xref: /linux/Documentation/networking/seg6-sysctl.rst (revision 818b26588994d9d95743fca0a427f08ec6c1c41d)
1d6c48bc6SMauro Carvalho Chehab.. SPDX-License-Identifier: GPL-2.0
2d6c48bc6SMauro Carvalho Chehab
3d6c48bc6SMauro Carvalho Chehab====================
4d6c48bc6SMauro Carvalho ChehabSeg6 Sysfs variables
5d6c48bc6SMauro Carvalho Chehab====================
6d6c48bc6SMauro Carvalho Chehab
7d6c48bc6SMauro Carvalho Chehab
8d6c48bc6SMauro Carvalho Chehab/proc/sys/net/conf/<iface>/seg6_* variables:
9d6c48bc6SMauro Carvalho Chehab============================================
10d6c48bc6SMauro Carvalho Chehab
11d6c48bc6SMauro Carvalho Chehabseg6_enabled - BOOL
12d6c48bc6SMauro Carvalho Chehab	Accept or drop SR-enabled IPv6 packets on this interface.
13d6c48bc6SMauro Carvalho Chehab
14d6c48bc6SMauro Carvalho Chehab	Relevant packets are those with SRH present and DA = local.
15d6c48bc6SMauro Carvalho Chehab
16d6c48bc6SMauro Carvalho Chehab	* 0 - disabled (default)
17d6c48bc6SMauro Carvalho Chehab	* not 0 - enabled
18d6c48bc6SMauro Carvalho Chehab
19d6c48bc6SMauro Carvalho Chehabseg6_require_hmac - INTEGER
20d6c48bc6SMauro Carvalho Chehab	Define HMAC policy for ingress SR-enabled packets on this interface.
21d6c48bc6SMauro Carvalho Chehab
22d6c48bc6SMauro Carvalho Chehab	* -1 - Ignore HMAC field
23d6c48bc6SMauro Carvalho Chehab	* 0 - Accept SR packets without HMAC, validate SR packets with HMAC
24d6c48bc6SMauro Carvalho Chehab	* 1 - Drop SR packets without HMAC, validate SR packets with HMAC
25d6c48bc6SMauro Carvalho Chehab
26d6c48bc6SMauro Carvalho Chehab	Default is 0.
27*292ecd9fSNicolas Dichtel
28*292ecd9fSNicolas Dichtelseg6_flowlabel - INTEGER
29*292ecd9fSNicolas Dichtel	Controls the behaviour of computing the flowlabel of outer
30*292ecd9fSNicolas Dichtel	IPv6 header in case of SR T.encaps
31*292ecd9fSNicolas Dichtel
32*292ecd9fSNicolas Dichtel	 == =======================================================
33*292ecd9fSNicolas Dichtel	 -1  set flowlabel to zero.
34*292ecd9fSNicolas Dichtel	  0  copy flowlabel from Inner packet in case of Inner IPv6
35*292ecd9fSNicolas Dichtel	     (Set flowlabel to 0 in case IPv4/L2)
36*292ecd9fSNicolas Dichtel	  1  Compute the flowlabel using seg6_make_flowlabel()
37*292ecd9fSNicolas Dichtel	 == =======================================================
38*292ecd9fSNicolas Dichtel
39*292ecd9fSNicolas Dichtel	Default is 0.
40