Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

ipv6: add documentation for stable_secret, idgen_delay and idgen_retries knobs

Cc: Erik Kline <ek@google.com>
Cc: Fernando Gont <fgont@si6networks.com>
Cc: Lorenzo Colitti <lorenzo@google.com>
Cc: YOSHIFUJI Hideaki/吉藤英明 <hideaki.yoshifuji@miraclelinux.com>
Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

authored by

Hannes Frederic Sowa and committed by
David S. Miller
9f0761c1 1855b7c3

+25
+25
Documentation/networking/ip-sysctl.txt
··· 1220 1220 FALSE: disabled 1221 1221 Default: FALSE 1222 1222 1223 + idgen_delay - INTEGER 1224 + Controls the delay in seconds after which time to retry 1225 + privacy stable address generation if a DAD conflict is 1226 + detected. 1227 + Default: 1 (as specified in RFC7217) 1228 + 1229 + idgen_retries - INTEGER 1230 + Controls the number of retries to generate a stable privacy 1231 + address if a DAD conflict is detected. 1232 + Default: 3 (as specified in RFC7217) 1233 + 1223 1234 mld_qrv - INTEGER 1224 1235 Controls the MLD query robustness variable (see RFC3810 9.1). 1225 1236 Default: 2 (as specified by RFC3810 9.1) ··· 1550 1539 address selection algorithm. 1551 1540 0: disabled (default) 1552 1541 1: enabled 1542 + 1543 + stable_secret - IPv6 address 1544 + This IPv6 address will be used as a secret to generate IPv6 1545 + addresses for link-local addresses and autoconfigured 1546 + ones. All addresses generated after setting this secret will 1547 + be stable privacy ones by default. This can be changed via the 1548 + addrgenmode ip-link. conf/default/stable_secret is used as the 1549 + secret for the namespace, the interface specific ones can 1550 + overwrite that. Writes to conf/all/stable_secret are refused. 1551 + 1552 + It is recommended to generate this secret during installation 1553 + of a system and keep it stable after that. 1554 + 1555 + By default the stable secret is unset. 1553 1556 1554 1557 icmp/*: 1555 1558 ratelimit - INTEGER