Lines Matching +full:tx +full:- +full:ping +full:- +full:pong

1 .. SPDX-License-Identifier: GPL-2.0
10 ip_forward - BOOLEAN
19 - 0 (disabled)
20 - 1 (enabled)
24 ip_default_ttl - INTEGER
29 ip_no_pmtu_disc - INTEGER
31 fragmentation-required ICMP is received, the PMTU to this
42 accept fragmentation-needed errors if the underlying protocol
52 Possible values: 0-3
56 min_pmtu - INTEGER
57 default 552 - minimum Path MTU. Unless this is changed manually,
60 ip_forward_use_pmtu - BOOLEAN
64 You only need to enable this if you have user-space software
71 - 0 (disabled)
72 - 1 (enabled)
76 fwmark_reflect - BOOLEAN
77 Controls the fwmark of kernel-generated IPv4 reply packets that are not
84 - 0 (disabled)
85 - 1 (enabled)
89 fib_multipath_use_neigh - BOOLEAN
97 - 0 (disabled)
98 - 1 (enabled)
102 fib_multipath_hash_policy - INTEGER
110 - 0 - Layer 3
111 - 1 - Layer 4
112 - 2 - Layer 3 or inner Layer 3 if present
113 - 3 - Custom multipath hash. Fields used for multipath hash calculation
116 fib_multipath_hash_fields - UNSIGNED INTEGER
143 fib_multipath_hash_seed - UNSIGNED INTEGER
149 internal random-generated one.
151 The actual hashing algorithm is not specified -- there is no guarantee
157 fib_sync_mem - UNSIGNED INTEGER
163 ip_forward_update_priority - INTEGER
166 according to an rt_tos2priority table (see e.g. man tc-prio).
172 - 0 - Do not update priority.
173 - 1 - Update priority.
175 route/max_size - INTEGER
185 neigh/default/gc_thresh1 - INTEGER
191 neigh/default/gc_thresh2 - INTEGER
198 neigh/default/gc_thresh3 - INTEGER
199 Maximum number of non-PERMANENT neighbor entries allowed. Increase
201 with large numbers of directly-connected peers.
205 neigh/default/unres_qlen_bytes - INTEGER
218 neigh/default/unres_qlen - INTEGER
231 neigh/default/interval_probe_time_ms - INTEGER
237 mtu_expires - INTEGER
240 min_adv_mss - INTEGER
244 fib_notify_on_flag_change - INTEGER
255 The notifications will indicate to user-space the state of the route.
261 - 0 - Do not emit notifications.
262 - 1 - Emit notifications.
263 - 2 - Emit notifications only for RTM_F_OFFLOAD_FAILED flag change.
267 ipfrag_high_thresh - LONG INTEGER
270 ipfrag_low_thresh - LONG INTEGER
271 (Obsolete since linux-4.17)
276 ipfrag_time - INTEGER
279 ipfrag_max_dist - INTEGER
280 ipfrag_max_dist is a non-negative integer value which defines the
287 is done on fragments before they are added to a reassembly queue - if
302 bc_forwarding - INTEGER
303 bc_forwarding enables the feature described in rfc1812#section-5.3.5.2
312 inet_peer_threshold - INTEGER
315 entries' time-to-live and time intervals between garbage collection
316 passes. More entries, less time-to-live, less GC interval.
318 inet_peer_minttl - INTEGER
319 Minimum time-to-live of entries. Should be enough to cover fragment
320 time-to-live on the reassembling side. This minimum time-to-live is
324 inet_peer_maxttl - INTEGER
325 Maximum time-to-live of entries. Unused entries will expire after
333 somaxconn - INTEGER
335 Defaults to 4096. (Was 128 before linux-5.4)
338 tcp_abort_on_overflow - BOOLEAN
346 tcp_adv_win_scale - INTEGER
347 Obsolete since linux-6.6
349 (if tcp_adv_win_scale > 0) or bytes-bytes/2^(-tcp_adv_win_scale),
352 Possible values are [-31, 31], inclusive.
356 tcp_allowed_congestion_control - STRING
357 Show/set the congestion control choices available to non-privileged
363 tcp_app_win - INTEGER
371 tcp_autocorking - BOOLEAN
382 - 0 (disabled)
383 - 1 (enabled)
387 tcp_available_congestion_control - STRING
392 tcp_base_mss - INTEGER
397 tcp_mtu_probe_floor - INTEGER
403 tcp_min_snd_mss - INTEGER
412 tcp_congestion_control - STRING
422 tcp_dsack - BOOLEAN
427 - 0 (disabled)
428 - 1 (enabled)
432 tcp_early_retrans - INTEGER
439 - 0 disables TLP
440 - 3 or 4 enables TLP
444 tcp_ecn - INTEGER
463 tcp_ecn_fallback - BOOLEAN
465 back to non-ECN. Currently, this knob implements the fallback
473 - 0 (disabled)
474 - 1 (enabled)
