Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Review sysctl settings #829

Closed
troglobit opened this issue Nov 20, 2024 · 0 comments · Fixed by #833
Closed

Review sysctl settings #829

troglobit opened this issue Nov 20, 2024 · 0 comments · Fixed by #833
Assignees
Labels
enhancement New feature or request
Milestone

Comments

@troglobit
Copy link
Contributor

mDNS currently runs on all layer-3 interfaces when enabled. The Styx board has 28 ports, with many set up as L3 interfaces we get the following error:

 Nov 18 14:54:56 styx-05-29-61 avahi-daemon[7483]: IP_ADD_MEMBERSHIP failed: No buffer space available

This is caused by the Linux sysctl net.ipv4.igmp_max_memberships default limit of 20.

While researching the topic the following links popped up:

Most of the changes are very relevant also for Infix. We need to investigate and update at least net.ipv4.igmp_max_memberships.

@troglobit troglobit added the enhancement New feature or request label Nov 20, 2024
@troglobit troglobit added this to the Infix v24.11 milestone Nov 20, 2024
@troglobit troglobit self-assigned this Nov 25, 2024
@troglobit troglobit moved this to In progress in Infix & C:o Nov 25, 2024
troglobit added a commit that referenced this issue Dec 3, 2024
These changes are based on the sysctl recommendations by Frr [1].

Not all recommendations have been incorporated, e.g., ip forwarding is
not enabled per interface, because in Infix this is an opt-in feature.

A readme.txt has been added, documenting the various settings.

New for IPv4:
 - Adjust IGMP max memberships: 20 -> 1000
 - Use neighbor information on nexthop selection
 - Use inbound interface address on ICMP errors
 - Ignore routes with link down
 - Disable rp_filter

ARP settings have been changed to better fit routers, i.e., systems
with multiple interfaces:

 - Always use best local address when sending ARP
 - Only reply to ARP if target IP is on the inbound interface
 - Generate ARP requests when device is brought up or HW address changes

New for IPv6:
 - Keep static global addresses on link down
 - Ignore routes with link down

Fixes #829

[1]: https://github.com/FRRouting/frr/blob/master/doc/user/Useful_Sysctl_Settings.md

Signed-off-by: Joachim Wiberg <[email protected]>
@troglobit troglobit linked a pull request Dec 3, 2024 that will close this issue
17 tasks
troglobit added a commit that referenced this issue Dec 3, 2024
These changes are based on the sysctl recommendations by Frr [1].

Not all recommendations have been incorporated, e.g., ip forwarding is
not enabled per interface, because in Infix this is an opt-in feature.

A readme.txt has been added, documenting the various settings.

New for IPv4:
 - Adjust IGMP max memberships: 20 -> 1000
 - Use neighbor information on nexthop selection
 - Use inbound interface address on ICMP errors
 - Ignore routes with link down
 - Disable rp_filter

ARP settings have been changed to better fit routers, i.e., systems
with multiple interfaces:

 - Always use best local address when sending ARP
 - Only reply to ARP if target IP is on the inbound interface
 - Generate ARP requests when device is brought up or HW address changes

New for IPv6:
 - Keep static global addresses on link down
 - Ignore routes with link down

Fixes #829

[1]: https://github.com/FRRouting/frr/blob/master/doc/user/Useful_Sysctl_Settings.md

Signed-off-by: Joachim Wiberg <[email protected]>
@wkz wkz closed this as completed in 7467b2f Dec 4, 2024
@wkz wkz closed this as completed in #833 Dec 4, 2024
@github-project-automation github-project-automation bot moved this from In progress to Done in Infix & C:o Dec 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Status: Done
Development

Successfully merging a pull request may close this issue.

1 participant