gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/network-interfaces: don't write net.ipv4.conf.all.forwarding=0 (#509648)

Browse Source
This commit is contained in:
Ramses
2026-04-15 09:51:56 +00:00
committed by GitHub
parent 3113894db8 f7f9148111
commit ddbc31ef1d
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/tasks/network-interfaces.nix
+3 -1
View File
@@ -1780,7 +1780,9 @@ in
optionalString hasBonds "options bonding max_bonds=0";
boot.kernel.sysctl = {
"net.ipv4.conf.all.forwarding" = mkDefault (any (i: i.proxyARP) interfaces);
# Only set when proxyARP needs it; never write =0 (the kernel default),
# which would race with systemd-networkd's IPv4Forwarding= on switch.
"net.ipv4.conf.all.forwarding" = mkIf (any (i: i.proxyARP) interfaces) (mkDefault true);
"net.ipv6.conf.all.disable_ipv6" = mkDefault (!cfg.enableIPv6);
"net.ipv6.conf.default.disable_ipv6" = mkDefault (!cfg.enableIPv6);
# allow all users to do ICMP echo requests (ping)