478 tcp_fack - BOOLEAN
481 tcp_fin_timeout - INTEGER
485 valid "receive only" state for an un-orphaned connection, an
493 tcp_frto - INTEGER
494 Enables Forward RTO-Recovery (F-RTO) defined in RFC5682.
495 F-RTO is an enhanced recovery algorithm for TCP retransmission
497 RTT fluctuates (e.g., wireless). F-RTO is sender-side only
500 By default it's enabled with a non-zero value. 0 disables F-RTO.
502 tcp_fwmark_accept - BOOLEAN
513 - 0 (disabled)
514 - 1 (enabled)
518 tcp_invalid_ratelimit - INTEGER
523 (a) out-of-window sequence number,
524 (b) out-of-window acknowledgment number, or
528 a buggy or malicious middlebox or man-in-the-middle can
534 Using 0 disables rate-limiting of dupacks in response to
540 tcp_keepalive_time - INTEGER
544 tcp_keepalive_probes - INTEGER
548 tcp_keepalive_intvl - INTEGER
554 tcp_l3mdev_accept - BOOLEAN
564 - 0 (disabled)
565 - 1 (enabled)
569 tcp_low_latency - BOOLEAN
572 tcp_max_orphans - INTEGER
584 tcp_max_syn_backlog - INTEGER
588 This is a per-listener limit.
598 tcp_max_tw_buckets - INTEGER
600 If this number is exceeded time-wait socket is immediately destroyed
606 tcp_mem - vector of 3 INTEGERs: min, pressure, max
620 tcp_min_rtt_wlen - INTEGER
627 Possible values: 0 - 86400 (1 day)
631 tcp_moderate_rcvbuf - BOOLEAN
632 If enabled, TCP performs receive buffer auto-tuning, attempting to
638 - 0 (disabled)
639 - 1 (enabled)
643 tcp_mtu_probing - INTEGER
644 Controls TCP Packetization-Layer Path MTU Discovery. Takes three
647 - 0 - Disabled
648 - 1 - Disabled by default, enabled when an ICMP black hole detected
649 - 2 - Always enabled, use initial MSS of tcp_base_mss.
651 tcp_probe_interval - UNSIGNED INTEGER
652 Controls how often to start TCP Packetization-Layer Path MTU
656 tcp_probe_threshold - INTEGER
657 Controls when TCP Packetization-Layer Path MTU Discovery probing
661 tcp_no_metrics_save - BOOLEAN
671 - 0 (disabled)
672 - 1 (enabled)
676 tcp_no_ssthresh_metrics_save - BOOLEAN
682 - 0 (disabled)
683 - 1 (enabled)
687 tcp_orphan_retries - INTEGER
698 tcp_recovery - INTEGER
716 tcp_reflect_tos - BOOLEAN
726 - 0 (disabled)
727 - 1 (enabled)
731 tcp_reordering - INTEGER
738 tcp_max_reordering - INTEGER
745 tcp_retrans_collapse - BOOLEAN
746 Bug-to-bug compatibility with some broken printers.
752 - 0 (disabled)
753 - 1 (enabled)
757 tcp_retries1 - INTEGER
766 tcp_retries2 - INTEGER
783 tcp_rfc1337 - BOOLEAN
790 - 0 (disabled)
791 - 1 (enabled)
795 tcp_rmem - vector of 3 INTEGERs: min, default, max
814 tcp_sack - BOOLEAN
819 - 0 (disabled)
820 - 1 (enabled)
824 tcp_comp_sack_delay_ns - LONG INTEGER
831 tcp_comp_sack_slack_ns - LONG INTEGER
839 tcp_comp_sack_nr - INTEGER
845 tcp_backlog_ack_defer - BOOLEAN
852 - 0 (disabled)
853 - 1 (enabled)
857 tcp_slow_start_after_idle - BOOLEAN
865 - 0 (disabled)
866 - 1 (enabled)
870 tcp_stdurg - BOOLEAN
877 - 0 (disabled)
878 - 1 (enabled)
882 tcp_synack_retries - INTEGER
889 tcp_syncookies - INTEGER
914 tcp_migrate_req - BOOLEAN
916 the initial SYN packet is received during the three-way handshake.
917 When a listener is closed, in-flight request sockets during the
939 - 0 (disabled)
940 - 1 (enabled)
944 tcp_fastopen - INTEGER
955 the option value being the length of the syn-data backlog.
963 application before 3-way handshake finishes.
966 0x200 (server) accept data-in-SYN w/o any cookie option present.
976 tcp_fastopen_blackhole_timeout_sec - INTEGER
980 get detected right after Fastopen is re-enabled and will reset to
986 tcp_fastopen_key - list of comma separated 32-digit hexadecimal INTEGERs
997 per-socket keys will be used instead of any keys that are specified via
1000 A key is specified as 4 8-digit hexadecimal integers which are separated
1001 by a '-' as: xxxxxxxx-xxxxxxxx-xxxxxxxx-xxxxxxxx. Leading zeros may be
1006 tcp_syn_retries - INTEGER
1014 tcp_timestamps - INTEGER
1017 - 0: Disabled.
