shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2024-11-02 19:21:53 +03:00
Code
bcaf24cd77
systemd/test/fuzz/fuzz-network-parser/directives.network

512 lines
6.4 KiB
SYSTEMD
Raw Normal View History

tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
[Bridge]
Cost=
UseBPDU=
HairPin=
UnicastFlood=
FastLeave=
Priority=
AllowPortToBeRoot=
networkd: bridge add support to configure multicast_to_unicast closes #10649
2018-12-03 13:47:36 +03:00
MulticastToUnicast=
networkd: Add bridge port capabilities This PR adds the configuration switches for multicast flooding, neighbor suppression and learning of a bridge port.
2019-03-10 23:25:24 +03:00
MulticastFlood=
NeighborSuppression=
Learning=
networkd: Add support to configure proxy ARP and proxy ARP Wifi
2019-05-04 17:51:13 +03:00
ProxyARP=
ProxyARPWiFi=
network: add support to configure proxy ARP/WIFI
2019-05-09 03:32:12 +03:00
MulticastRouter=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
[Match]
KernelVersion=
Type=
Driver=
Architecture=
Path=
network: support matching based on wifi interfece type
2019-10-25 10:29:23 +03:00
WLANInterfaceType=
network: support matching based on wifi SSID
2019-07-24 08:46:55 +03:00
SSID=
network: add support matching based on BSSID=
2019-07-24 09:32:24 +03:00
BSSID=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
Name=
network,udev: add Property= setting in [Match] section Closes #5665.
2019-06-22 19:44:13 +03:00
Property=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
Virtualization=
KernelCommandLine=
Host=
MACAddress=
network, udev: introduce PermanentMACAddress= setting in [Match] section Closes #13983.
2019-01-07 14:16:19 +03:00
PermanentMACAddress=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
[Link]
network: add ActivationPolicy= configuration parameter This parameter allows configuring the activation policy for an interface, meaning how it manages the interface's administrative state (IFF_UP flag). The policy can be configured to bring the interface either up or down when the interface is (re)configured, to always force the interface either up or down, or to never change the interface administrative state. If the interface is bound with BindCarrier=, its administrative state is controlled by the interface(s) it's bound to, and this parameter is forced to 'bound'. This changes the default behavior of how systemd-networkd sets the IFF_UP flag; previously, it was set up (if not already up) every time the link_joined() function was called. Now, with the default ActivationPolicy= setting of 'up', it will only set the IFF_UP flag once, the first time link_joined() is called, during an interface's configuration; and on the first link_joined() call each time the interface is reconfigured. Fixes: #3031 Fixes: #17437
2020-06-18 23:09:40 +03:00
ActivationPolicy=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
RequiredForOnline=
ARP=
AllMulticast=
Unmanaged=
MTUBytes=
Multicast=
MACAddress=
network: Add support to group links. Link groups are similar to port ranges found in managed switches. You can add network interfaces to a numbered group and perform operations on all the interfaces from that group at once.
2020-04-07 15:36:55 +03:00
Group=
network: Allow to configure interface promiscuous mode
2020-12-15 07:00:17 +03:00
Promiscuous=
network: Introduce SR-IOV SR-IOV provides the ability to partition a single physical PCI resource into virtual PCI functions which can then be injected in to a VM. In the case of network VFs, SR-IOV improves north-south n etwork performance (that is, traffic with endpoints outside the host machine) by allowing traffic to bypass the host machine’s network stack.
2020-06-21 14:17:34 +03:00
[SR-IOV]
VirtualFunction=
MACSpoofCheck=
VLANId=
network: add VLANProtocol= setting in [SR-IOV] section
2020-06-22 13:26:31 +03:00
VLANProtocol=
network: Introduce SR-IOV SR-IOV provides the ability to partition a single physical PCI resource into virtual PCI functions which can then be injected in to a VM. In the case of network VFs, SR-IOV improves north-south n etwork performance (that is, traffic with endpoints outside the host machine) by allowing traffic to bypass the host machine’s network stack.
