Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

systemd sysctl rp_filter conflicting with cilium #2

Open
vincentmli opened this issue Nov 27, 2021 · 2 comments
Open

systemd sysctl rp_filter conflicting with cilium #2

vincentmli opened this issue Nov 27, 2021 · 2 comments

Comments

@vincentmli
Copy link

openEuler systemd-sysctl could overwrite cilium rp_filter and cause similar issue reported in in cilium/cilium#10645, use workaround below to solve the problem

cat /etc/sysctl.d/90-override.conf

net.ipv4.conf.default.rp_filter = 0 
net.ipv4.conf.*.rp_filter = 0 
@vincentmli
Copy link
Author

since openEuler has rp_filter enabled

[root@openEuler ~]# grep -r 'rp_filter' /usr/lib/sysctl.d/
/usr/lib/sysctl.d/50-default.conf:net.ipv4.conf.default.rp_filter = 2 
/usr/lib/sysctl.d/50-default.conf:net.ipv4.conf.*.rp_filter = 2 
/usr/lib/sysctl.d/50-default.conf:-net.ipv4.conf.all.rp_filter

I recommend also add net.ipv4.conf.all.log_martians=1 in /usr/lib/sysctl.d/50-default.conf to make it easier for network trouble shooting

@vincentmli
Copy link
Author

probably openEuler should adopt centos rp_filter setting

#grep 'rp_filter' /usr/lib/sysctl.d/50-default.conf 
net.ipv4.conf.all.rp_filter = 1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant