Opened 7 years ago

Closed 7 years ago

#8699 closed defect (fixed)

some sysctl network options installed too late

Reported by: b.julin@… Owned by: jow
Priority: low Milestone: Backfire 10.03.1
Component: packages Version: Trunk
Keywords: base-files sysctl initscripts Cc:


Network options in /proc/sys/net/ipv4/conf/default/* must be applied before an interface is added to the kernel in order to behave as per expectations. Currently we have /etc/rc.d/S40network and /etc/rc.d/S99sysctl. Also there is hotplug action in S10boot. If there is no reason for the sysctl options to happen so late, they should be moved as early as possible.

Moving the sysctl loading before the network initscript will probably fix bridge interfaces so it would be satisfactory for many users who leave the bridges in. Moving it before the boot initscript fixes all native interfaces except for eth0. Fixing eth0 is beyond me.

If there is a reason to delay some sysctl options, then splitting the sysctl options into an early and late set would be merited.

Another option is including per-interface sysctl options in with the ifconfig options in /etc/config/network, installing them as network interfaces are added but before they are turned up.

While researching this for my own configuration I also ran across this old thread showing a more important reason why sysctl options for networking need to be installed earlier:

Note also that the stock base-files includes the option net.ipv4.conf.default.arp_ignore=1 in /etc/sysctl, which does not work, though the effect is minimal since the same file sets the "all" version of this option as well. However this gives an easy test case -- cat of /proc/sys/net/ipv4/conf/<iface>/arp_ignore should be 1 for individual interfaces when this is fixed. As it is it is 0.

Attachments (0)

Change History (2)

comment:1 Changed 7 years ago by jow

  • Owner changed from developers to jow
  • Status changed from new to accepted

comment:2 Changed 7 years ago by jow

  • Resolution set to fixed
  • Status changed from accepted to closed

I added a generic mechanism for this in r27653.
You can now specify "option ipv4_arp_ignore 1" and it will be applied to the interface when it is brought up.

Add Comment

Modify Ticket

as closed .
The resolution will be deleted. Next status will be 'reopened'.

E-mail address and user name can be saved in the Preferences.

Note: See TracTickets for help on using tickets.