1018 - 1: Enable timestamps as defined in RFC1323 and use random offset for
1020 - 2: Like 1, but without random offsets.
1024 tcp_min_tso_segs - INTEGER
1027 Since linux-3.12, TCP does an automatic sizing of TSO frames,
1035 tcp_tso_rtt_log - INTEGER
1038 Starting from linux-5.18, TCP autosizing can be tweaked
1044 tso_packet_size = sk->sk_pacing_rate / 1024;
1058 tcp_pacing_ss_ratio - INTEGER
1059 sk->sk_pacing_rate is set by TCP stack using a ratio applied
1067 tcp_pacing_ca_ratio - INTEGER
1068 sk->sk_pacing_rate is set by TCP stack using a ratio applied
1075 tcp_syn_linear_timeouts - INTEGER
1085 tcp_tso_win_divisor - INTEGER
1093 tcp_tw_reuse - INTEGER
1094 Enable reuse of TIME-WAIT sockets for new connections when it is
1097 - 0 - disable
1098 - 1 - global enable
1099 - 2 - enable for loopback traffic only
1106 tcp_tw_reuse_delay - UNSIGNED INTEGER
1107 The delay in milliseconds before a TIME-WAIT socket can be reused by a
1108 new connection, if TIME-WAIT socket reuse is enabled. The actual reuse
1120 tcp_window_scaling - BOOLEAN
1125 - 0 (disabled)
1126 - 1 (enabled)
1130 tcp_shrink_window - BOOLEAN
1139 - 0 (disabled) - The window is never shrunk.
1140 - 1 (enabled) - The window is shrunk when necessary to remain within
1142 This only occurs if a non-zero receive window
1147 tcp_wmem - vector of 3 INTEGERs: min, default, max
1168 tcp_notsent_lowat - UNSIGNED INTEGER
1181 tcp_workaround_signed_windows - BOOLEAN
1189 - 0 (disabled)
1190 - 1 (enabled)
1194 tcp_thin_linear_timeouts - BOOLEAN
1201 non-aggressive thin streams, often found to be time-dependent.
1203 Documentation/networking/tcp-thin.rst
1207 - 0 (disabled)
1208 - 1 (enabled)
1212 tcp_limit_output_bytes - INTEGER
1224 tcp_challenge_ack_limit - INTEGER
1226 in RFC 5961 (Improving TCP's Robustness to Blind In-Window Attacks)
1232 tcp_ehash_entries - INTEGER
1239 tcp_child_ehash_entries - INTEGER
1257 Possible values: 0, 2^n (n: 0 - 24 (16Mi))
1261 tcp_plb_enabled - BOOLEAN
1272 field, and currently no-op for IPv4 headers. It is possible
1285 - 0 (disabled)
1286 - 1 (enabled)
1290 tcp_plb_idle_rehash_rounds - INTEGER
1296 Possible Values: 0 - 31
1300 tcp_plb_rehash_rounds - INTEGER
1307 Possible Values: 0 - 31
1311 tcp_plb_suspend_rto_sec - INTEGER
1319 Possible Values: 0 - 255
1323 tcp_plb_cong_thresh - INTEGER
1328 The 0-1 fraction range is mapped to 0-256 range to avoid floating
1337 Possible Values: 0 - 256
1341 tcp_pingpong_thresh - INTEGER
1344 "ping-pong" (request-response) connection for which delayed
1350 Possible Values: 1 - 255
1354 tcp_rto_min_us - INTEGER
1363 Possible Values: 1 - INT_MAX
1367 tcp_rto_max_ms - INTEGER
1374 Possible Values: 1000 - 120,000
1381 udp_l3mdev_accept - BOOLEAN
1390 - 0 (disabled)
1391 - 1 (enabled)
1395 udp_mem - vector of 3 INTEGERs: min, pressure, max
1406 udp_rmem_min - INTEGER
1413 udp_wmem_min - INTEGER
1414 UDP does not have tx memory accounting and this tunable has no effect.
1416 udp_hash_entries - INTEGER
1423 udp_child_ehash_entries - INTEGER
1438 Possible values: 0, 2^n (n: 7 (128) - 16 (64K))
1446 raw_l3mdev_accept - BOOLEAN
1455 - 0 (disabled)
1456 - 1 (enabled)
1463 cipso_cache_enable - BOOLEAN
1472 - 0 (disabled)
1473 - 1 (enabled)
1477 cipso_cache_bucket_size - INTEGER
1487 cipso_rbm_optfmt - BOOLEAN
1491 categories in order to make the packet data 32-bit aligned.
1495 - 0 (disabled)
1496 - 1 (enabled)
1500 cipso_rbm_strictvalid - BOOLEAN
1510 - 0 (disabled)
1511 - 1 (enabled)
1518 ip_local_port_range - 2 INTEGERS
1527 ip_local_reserved_ports - list of comma separated ranges
1528 Specify the ports which are reserved for known third-party
1534 list of ranges (e.g. "1,2-4,10-10" for ports 1, 2, 3, 4 and
1560 ip_unprivileged_port_start - INTEGER
1561 This is a per-namespace sysctl. It defines the first
1569 ip_nonlocal_bind - BOOLEAN
1570 If enabled, allows processes to bind() to non-local IP addresses,
1571 which can be quite useful - but may break some applications.
