustness variable (see RFC3810 9.1).

	Default: 2 (as specified by RFC3810 9.1)
@@ -1540,6 +1551,20 @@ use_optimistic - BOOLEAN 
		0: disabled (default)

		1: enabled



stable_secret - IPv6 address

	This IPv6 address will be used as a secret to generate IPv6

	addresses for link-local addresses and autoconfigured

	ones. All addresses generated after setting this secret will

	be stable privacy ones by default. This can be changed via the

	addrgenmode ip-link. conf/default/stable_secret is used as the

	secret for the namespace, the interface specific ones can

	overwrite that. Writes to conf/all/stable_secret are refused.



	It is recommended to generate this secret during installation

	of a system and keep it stable after that.



	By default the stable secret is unset.



icmp/*:

ratelimit - INTEGER

	Limit the maximal rates for sending ICMPv6 packets.