2020-06-21 14:17:34 +03:00
QualityOfService=
QueryReceiveSideScaling=
Trust=
LinkState=
network: add MACAddress= setting in [SR-IOV] section
2020-06-22 13:48:33 +03:00
MACAddress=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
[BridgeFDB]
VLANId=
MACAddress=
networkd: Add support to configure destination address for bridge FDB Closes #5145. Example conf: ``` [Match] Name=vxlan1309 [BridgeFDB] MACAddress=00:00:00:00:00:00 Destination=10.0.0.2 [BridgeFDB] MACAddress=00:00:00:00:00:00 Destination=10.0.0.4 [BridgeFDB] MACAddress=00:00:00:00:00:00 Destination=10.0.0.5 ```
2019-04-30 12:23:39 +03:00
Destination=
networkd: bridge fdb add support to configure VXLAN VNI
2019-05-06 17:28:52 +03:00
VNI=
networkd: bridge FDB support more NTF_* flags Add support to configure NTF_ROUTER and NTF_USE
2019-05-08 17:13:21 +03:00
AssociatedWith=
test: add BridgeMDB to fuzz-network-parser/directives.network
2020-09-10 10:34:30 +03:00
[BridgeMDB]
MulticastGroupAddress=
VLANId=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
[DHCP]
UseDomains=
UseRoutes=
IAID=
UserClass=
UseNTP=
RapidCommit=
ForceDHCPv6PDOtherInformation=
UseMTU=
UseDomainName=
RouteMetric=
SendHostname=
Anonymize=
VendorClassIdentifier=
Hostname=
DUIDType=
UseHostname=
UseDNS=
CriticalConnection=
DUIDRawData=
RequestBroadcast=
ClientIdentifier=
ListenPort=
UseTimezone=
RouteTable=
network: rename [DHCP] section to [DHCPv4] To keep the backward compatibility broken by the previous commit.
2019-07-10 11:33:05 +03:00
[DHCPv4]
UseDNS=
network: add DHCPv4.RoutesToDNS= setting
2019-07-16 20:47:20 +03:00
RoutesToDNS=
network: rename [DHCP] section to [DHCPv4] To keep the backward compatibility broken by the previous commit.
2019-07-10 11:33:05 +03:00
UseDomains=
UseRoutes=
network: add a flag to ignore gateway provided by DHCP server Closes #15117.
2020-03-16 12:55:10 +03:00
UseGateway=
network: rename [DHCP] section to [DHCPv4] To keep the backward compatibility broken by the previous commit.
2019-07-10 11:33:05 +03:00
IAID=
UserClass=
UseNTP=
network: DHCP server Add support to transmit SIP server 1. DHCP server trasmit 2. Client parses and saves in leases Implements http://www.rfc-editor.org/rfc/rfc3361.txt ``` Frame 134: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Ethernet II, Src: 42:65:85:d6:4e:32 (42:65:85:d6:4e:32), Dst: 1e:04:f8:b8:2f:d4 (1e:04:f8:b8:2f:d4) Internet Protocol Version 4, Src: 192.168.5.1, Dst: 192.168.5.11 User Datagram Protocol, Src Port: 67, Dst Port: 68 Dynamic Host Configuration Protocol (ACK) Message type: Boot Reply (2) Hardware type: Ethernet (0x01) Hardware address length: 6 Hops: 0 Transaction ID: 0x7cc87cb4 Seconds elapsed: 0 Bootp flags: 0x0000 (Unicast) Client IP address: 0.0.0.0 Your (client) IP address: 192.168.5.11 Next server IP address: 0.0.0.0 Relay agent IP address: 0.0.0.0 Client MAC address: 1e:04:f8:b8:2f:d4 (1e:04:f8:b8:2f:d4) Client hardware address padding: 00000000000000000000 Server host name not given Boot file name not given Magic cookie: DHCP Option: (53) DHCP Message Type (ACK) Length: 1 DHCP: ACK (5) Option: (51) IP Address Lease Time Length: 4 IP Address Lease Time: (3600s) 1 hour Option: (1) Subnet Mask (255.255.255.0) Length: 4 Subnet Mask: 255.255.255.0 Option: (3) Router Length: 4 Router: 192.168.5.1 Option: (6) Domain Name Server Length: 4 Domain Name Server: 192.168.5.1 Option: (42) Network Time Protocol Servers Length: 4 Network Time Protocol Server: 192.168.1.1 Option: (120) SIP Servers <=====here Length: 9 SIP Server Encoding: IPv4 Address (1) SIP Server Address: 192.168.1.1 SIP Server Address: 192.168.5.2 Option: (101) TCode Length: 13 TZ TCode: Europe/Berlin Option: (54) DHCP Server Identifier (192.168.5.1) Length: 4 DHCP Server Identifier: 192.168.5.1 Option: (255) End Option End: 255 ``` ``` cat /run/systemd/netif/state  ✔  ⚡  3148  16:40:51 OPER_STATE=routable CARRIER_STATE=carrier ADDRESS_STATE=routable DNS=192.168.94.2 192.168.5.1 NTP=192.168.5.1 SIP=192.168.1.1 192.168.5.2 ``` aa
2019-09-18 16:22:47 +03:00
UseSIP=
network: rename [DHCP] section to [DHCPv4] To keep the backward compatibility broken by the previous commit.
2019-07-10 11:33:05 +03:00
UseMTU=
UseDomainName=
RouteMetric=
SendHostname=
Anonymize=
VendorClassIdentifier=
Hostname=
DUIDType=
UseHostname=
CriticalConnection=
DUIDRawData=
RequestBroadcast=
ClientIdentifier=
ListenPort=
UseTimezone=
RouteTable=
tree-wide: avoid some loaded terms https://tools.ietf.org/html/draft-knodel-terminology-02 https://lwn.net/Articles/823224/ This gets rid of most but not occasions of these loaded terms: 1. scsi_id and friends are something that is supposed to be removed from our tree (see #7594) 2. The test suite defines an API used by the ubuntu CI. We can remove this too later, but this needs to be done in sync with the ubuntu CI. 3. In some cases the terms are part of APIs we call or where we expose concepts the kernel names the way it names them. (In particular all remaining uses of the word "slave" in our codebase are like this, it's used by the POSIX PTY layer, by the network subsystem, the mount API and the block device subsystem). Getting rid of the term in these contexts would mean doing some major fixes of the kernel ABI first. Regarding the replacements: when whitelist/blacklist is used as noun we replace with with allow list/deny list, and when used as verb with allow-list/deny-list.
2020-06-23 09:31:16 +03:00
DenyList=
network: rename [DHCP] section to [DHCPv4] To keep the backward compatibility broken by the previous commit.
2019-07-10 11:33:05 +03:00
BlackList=
DHCPv4: client add support for DHCP server allow list
2020-06-26 06:28:52 +03:00
AllowList=
network dhcp4: Add support send request options in a generic manner
2019-09-17 15:49:22 +03:00
RequestOptions=
network: rename [DHCP] section to [DHCPv4] To keep the backward compatibility broken by the previous commit.
2019-07-10 11:33:05 +03:00
SendRelease=
MaxAttempts=
dhcp4: make IPServiceType configurable IPServiceType set to CS6 (network control) causes problems on some old network setups that continue to interpret the field as IP TOS. Make DHCP work on such networks by allowing this field to be set to CS4 (Realtime) instead, as this maps to IPTOS_LOWDELAY. Signed-off-by: Siddharth Chandrasekaran <csiddharth@vmware.com>
2019-09-23 14:25:21 +03:00
IPServiceType=
network: rename SendOptions= to SendOption= The name with plural made more sense where multiple options could be specified in one line. After changes in the pull request, this option only accepts one value, so from users' POV it should be singular. (The field in the data structure remains plural, because it actually stores multiple values.)
2019-10-30 10:56:18 +03:00
SendOption=
network: Fix split in `SendOption=` on client and server When specifying `DHCPv4.SendOption=`, it is used by systemd-networkd to set the value of that option within the DHCP request that is sent out. This differs to setting `DHCPServer.SendOption=`, which will place all the options together as suboptions into the vendor-specific information (code 43) option. This commit adds two new config options, `DHCPv4.SendVendorOption=` and `DHCPServer.SendVendorOption=`. These both have the behaviour of the old `DHCPServer.SendOption=` flag, and set the value of the suboption in the vendor-specific information option. The behaviour of `DHCPServer.SendOption=` is then changed to reflect that of `DHCPv4.SendOption=`. It will set the value of the corresponding option in the DHCP request.
2020-02-28 21:28:49 +03:00
SendVendorOption=
network: DHCP4 introduce send decline
2019-12-20 16:13:18 +03:00
SendDecline=
network: DHCPv4 - introduce The Manufacturer Usage Description (MUD)
2020-03-30 17:43:28 +03:00
MUDURL=
network: Add support to configure DHCPv4 route MTU This is useful for transitioning systems from small frames to jumbo frames. Closes #14302
2019-12-19 13:05:16 +03:00
RouteMTUBytes=
network: DHCPv4- Allow to set DHCP lease lifetime
2020-05-20 07:23:36 +03:00
FallbackLeaseLifetimeSec=
networkd: DHCPv6 - separate DHCPv6 options from DHCPv4 options Closes https://github.com/systemd/systemd/issues/12917
2019-07-09 17:23:28 +03:00
[DHCPv6]
network: introduce new UseAddress= setting in [DHCPv6] section If it is disabled, then the addresses provided by the DHCPv6 server will be ignored. Closes #18203.
2021-01-11 18:02:09 +03:00
UseAddress=
networkd: DHCPv6 - separate DHCPv6 options from DHCPv4 options Closes https://github.com/systemd/systemd/issues/12917
2019-07-09 17:23:28 +03:00
UseNTP=
UseDNS=
network: rename UseFQDN= -> UseHostname= Prompted by https://github.com/systemd/systemd/pull/18543#issuecomment-780798451.
2021-02-17 23:30:09 +03:00
UseHostname=
network: also introduce UseDomains= for [DHCPv6] section When we split [DHCP] section into [DHCPv4] and [DHCPv6], UseDomains= setting was forgot to be introduced in [DHCPv6] section.
2021-03-13 13:40:22 +03:00
UseDomains=
networkd: DHCPv6 - separate DHCPv6 options from DHCPv4 options Closes https://github.com/systemd/systemd/issues/12917
2019-07-09 17:23:28 +03:00
RapidCommit=
ForceDHCPv6PDOtherInformation=
network: DHCPv6 client add support for prefix delegation hint Add support for prefix hint lenth and prefix hint address ``` Frame 43: 177 bytes on wire (1416 bits), 177 bytes captured (1416 bits) on interface 0 Ethernet II, Src: f6:c1:08:4d:45:f1 (f6:c1:08:4d:45:f1), Dst: IPv6mcast_01:00:02 (33:33:00:01:00:02) Internet Protocol Version 6, Src: fe80::d250:c82:7f6e:28d6, Dst: ff02::1:2 User Datagram Protocol, Src Port: 546, Dst Port: 547 DHCPv6 Message type: Solicit (1) Transaction ID: 0x5c7902 Rapid Commit Identity Association for Non-temporary Address Fully Qualified Domain Name Identity Association for Prefix Delegation Option: Identity Association for Prefix Delegation (25) Length: 41 Value: 1b97b1690000000000000000001a0019ffffffffffffffff… IAID: 1b97b169 T1: 0 T2: 0 IA Prefix Option: IA Prefix (26) Length: 25 Value: ffffffffffffffff3c000000000000000000000000000000… Preferred lifetime: infinity Valid lifetime: infinity Prefix length: 60 Prefix address: :: Option Request Client Identifier Elapsed time ```
2019-09-25 06:14:12 +03:00
PrefixDelegationHint=
network: Allow DHCPv6 client to start without router's managed flag.
2020-02-15 15:51:34 +03:00
WithoutRA=
network: DHCPv6 Add support to send MUD URL
2020-03-30 17:31:10 +03:00
MUDURL=
DHCP client: make SendOption work for DHCPv6 too.
2020-05-01 17:30:31 +03:00
SendOption=
network: DHCPv6 - Add support set arbitary request options
2020-04-23 15:31:47 +03:00
RequestOptions=
network: DHCPv6 - Add support to send user class Frame 115: 171 bytes on wire (1368 bits), 171 bytes captured (1368 bits) on interface veth-peer, id 0 Ethernet II, Src: 1e:04:f8:b8:2f:d4 (1e:04:f8:b8:2f:d4), Dst: IPv6mcast_01:00:02 (33:33:00:01:00:02) Internet Protocol Version 6, Src: fe80::1c04:f8ff:feb8:2fd4, Dst: ff02::1:2 User Datagram Protocol, Src Port: 546, Dst Port: 547 DHCPv6 Message type: Solicit (1) Transaction ID: 0x673257 Rapid Commit Option: Rapid Commit (14) Length: 0 Identity Association for Non-temporary Address Option: Identity Association for Non-temporary Address (3) Length: 12 Value: d0cc94090000000000000000 IAID: d0cc9409 T1: 0 T2: 0 Fully Qualified Domain Name Option: Fully Qualified Domain Name (39) Length: 6 Value: 01045a657573 0000 0... = Reserved: 0x00 .... .0.. = N bit: Server should perform DNS updates .... ..0. = O bit: Server has not overridden client's S bit preference .... ...1 = S bit: Server should perform forward DNS updates Client FQDN: Zeus User Class Option: User Class (15) Length: 17 Value: 000f68656c6c6f30313233343031323334 Identity Association for Prefix Delegation Option: Identity Association for Prefix Delegation (25) Length: 12 Value: d0cc94090000000000000000 IAID: d0cc9409 T1: 0 T2: 0 Option Request Option: Option Request (6) Length: 10 Value: 001700180038001f000e Requested Option code: DNS recursive name server (23) Requested Option code: Domain Search List (24) Requested Option code: NTP Server (56) Requested Option code: Simple Network Time Protocol Server (31) Requested Option code: Rapid Commit (14) Client Identifier Option: Client Identifier (1) Length: 14 Value: 00020000ab11d258482fc7eee651 DUID: 00020000ab11d258482fc7eee651 DUID Type: assigned by vendor based on Enterprise number (2) Enterprise ID: Tom Gundersen (systemd) (43793) Identifier: d258482fc7eee651 Elapsed time Option: Elapsed time (8) Length: 2 Value: 0bd0 Elapsed time: 30240ms
2020-05-18 15:49:47 +03:00
UserClass=
network: DHCPv6 - Add support to send vendor class information Frame 1: 177 bytes on wire (1416 bits), 177 bytes captured (1416 bits) on interface veth-peer, id 0 Ethernet II, Src: 1e:04:f8:b8:2f:d4 (1e:04:f8:b8:2f:d4), Dst: IPv6mcast_01:00:02 (33:33:00:01:00:02) Internet Protocol Version 6, Src: fe80::1c04:f8ff:feb8:2fd4, Dst: ff02::1:2 User Datagram Protocol, Src Port: 546, Dst Port: 547 DHCPv6 Message type: Solicit (1) Transaction ID: 0x5ca46b Rapid Commit Identity Association for Non-temporary Address Fully Qualified Domain Name Vendor Class Option: Vendor Class (16) Length: 23 Value: 0000ab11000048656c6c6f3a686f773a6172653a796f75 Enterprise ID: Tom Gundersen (systemd) (43793) vendor-class-data: Hello:how:are:you Identity Association for Prefix Delegation Option Request Client Identifier Elapsed time
2020-05-17 18:14:47 +03:00
VendorClass=
network: Inroduce DHCP6- send vendor options network: Inroduce DHCP6- send vendor options ``` 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | OPTION_VENDOR_OPTS | option-len | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | enterprise-number | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ . . . vendor-option-data . . . +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ ``` ``` 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | sub-opt-code | sub-option-len | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ . . . sub-option-data . . . +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Figure 31: Vendor-specific Options Format sub-opt-code The code for the sub-option. A 2-octet field. sub-option-len An unsigned integer giving the length of the sub-option-data field in this sub-option in octets. A 2-octet field. sub-option-data The data area for the sub-option. The length, in octets, is specified by sub-option-len. ```
2020-05-26 11:46:54 +03:00
SendVendorOption=
network: add DHCPv6.RouteMetric= Hopefully fixes #15295.
2020-06-01 07:02:16 +03:00
RouteMetric=
network: rename settings about DHCPv6 Prefix Delegation Closes #16602.
2020-07-28 23:50:04 +03:00
[DHCPv6PrefixDelegation]
SubnetId=
network: introduce Announce= in [DHCPv6PrefixDelegation] When disabled, the delegated prefixes are not emit by RA. Closes #17353.
2020-10-16 10:00:49 +03:00
Announce=
network: rename settings about DHCPv6 Prefix Delegation Closes #16602.
2020-07-28 23:50:04 +03:00
Assign=
network: introduce ManageTemporaryAddress= setting in [DHCPv6PrefixDelegation] section The setting is enabled by default, as NDisc also enabled the flag by default. Closes #18208.
2021-01-13 00:34:32 +03:00
ManageTemporaryAddress=
network: rename settings about DHCPv6 Prefix Delegation Closes #16602.
2020-07-28 23:50:04 +03:00
Token=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
[Route]
Destination=
Protocol=
Table=
Gateway=
InitialAdvertisedReceiveWindow=
network: rename GatewayOnlink= to GatewayOnLink= But still GatewayOnlink= is supported for backward compatibility.
2019-02-27 11:43:08 +03:00
GatewayOnLink=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
GatewayOnlink=
Type=
InitialCongestionWindow=
IPv6Preference=
PreferredSource=
Scope=
MTUBytes=
QuickAck=
networkd: route add support to configure fastopen_no_cookie This patch adds fastopen_no_cookie option to enable/disable TCP fastopen without a cookie on a per-route basis.
2019-05-13 14:15:33 +03:00
FastOpenNoCookie=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
Source=
Metric=
networkd: route add MPLS TTL propagate
2019-05-16 12:49:08 +03:00
TTLPropagate=
network: introduce multipath route Closes #12541.
2019-11-28 18:36:02 +03:00
MultiPathRoute=
network: route - add support to configure tcp advmss
2021-01-07 18:17:17 +03:00
TCPAdvertisedMaximumSegmentSize=
network: add NextHop= setting in [Route] section
2021-02-09 12:52:57 +03:00
NextHop=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
[Network]
IPv6DuplicateAddressDetection=
IPMasquerade=
ProxyARP=
PrimarySlave=
IPv4LLRoute=
network: add DefaultRouteOnDevice= setting in [Network] section When enabled, then default route bound to the interface will be created. This is useful when adding routes on point-to-point interfaces. Closes #788.
2019-05-14 10:43:14 +03:00
DefaultRouteOnDevice=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
Address=
IPv6ProxyNDPAddress=
IPv6AcceptRA=
IPv6AcceptRouterAdvertisements=
network: introduce IPv4AcceptLocal= setting Closes #16090.
2020-06-08 07:48:14 +03:00
IPv4AcceptLocal=
network: Add "route_localnet" sysctl support
2021-02-18 11:55:13 +03:00
IPv4RouteLocalnet=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
DNSSECNegativeTrustAnchors=
MACVTAP=
IPv6PrivacyExtensions=
MACVLAN=
MulticastDNS=
LLDP=
Tunnel=
Gateway=
IPv4LL=
IPVLAN=
networkd: introduce netdev ipvtap This patch adds netdev ipvtap that is based on the IP-VLAN network interface, called ipvtap. An ipvtap device can be created in the same way as an ipvlan device, using 'kind ipvtap', and then accessed using the tap user space interface.
