Commit d9333196 authored by Ben Greear's avatar Ben Greear Committed by David S. Miller
Browse files

ipv6: Allow accepting RA from local IP addresses. 



This can be used in virtual networking applications, and
may have other uses as well.  The option is disabled by
default.

A specific use case is setting up virtual routers, bridges, and
hosts on a single OS without the use of network namespaces or
virtual machines.  With proper use of ip rules, routing tables,
veth interface pairs and/or other virtual interfaces,
and applications that can bind to interfaces and/or IP addresses,
it is possibly to create one or more virtual routers with multiple
hosts attached.  The host interfaces can act as IPv6 systems,
with radvd running on the ports in the virtual routers.  With the
option provided in this patch enabled, those hosts can now properly
obtain IPv6 addresses from the radvd.

Signed-off-by: default avatarBen Greear <greearb@candelatech.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent f2a762d8

Documentation/networking/ip-sysctl.txt

+12 −0
Original line number Diff line number Diff line
@@ -1210,6 +1210,18 @@ accept_ra_defrtr - BOOLEAN 
	Functional default: enabled if accept_ra is enabled.

			    disabled if accept_ra is disabled.



accept_ra_from_local - BOOLEAN

	Accept RA with source-address that is found on local machine

        if the RA is otherwise proper and able to be accepted.

        Default is to NOT accept these as it may be an un-intended

        network loop.



	Functional default:

           enabled if accept_ra_from_local is enabled

               on a specific interface.

	   disabled if accept_ra_from_local is disabled

               on a specific interface.



accept_ra_pinfo - BOOLEAN

	Learn Prefix Information in Router Advertisement.

include/linux/ipv6.h

+1 −0
Original line number Diff line number Diff line
@@ -39,6 +39,7 @@ struct ipv6_devconf { 
#endif

	__s32		proxy_ndp;

	__s32		accept_source_route;

	__s32		accept_ra_from_local;

#ifdef CONFIG_IPV6_OPTIMISTIC_DAD

	__s32		optimistic_dad;

#endif

include/uapi/linux/ipv6.h

+1 −0
Original line number Diff line number Diff line
@@ -163,6 +163,7 @@ enum { 
	DEVCONF_MLDV1_UNSOLICITED_REPORT_INTERVAL,

	DEVCONF_MLDV2_UNSOLICITED_REPORT_INTERVAL,

	DEVCONF_SUPPRESS_FRAG_NDISC,

	DEVCONF_ACCEPT_RA_FROM_LOCAL,

	DEVCONF_MAX

};

include/uapi/linux/sysctl.h

+1 −0
Original line number Diff line number Diff line
@@ -568,6 +568,7 @@ enum { 
	NET_IPV6_ACCEPT_RA_RT_INFO_MAX_PLEN=22,

	NET_IPV6_PROXY_NDP=23,

	NET_IPV6_ACCEPT_SOURCE_ROUTE=25,

	NET_IPV6_ACCEPT_RA_FROM_LOCAL=26,

	__NET_IPV6_MAX

};

kernel/sysctl_binary.c

+1 −0
Original line number Diff line number Diff line
@@ -522,6 +522,7 @@ static const struct bin_table bin_net_ipv6_conf_var_table[] = { 
	{ CTL_INT,	NET_IPV6_ACCEPT_RA_RT_INFO_MAX_PLEN,	"accept_ra_rt_info_max_plen" },

	{ CTL_INT,	NET_IPV6_PROXY_NDP,			"proxy_ndp" },

	{ CTL_INT,	NET_IPV6_ACCEPT_SOURCE_ROUTE,		"accept_source_route" },

	{ CTL_INT,	NET_IPV6_ACCEPT_RA_FROM_LOCAL,		"accept_ra_from_local" },

	{}

};

CRA Git | Maintained and supported by SUSTech CRA and CCSE