1575 - 0 (disabled)
1576 - 1 (enabled)
1580 ip_autobind_reuse - BOOLEAN
1590 - 0 (disabled)
1591 - 1 (enabled)
1595 ip_dynaddr - INTEGER
1596 If set non-zero, enables support for dynamic addresses.
1597 If set to a non-zero value larger than 1, a kernel log
1603 ip_early_demux - BOOLEAN
1613 - 0 (disabled)
1614 - 1 (enabled)
1618 ping_group_range - 2 INTEGERS
1621 create ping sockets. Setting it to "100 100" would grant permissions
1625 tcp_early_demux - BOOLEAN
1630 - 0 (disabled)
1631 - 1 (enabled)
1635 udp_early_demux - BOOLEAN
1641 - 0 (disabled)
1642 - 1 (enabled)
1646 icmp_echo_ignore_all - BOOLEAN
1652 - 0 (disabled)
1653 - 1 (enabled)
1657 icmp_echo_enable_probe - BOOLEAN
1663 - 0 (disabled)
1664 - 1 (enabled)
1668 icmp_echo_ignore_broadcasts - BOOLEAN
1674 - 0 (disabled)
1675 - 1 (enabled)
1679 icmp_ratelimit - INTEGER
1689 icmp_msgs_per_sec - INTEGER
1697 icmp_msgs_burst - INTEGER
1704 icmp_ratemask - INTEGER
1731 icmp_ignore_bogus_error_responses - BOOLEAN
1739 - 0 (disabled)
1740 - 1 (enabled)
1744 icmp_errors_use_inbound_ifaddr - BOOLEAN
1756 then the primary address of the first non-loopback interface that
1761 - 0 (disabled)
1762 - 1 (enabled)
1766 igmp_max_memberships - INTEGER
1778 M = 65536-sizeof (ip header)/(sizeof(Group record))
1783 (65536-24) / 12 = 5459
1788 igmp_max_msf - INTEGER
1794 igmp_qrv - INTEGER
1801 force_igmp_version - INTEGER
1802 - 0 - (default) No enforcement of a IGMP version, IGMPv1/v2 fallback
1805 - 1 - Enforce to use IGMP version 1. Will also reply IGMPv1 report if
1807 - 2 - Enforce to use IGMP version 2. Will fallback to IGMPv1 if receive
1809 - 3 - Enforce to use IGMP version 3. The same react with default 0.
1825 log_martians - BOOLEAN
1831 accept_redirects - BOOLEAN
1835 - both conf/{all,interface}/accept_redirects are TRUE in the case
1840 - at least one of conf/{all,interface}/accept_redirects is TRUE in the
1847 - TRUE (host)
1848 - FALSE (router)
1850 forwarding - BOOLEAN
1854 mc_forwarding - BOOLEAN
1860 medium_id - INTEGER
1865 to its medium, value of -1 means that medium is not known.
1871 proxy_arp - BOOLEAN
1878 proxy_arp_pvlan - BOOLEAN
1894 - In RFC 3069 it is called VLAN Aggregation.
1895 - Cisco and Allied Telesyn call it Private VLAN.
1896 - Hewlett-Packard call it Source-Port filtering or port-isolation.
1897 - Ericsson call it MAC-Forced Forwarding (RFC Draft).
1899 proxy_delay - INTEGER
1907 shared_media - BOOLEAN
1917 secure_redirects - BOOLEAN
1930 send_redirects - BOOLEAN
1939 bootp_relay - BOOLEAN
1950 accept_source_route - BOOLEAN
1957 - TRUE (router)
1958 - FALSE (host)
1960 accept_local - BOOLEAN
1966 route_localnet - BOOLEAN
1972 rp_filter - INTEGER
1973 - 0 - No source validation.
1974 - 1 - Strict mode as defined in RFC3704 Strict Reverse Path
1978 - 2 - Loose mode as defined in RFC3704 Loose Reverse Path
1993 src_valid_mark - BOOLEAN
1994 - 0 - The fwmark of the packet is not included in reverse path
1999 - 1 - The fwmark of the packet is included in reverse path route
2012 arp_filter - BOOLEAN
2013 - 1 - Allows you to have multiple network interfaces on the same
2020 - 0 - (default) The kernel can respond to arp requests with addresses
2024 particular interfaces. Only for more complex setups like load-
2031 arp_announce - INTEGER
2036 - 0 - (default) Use any local address, configured on any interface
2037 - 1 - Try to avoid local addresses that are not in the target's
2046 - 2 - Always use the best local address for this target.
2063 arp_ignore - INTEGER
2067 - 0 - (default): reply for any local target IP address, configured
2069 - 1 - reply only if the target IP address is local address
2071 - 2 - reply only if the target IP address is local address
2074 - 3 - do not reply for local addresses configured with scope host,
2076 - 4-7 - reserved
2077 - 8 - do not reply for all local addresses
2082 arp_notify - BOOLEAN
2091 arp_accept - INTEGER
2095 - 0 - don't create new entries in the ARP table
2096 - 1 - create new entries in the ARP table
2097 - 2 - create new entries only if the source IP address is in the same
2108 arp_evict_nocarrier - BOOLEAN
2116 - 0 (disabled) - Do not clear ARP cache on NOCARRIER events
2117 - 1 (enabled) - Clear the ARP cache on NOCARRIER events
2121 mcast_solicit - INTEGER
2126 ucast_solicit - INTEGER
2130 app_solicit - INTEGER
2135 mcast_resolicit - INTEGER
2139 disable_policy - BOOLEAN
2144 - 0 (disabled)
2145 - 1 (enabled)
2149 disable_xfrm - BOOLEAN
2154 - 0 (disabled)
2155 - 1 (enabled)
2159 igmpv2_unsolicited_report_interval - INTEGER
2165 igmpv3_unsolicited_report_interval - INTEGER
2171 ignore_routes_with_linkdown - BOOLEAN
2176 - 0 (disabled)
2177 - 1 (enabled)
2181 promote_secondaries - BOOLEAN
2188 - 0 (disabled)
2189 - 1 (enabled)
2193 drop_unicast_in_l2_multicast - BOOLEAN
2194 Drop any unicast IP packets that are received in link-layer
2202 - 0 (disabled)
2203 - 1 (enabled)
2207 drop_gratuitous_arp - BOOLEAN
2214 - 0 (disabled)
2215 - 1 (enabled)
2220 tag - INTEGER
2225 xfrm4_gc_thresh - INTEGER
2226 (Obsolete since linux-4.14)
2231 igmp_link_local_mcast_reports - BOOLEAN
2242 - Andi Kleen
2244 - Nicolas Delon
2256 bindv6only - BOOLEAN
2263 - 0 (disabled) - enable IPv4-mapped address feature
2264 - 1 (enabled) - disable IPv4-mapped address feature
2268 flowlabel_consistency - BOOLEAN
2275 - 0 (disabled)
2276 - 1 (enabled)
2280 auto_flowlabels - INTEGER
2299 flowlabel_state_ranges - BOOLEAN
2300 Split the flow label number space into two ranges. 0-0x7FFFF is
2301 reserved for the IPv6 flow manager facility, 0x80000-0xFFFFF
2306 - 0 (disabled)
2307 - 1 (enabled)
2312 flowlabel_reflect - INTEGER
2316 https://tools.ietf.org/html/draft-wang-6man-flow-label-reflection-01
2320 - 1: enabled for established flows
2323 in "tcp: change IPv6 flow-label upon receiving spurious retransmission"
2326 - 2: enabled for TCP RESET packets (no active listener)
2330 - 4: enabled for ICMPv6 echo reply messages.
2334 fib_multipath_hash_policy - INTEGER
2341 - 0 - Layer 3 (source and destination addresses plus flow label)
2342 - 1 - Layer 4 (standard 5-tuple)
2343 - 2 - Layer 3 or inner Layer 3 if present
2344 - 3 - Custom multipath hash. Fields used for multipath hash calculation
2347 fib_multipath_hash_fields - UNSIGNED INTEGER
2374 anycast_src_echo_reply - BOOLEAN
2380 - 0 (disabled)
2381 - 1 (enabled)
2386 idgen_delay - INTEGER
2393 idgen_retries - INTEGER
2399 mld_qrv - INTEGER
2406 max_dst_opts_number - INTEGER
2407 Maximum number of non-padding TLVs allowed in a Destination
2414 max_hbh_opts_number - INTEGER
2415 Maximum number of non-padding TLVs allowed in a Hop-by-Hop
2422 max_dst_opts_length - INTEGER
2428 max_hbh_length - INTEGER
2429 Maximum length allowed for a Hop-by-Hop options extension
2434 skip_notify_on_dev_down - BOOLEAN
2443 - 0 (disabled) - generate the message
2444 - 1 (enabled) - skip generating the message
2448 nexthop_compat_mode - BOOLEAN
2459 Note that as a backward-compatible mode, dumping of modern features
2466 fib_notify_on_flag_change - INTEGER
2477 The notifications will indicate to user-space the state of the route.
2483 - 0 - Do not emit notifications.
2484 - 1 - Emit notifications.
2485 - 2 - Emit notifications only for RTM_F_OFFLOAD_FAILED flag change.
2487 ioam6_id - INTEGER
2492 - Min: 0
2493 - Max: 0xFFFFFF
2497 ioam6_id_wide - LONG INTEGER
2503 - Min: 0
2504 - Max: 0xFFFFFFFFFFFFFF
2510 ip6frag_high_thresh - INTEGER
2516 ip6frag_low_thresh - INTEGER
2519 ip6frag_time - INTEGER
2523 Change the interface-specific default settings.
2529 Change all the interface-specific settings.
2533 conf/all/disable_ipv6 - BOOLEAN
2535 setting and also all per-interface ``disable_ipv6`` settings to the same
2543 conf/all/forwarding - BOOLEAN
2554 proxy_ndp - BOOLEAN
2559 - 0 (disabled)
2560 - 1 (enabled)
2564 force_forwarding - BOOLEAN
2565 Enable forwarding on this interface only -- regardless of the setting on
2569 fwmark_reflect - BOOLEAN
2570 Controls the fwmark of kernel-generated IPv6 reply packets that are not
2577 - 0 (disabled)
2578 - 1 (enabled)
2588 accept_ra - INTEGER
2607 - enabled if local forwarding is disabled.
2608 - disabled if local forwarding is enabled.
2610 accept_ra_defrtr - BOOLEAN
2615 - enabled if accept_ra is enabled.
2616 - disabled if accept_ra is disabled.
2618 ra_defrtr_metric - UNSIGNED INTEGER
2628 accept_ra_from_local - BOOLEAN
2629 Accept RA with source-address that is found on local machine
2632 Default is to NOT accept these as it may be an un-intended
2637 - enabled if accept_ra_from_local is enabled
2639 - disabled if accept_ra_from_local is disabled
2642 accept_ra_min_hop_limit - INTEGER
2650 accept_ra_min_lft - INTEGER
2658 accept_ra_pinfo - BOOLEAN
2663 - enabled if accept_ra is enabled.
2664 - disabled if accept_ra is disabled.
2666 ra_honor_pio_life - BOOLEAN
2673 - 0 (disabled) - RFC4862 section 5.5.3e is used to determine
2675 - 1 (enabled) - the PIO valid lifetime will always be honored.
2679 ra_honor_pio_pflag - BOOLEAN
2680 The Prefix Information Option P-flag indicates the network can
2681 allocate a unique IPv6 prefix per client using DHCPv6-PD.
2682 This sysctl can be enabled when a userspace DHCPv6-PD client
2683 is running to cause the P-flag to take effect: i.e. the
2684 P-flag suppresses any effects of the A-flag within the same
2689 - 0 (disabled) - the P-flag is ignored.
2690 - 1 (enabled) - the P-flag will disable SLAAC autoconfiguration
2695 accept_ra_rt_info_min_plen - INTEGER
2704 * -1 if accept_ra_rtr_pref is disabled.
2706 accept_ra_rt_info_max_plen - INTEGER
2715 * -1 if accept_ra_rtr_pref is disabled.
2717 accept_ra_rtr_pref - BOOLEAN
2722 - enabled if accept_ra is enabled.
2723 - disabled if accept_ra is disabled.
2725 accept_ra_mtu - BOOLEAN
2731 - enabled if accept_ra is enabled.
2732 - disabled if accept_ra is disabled.
2734 accept_redirects - BOOLEAN
2739 - enabled if local forwarding is disabled.
2740 - disabled if local forwarding is enabled.
2742 accept_source_route - INTEGER
2745 - >= 0: Accept only routing header type 2.
2746 - < 0: Do not accept routing header.
2750 autoconf - BOOLEAN
2756 - enabled if accept_ra_pinfo is enabled.
2757 - disabled if accept_ra_pinfo is disabled.
2759 dad_transmits - INTEGER
2764 forwarding - INTEGER
2765 Configure interface-specific Host/Router behaviour.
2774 - 0 Forwarding disabled
2775 - 1 Forwarding enabled
2801 hop_limit - INTEGER
2806 mtu - INTEGER
2811 ip_nonlocal_bind - BOOLEAN
2812 If enabled, allows processes to bind() to non-local IPv6 addresses,
2813 which can be quite useful - but may break some applications.
2817 - 0 (disabled)
2818 - 1 (enabled)
2822 router_probe_interval - INTEGER
2828 router_solicitation_delay - INTEGER
2834 router_solicitation_interval - INTEGER
2839 router_solicitations - INTEGER
2845 use_oif_addrs_only - BOOLEAN
2852 - 0 (disabled)
2853 - 1 (enabled)
2857 use_tempaddr - INTEGER
2869 * -1 (for point-to-point devices and loopback devices)
2871 temp_valid_lft - INTEGER
2873 minimum required lifetime (typically 5-7 seconds), temporary addresses
2878 temp_prefered_lft - INTEGER
2881 5-7 seconds), the preferred lifetime is the minimum required. If
2887 keep_addr_on_down - INTEGER
2897 max_desync_factor - INTEGER
2905 regen_min_advance - INTEGER
2915 regen_max_retry - INTEGER
2921 max_addresses - INTEGER
2929 disable_ipv6 - BOOLEAN
2931 will be dynamically set to TRUE if DAD fails for the link-local
2937 it will dynamically create a link-local address on the given
2945 accept_dad - INTEGER
2951 2 Enable DAD, and disable IPv6 operation if MAC-based duplicate
2952 link-local address has been found.