2019-05-15 13:12:30 +03:00
IPVTAP=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
EmitLLDP=
IPv6MTUBytes=
IPv4ProxyARP=
Bridge=
DNSOverTLS=
Bond=
IPv6ProxyNDP=
DNS=
fuzz: move DNSDefaultRoute= setting to [Network] section
2020-10-19 07:16:31 +03:00
DNSDefaultRoute=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
ActiveSlave=
LLMNR=
DNSSEC=
IPv6HopLimit=
IPForward=
IPv6Token=
Added support for xfrm interfaces
2019-07-08 18:09:46 +03:00
Xfrm=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
Description=
VXLAN=
networkd: Introduce l2tp tunnel This works allows networkd to configure l2tp tunnel. See http://man7.org/linux/man-pages/man8/ip-l2tp.8.html
2019-03-06 22:51:29 +03:00
L2TP=
network: Introduce MACsec Media Access Control Security (MACsec) is an 802.1AE IEEE industry-standard security technology that provides secure communication for all traffic on Ethernet links. MACsec provides point-to-point security on Ethernet links between directly connected nodes and is capable of identifying and preventing most security threats, including denial of service, intrusion, man-in-the-middle, masquerading, passive wiretapping, and playback attacks. Closes #5754
2019-04-03 14:27:36 +03:00
MACsec=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
LinkLocalAddressing=
network: move IPv6LinkLocalAddressGenerationMode= to [Network] section This also moves and renames variables and functions. Follow-ups for a6f1848a2328cf1493f363968d105cc23019af8a.
2020-06-30 11:01:30 +03:00
IPv6LinkLocalAddressGenerationMode=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
ConfigureWithoutCarrier=
NTP=
DHCP=
Domains=
network: rename IPv6PrefixDelegation= to IPv6SendRA=
2020-10-19 06:08:53 +03:00
IPv6SendRA=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
IPv6PrefixDelegation=
VLAN=
DHCPServer=
BindCarrier=
VRF=
networkd: Allow to retain configs even if carrier is lost When there is bad link in the network the carrier goes up/down. This makes networkd stops all the clients and drop config. But if the remote router/dhcpserver running a prevention of DHCP Starvation attack or DHCP Flood attack it does not allow networkd to take a DHCP lease resulting failure in configuration. This patch allows to keep the client running and keep the conf also for this scenario. Closes #9111
2018-06-01 12:34:49 +03:00
IgnoreCarrierLoss=
networkd: add support to keep configuration
2019-06-03 06:31:13 +03:00
KeepConfiguration=
network: introduce DHCPv6PrefixDelegation= setting Then, the link can configure prefix delegated by DHCPv6 without emitting RA.
2020-10-16 09:50:44 +03:00
DHCPv6PrefixDelegation=
network: Implement B.A.T.M.A.N. Advanced interface type
2020-10-02 22:43:05 +03:00
BatmanAdvanced=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
[IPv6Prefix]
Prefix=
OnLink=
PreferredLifetimeSec=
AddressAutoconfiguration=
ValidLifetimeSec=
network: introduce IPv6 prefix assign Expose a boolean flag to automatically add an address from the delegated prefix to the interface
2020-02-27 15:32:43 +03:00
Assign=
network: Add support to advertie ipv6 route Implements https://tools.ietf.org/html/rfc4191 cat veth99.network ``` [Match] Name=veth99 [Network] DHCP=no IPv6PrefixDelegation=yes Address=2001:db8:0:1::1/64 [IPv6Prefix] Prefix=2001:db8:0:1::4/64 [IPv6RoutePrefix] Route=2001:db0:fff::/48 ``` Wireshark ``` Frame 481: 142 bytes on wire (1136 bits), 142 bytes captured (1136 bits) on interface 0 Ethernet II, Src: 1e:04:f8:b8:2f:d4 (1e:04:f8:b8:2f:d4), Dst: IPv6mcast_01 (33:33:00:00:00:01) Internet Protocol Version 6, Src: fe80::1c04:f8ff:feb8:2fd4, Dst: ff02::1 Internet Control Message Protocol v6 Type: Router Advertisement (134) Code: 0 Checksum: 0xec77 [correct] [Checksum Status: Good] Cur hop limit: 0 Flags: 0x00, Prf (Default Router Preference): Medium Router lifetime (s): 0 Reachable time (ms): 0 Retrans timer (ms): 0 ICMPv6 Option (Source link-layer address : 1e:04:f8:b8:2f:d4) Type: Source link-layer address (1) Length: 1 (8 bytes) Link-layer address: 1e:04:f8:b8:2f:d4 (1e:04:f8:b8:2f:d4) ICMPv6 Option (MTU : 1500) Type: MTU (5) Length: 1 (8 bytes) Reserved MTU: 1500 ICMPv6 Option (Prefix information : 2001:db8:0:1::4/64) Type: Prefix information (3) Length: 4 (32 bytes) Prefix Length: 64 Flag: 0xc0, On-link flag(L), Autonomous address-configuration flag(A) Valid Lifetime: 2592000 Preferred Lifetime: 604800 Reserved Prefix: 2001:db8:0:1::4 ICMPv6 Option (Route Information : Medium 2001:db0:fff::/48) Type: Route Information (24) Length: 3 (24 bytes) Prefix Length: 48 Flag: 0x00, Route Preference: Medium ...0 0... = Route Preference: Medium (0) 000. .000 = Reserved: 0 Route Lifetime: 604800 Prefix: 2001:db0:fff:: ```
2019-09-14 14:14:22 +03:00
[IPv6RoutePrefix]
Route=
LifetimeSec=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
[BridgeVLAN]
EgressUntagged=
VLAN=
PVID=
LLDP: Add support to transmit MUD URL
2020-03-30 22:57:58 +03:00
[LLDP]
MUDURL=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
[CAN]
SamplePoint=
BitRate=
network: can: add support for CAN-FD related properties
2020-03-27 00:27:41 +03:00
DataSamplePoint=
DataBitRate=
FDMode=
FDNonISO=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
RestartSec=
network: introduce TripleSampling= option in CAN section When enabled, three samples are used to determine the value of a received bit by majority rule. This patch adds support for the TripleSampling= option in the [CAN] section of .network files.
