mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-12-19 04:44:42 -05:00
9 lines
515 B
Plaintext
9 lines
515 B
Plaintext
# See https://github.com/cilium/cilium/issues/10645
|
|
# and https://github.com/cilium/cilium/blame/898a632e3c3b64eaa0f23ebde5a069e87373c59b/tools/sysctlfix/main.go#L41
|
|
# Disable rp_filter on Cilium interfaces since it may cause mangled packets to be dropped
|
|
-net.ipv4.conf.lxc*.rp_filter = 0
|
|
-net.ipv4.conf.cilium_*.rp_filter = 0
|
|
# The kernel uses max(conf.all, conf.{dev}) as its value, so we need to set .all. to 0 as well.
|
|
# Otherwise it will overrule the device specific settings.
|
|
net.ipv4.conf.all.rp_filter = 0
|