2958 force_tllao - BOOLEAN
2959 Enable sending the target link-layer address option even when
2964 Quoting from RFC 2461, section 4.4, Target link-layer address:
2970 omitted since the sender of the solicitation has the correct link-
2972 solicitation in the first place. However, including the link-layer
2974 race condition where the sender deletes the cached link-layer address
2977 ndisc_notify - BOOLEAN
2982 - 0 (disabled) - do nothing
2983 - 1 (enabled) - Generate unsolicited neighbour advertisements when device is brought
2988 ndisc_tclass - INTEGER
2996 * 0 - (default)
2998 ndisc_evict_nocarrier - BOOLEAN
3006 - 0 (disabled) - Do not clear neighbor discovery cache on NOCARRIER events.
3007 - 1 (enabled) - Clear neighbor discover cache on NOCARRIER events.
3011 mldv1_unsolicited_report_interval - INTEGER
3017 mldv2_unsolicited_report_interval - INTEGER
3023 force_mld_version - INTEGER
3024 * 0 - (default) No enforcement of a MLD version, MLDv1 fallback allowed
3025 * 1 - Enforce to use MLD version 1
3026 * 2 - Enforce to use MLD version 2
3028 suppress_frag_ndisc - INTEGER
3032 * 1 - (default) discard fragmented neighbor discovery packets
3033 * 0 - allow fragmented neighbor discovery packets
3035 optimistic_dad - BOOLEAN
3044 - 0 (disabled)
3045 - 1 (enabled)
3050 use_optimistic - BOOLEAN
3061 - 0 (disabled)
3062 - 1 (enabled)
3066 stable_secret - IPv6 address
3068 addresses for link-local addresses and autoconfigured
3071 addrgenmode ip-link. conf/default/stable_secret is used as the
3080 addr_gen_mode - INTEGER
3081 Defines how link-local and autoconf addresses are generated.
3085 1 do no generate a link-local address, use EUI64 for addresses
3092 drop_unicast_in_l2_multicast - BOOLEAN
3093 Drop any unicast IPv6 packets that are received in link-layer
3098 - 0 (disabled)
3099 - 1 (enabled)
3103 drop_unsolicited_na - BOOLEAN
3110 - 0 (disabled)
3111 - 1 (enabled)
3115 accept_untracked_na - INTEGER
3119 - 0 - (default) Do not accept unsolicited and untracked neighbor
3122 - 1 - Add a new neighbor cache entry in STALE state for routers on
3124 with target link-layer address option specified if no neighbor entry
3129 This is as per router-side behavior documented in RFC9131.
3133 This will optimize the return path for the initial off-link
3135 ensuring that the first-hop router which turns on this setting doesn't
3136 have to buffer the initial return packets to do neighbor-solicitation.
3142 - 2 - Extend option (1) to add a new neighbor cache entry only if the
3146 enhanced_dad - BOOLEAN
3156 - 0 (disabled)
3157 - 1 (enabled)
3164 ratelimit - INTEGER
3172 ratemask - list of comma separated ranges
3177 list of ranges (e.g. "0-127,129" for ICMPv6 message type 0 to 127 and
3181 Refer to: https://www.iana.org/assignments/icmpv6-parameters/icmpv6-parameters.xhtml
3185 Default: 0-1,3-127 (rate limit ICMPv6 errors except Packet Too Big)
3187 echo_ignore_all - BOOLEAN
3193 - 0 (disabled)
3194 - 1 (enabled)
3198 echo_ignore_multicast - BOOLEAN
3204 - 0 (disabled)
3205 - 1 (enabled)
3209 echo_ignore_anycast - BOOLEAN
3215 - 0 (disabled)
3216 - 1 (enabled)
3220 error_anycast_as_unicast - BOOLEAN
3227 - 0 (disabled)
3228 - 1 (enabled)
3232 xfrm6_gc_thresh - INTEGER
3233 (Obsolete since linux-4.14)
3241 YOSHIFUJI Hideaki / USAGI Project <yoshfuji@linux-ipv6.org>
3247 bridge-nf-call-arptables - BOOLEAN
3251 - 0 (disabled) - disable this.
3252 - 1 (enabled) - pass bridged ARP traffic to arptables' FORWARD chain.
3256 bridge-nf-call-iptables - BOOLEAN
3260 - 0 (disabled) - disable this.
3261 - 1 (enabled) - pass bridged IPv4 traffic to iptables' chains.
3265 bridge-nf-call-ip6tables - BOOLEAN
3269 - 0 (disabled) - disable this.
3270 - 1 (enabled) - pass bridged IPv6 traffic to ip6tables' chains.
3274 bridge-nf-filter-vlan-tagged - BOOLEAN
3278 - 0 (disabled) - disable this.
3279 - 1 (enabled) - pass bridged vlan-tagged ARP/IP/IPv6 traffic to {arp,ip,ip6}tables
3283 bridge-nf-filter-pppoe-tagged - BOOLEAN
3287 - 0 (disabled) - disable this.