2019-03-11 17:25:20 +03:00
TripleSampling=
network: can: add support for bus error reporting Enhance systemd-networkd to be able to control a CAN device's berr-reporting flag via the new boolean directive BusErrorReporting= to be used in network files.
2021-01-05 20:53:44 +03:00
BusErrorReporting=
network: add CAN Termination tristate option
2020-02-12 05:13:45 +03:00
Termination=
network: can: add support for listen-only mode Closes #15129.
2020-03-16 07:40:30 +03:00
ListenOnly=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
[Address]
DuplicateAddressDetection=
AutoJoin=
PreferredLifetime=
Address=
Scope=
HomeAddress=
PrefixRoute=
network: introduce AddPrefixRoute= and deprecate PrefixRoute= PrefixRoute= was added by e63be0847c39bfdca45c25c505922814374581a7, but unfortunately, the meaning of PrefixRoute= is inverted; when true IFA_F_NOPREFIXROUTE flag is added. This introduces AddPrefixRoute= setting.
2019-12-07 18:32:36 +03:00
AddPrefixRoute=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
ManageTemporaryAddress=
Broadcast=
Peer=
Label=
[RoutingPolicyRule]
Table=
IncomingInterface=
To=
OutgoingInterface=
From=
TypeOfService=
Priority=
FirewallMark=
networkd: add support to configure ip rule port range and protocol. Please see: iprule: support for ip_proto, sport and dport match options https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/commit/?id=f686f764682745daf6a93b0a6330ba42a961f858 Closes 10622
2018-11-27 08:28:54 +03:00
SourcePort=
DestinationPort=
network: rename Protocol= in [RoutingPolicyRule] to IPProtocol=
2018-11-29 18:42:39 +03:00
IPProtocol=
networkd: RPDB rule - add support to configure inverted rule. Closes #10706
2018-12-03 15:55:30 +03:00
InvertRule=
network: add RoutingPolicyRule.Family= setting Closes #13233.
2019-08-01 01:41:36 +03:00
Family=
network: add SuppressPrefixLength option to RoutingPolicyRule (#14736) Closes #14724.
2020-02-03 02:25:48 +03:00
SuppressPrefixLength=
network: support UID based routing policy Closes #14666.
2020-01-26 16:22:38 +03:00
User=
network: Allow to configure unreachable/blackhole RoutingPolicyRule (#17984)
2020-12-18 06:21:15 +03:00
Type=
network: rename IPv6PrefixDelegation= to IPv6SendRA=
2020-10-19 06:08:53 +03:00
[IPv6SendRA]
RouterPreference=
DNSLifetimeSec=
DNS=
RouterLifetimeSec=
Domains=
EmitDNS=
EmitDomains=
Managed=
OtherInformation=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
[IPv6PrefixDelegation]
RouterPreference=
DNSLifetimeSec=
DNS=
RouterLifetimeSec=
Domains=
EmitDNS=
EmitDomains=
Managed=
OtherInformation=
networkd: Static neighbor support When using networkd we currently have no way of ensuring that static neighbor entries are set when our link comes up. This change adds a new section to the network definition that allows multiple static neighbors to be set on a link.
2018-11-29 06:00:58 +03:00
[Neighbor]
Address=
network: rename Neighbor.MACAddress= to Neighbor.LinkLayerAddress= And make it support IPv4 address. Closes #13015.
2019-07-10 20:23:41 +03:00
LinkLayerAddress=
fuzz: fix spelling of MACsec and MACAddress in the corpus
2019-05-07 21:33:38 +03:00
MACAddress=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
[IPv6AddressLabel]
Label=
Prefix=
[IPv6AcceptRA]
UseDomains=
RouteTable=
UseDNS=
network: add setting to support RA without DHCPv6 client Closes #13991.