3288 - 1 (enabled) - pass bridged pppoe-tagged IP/IPv6 traffic to {ip,ip6}tables.
3292 bridge-nf-pass-vlan-input-dev - BOOLEAN
3293 - 1: if bridge-nf-filter-vlan-tagged is enabled, try to find a vlan
3295 vlan. This allows use of e.g. "iptables -i br0.1" and makes the
3296 REDIRECT target work with vlan-on-top-of-bridge interfaces. When no
3300 - 0: disable bridge netfilter vlan interface lookup.
3307 addip_enable - BOOLEAN
3309 (ADD-IP) functionality specified in RFC5061. This extension provides
3315 - 0 (disabled) - disable extension.
3316 - 1 (enabled) - enable extension
3320 pf_enable - INTEGER
3330 https://datatracker.ietf.org/doc/draft-ietf-tsvwg-sctp-failover for
3335 - 1: Enable pf.
3336 - 0: Disable pf.
3340 pf_expose - INTEGER
3343 in the SCTP_PEER_ADDR_CHANGE event and access of SCTP_PF-state
3348 - 0: Unset pf state exposure (compatible with old applications). No
3350 - 1: Disable pf state exposure. No event will be sent and trying to
3351 obtain transport info will return -EACCESS.
3352 - 2: Enable pf state exposure. The event will be sent for a transport
3357 addip_noauth_enable - BOOLEAN
3358 Dynamic Address Reconfiguration (ADD-IP) requires the use of
3363 allowing the ADD-IP extension. For reasons of interoperability,
3368 1 Allow ADD-IP extension to be used without authentication. This
3377 auth_enable - BOOLEAN
3381 (ADD-IP) extension.
3385 - 0 (disabled) - disable extension.
3386 - 1 (enabled) - enable extension
3390 prsctp_enable - BOOLEAN
3396 - 0 (disabled) - disable extension.
3397 - 1 (enabled) - enable extension
3401 max_burst - INTEGER
3407 association_max_retrans - INTEGER
3414 max_init_retransmits - INTEGER
3415 The maximum number of retransmissions of INIT and COOKIE-ECHO chunks
3421 path_max_retrans - INTEGER
3429 pf_retrans - INTEGER
3437 http://www.ietf.org/id/draft-nishida-tsvwg-sctp-failover-05.txt
3445 ps_retrans - INTEGER
3447 from section-5 "Primary Path Switchover" in rfc7829. The primary path
3457 rto_initial - INTEGER
3464 rto_max - INTEGER
3470 rto_min - INTEGER
3476 hb_interval - INTEGER
3483 sack_timeout - INTEGER
3489 valid_cookie_life - INTEGER
3495 cookie_preserve_enable - BOOLEAN
3501 - 0 (disabled) - disable.
3502 - 1 (enabled) - enable cookie lifetime extension.
3506 cookie_hmac_alg - STRING
3508 a listening sctp socket to a connecting client in the INIT-ACK chunk.
3522 rcvbuf_policy - INTEGER
3533 - 1: rcvbuf space is per association
3534 - 0: rcvbuf space is per socket
3538 sndbuf_policy - INTEGER
3541 - 1: Send buffer is tracked per association
3542 - 0: Send buffer is tracked per socket.
3546 sctp_mem - vector of 3 INTEGERs: min, pressure, max
3557 sctp_rmem - vector of 3 INTEGERs: min, default, max
3567 sctp_wmem - vector of 3 INTEGERs: min, default, max
3577 addr_scope_policy - INTEGER
3579 https://datatracker.ietf.org/doc/draft-stewart-tsvwg-sctp-ipv4/00/
3582 - 0 - Disable IPv4 address scoping
3583 - 1 - Enable IPv4 address scoping
3584 - 2 - Follow draft but allow IPv4 private addresses
3585 - 3 - Follow draft but allow IPv4 link local addresses
3589 udp_port - INTEGER
3591 using the IANA-assigned UDP port number 9899 (sctp-tunneling).
3593 This UDP sock is used for processing the incoming UDP-encapsulated
3599 for the outgoing UDP-encapsulated SCTP packets. For the dest port,
3604 encap_port - INTEGER
3608 outgoing UDP-encapsulated SCTP packets by default. Users can also
3620 plpmtud_probe_interval - INTEGER
3632 reconf_enable - BOOLEAN
3640 - 0 (disabled) - Disable extension.
3641 - 1 (enabled) - Enable extension.
3645 intl_enable - BOOLEAN
3648 messages sent on different streams. With this feature enabled, I-DATA
3656 - 0 (disabled) - Disable extension.
3657 - 1 (enabled) - Enable extension.
3661 ecn_enable - BOOLEAN
3670 - 0 (disabled) - Disable ecn.
3671 - 1 (enabled) - Enable ecn.
3675 l3mdev_accept - BOOLEAN
3684 - 0 (disabled)
3685 - 1 (enabled)
3693 Please see: Documentation/admin-guide/sysctl/net.rst for descriptions of these entries.
3699 max_dgram_qlen - INTEGER