2020-02-15 19:32:49 +03:00
DHCPv6Client=
Add to fuzzer
2019-02-14 18:40:59 +03:00
UseAutonomousPrefix=
UseOnLinkPrefix=
network: introduce RouterAllowList= and RouterDenyList= in [IPv6AcceptRA]
2020-12-24 08:27:25 +03:00
RouterAllowList=
RouterDenyList=
networkd: add support for prefix allow-list and route allow-list
2020-12-18 22:28:38 +03:00
PrefixAllowList=
network: rename DenyList= -> PrefixDenyList=
2020-12-24 08:00:24 +03:00
PrefixDenyList=
networkd: add support for prefix allow-list and route allow-list
2020-12-18 22:28:38 +03:00
RouteAllowList=
network: rename DenyList= -> PrefixDenyList=
2020-12-24 08:00:24 +03:00
RouteDenyList=
tree-wide: avoid some loaded terms https://tools.ietf.org/html/draft-knodel-terminology-02 https://lwn.net/Articles/823224/ This gets rid of most but not occasions of these loaded terms: 1. scsi_id and friends are something that is supposed to be removed from our tree (see #7594) 2. The test suite defines an API used by the ubuntu CI. We can remove this too later, but this needs to be done in sync with the ubuntu CI. 3. In some cases the terms are part of APIs we call or where we expose concepts the kernel names the way it names them. (In particular all remaining uses of the word "slave" in our codebase are like this, it's used by the POSIX PTY layer, by the network subsystem, the mount API and the block device subsystem). Getting rid of the term in these contexts would mean doing some major fixes of the kernel ABI first. Regarding the replacements: when whitelist/blacklist is used as noun we replace with with allow list/deny list, and when used as verb with allow-list/deny-list.
2020-06-23 09:31:16 +03:00
DenyList=
networkd: Ability to selectively ignore IPv6 prefixes supplied via router advertisement Closes https://github.com/systemd/systemd/issues/10647
2019-05-17 19:21:20 +03:00
BlackList=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
[DHCPServer]
EmitNTP=
PoolSize=
PoolOffset=
Timezone=
EmitDNS=
NTP=
network: DHCP server Add support to transmit SIP server 1. DHCP server trasmit 2. Client parses and saves in leases Implements http://www.rfc-editor.org/rfc/rfc3361.txt ``` Frame 134: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Ethernet II, Src: 42:65:85:d6:4e:32 (42:65:85:d6:4e:32), Dst: 1e:04:f8:b8:2f:d4 (1e:04:f8:b8:2f:d4) Internet Protocol Version 4, Src: 192.168.5.1, Dst: 192.168.5.11 User Datagram Protocol, Src Port: 67, Dst Port: 68 Dynamic Host Configuration Protocol (ACK) Message type: Boot Reply (2) Hardware type: Ethernet (0x01) Hardware address length: 6 Hops: 0 Transaction ID: 0x7cc87cb4 Seconds elapsed: 0 Bootp flags: 0x0000 (Unicast) Client IP address: 0.0.0.0 Your (client) IP address: 192.168.5.11 Next server IP address: 0.0.0.0 Relay agent IP address: 0.0.0.0 Client MAC address: 1e:04:f8:b8:2f:d4 (1e:04:f8:b8:2f:d4) Client hardware address padding: 00000000000000000000 Server host name not given Boot file name not given Magic cookie: DHCP Option: (53) DHCP Message Type (ACK) Length: 1 DHCP: ACK (5) Option: (51) IP Address Lease Time Length: 4 IP Address Lease Time: (3600s) 1 hour Option: (1) Subnet Mask (255.255.255.0) Length: 4 Subnet Mask: 255.255.255.0 Option: (3) Router Length: 4 Router: 192.168.5.1 Option: (6) Domain Name Server Length: 4 Domain Name Server: 192.168.5.1 Option: (42) Network Time Protocol Servers Length: 4 Network Time Protocol Server: 192.168.1.1 Option: (120) SIP Servers <=====here Length: 9 SIP Server Encoding: IPv4 Address (1) SIP Server Address: 192.168.1.1 SIP Server Address: 192.168.5.2 Option: (101) TCode Length: 13 TZ TCode: Europe/Berlin Option: (54) DHCP Server Identifier (192.168.5.1) Length: 4 DHCP Server Identifier: 192.168.5.1 Option: (255) End Option End: 255 ``` ``` cat /run/systemd/netif/state  ✔  ⚡  3148  16:40:51 OPER_STATE=routable CARRIER_STATE=carrier ADDRESS_STATE=routable DNS=192.168.94.2 192.168.5.1 NTP=192.168.5.1 SIP=192.168.1.1 192.168.5.2 ``` aa
2019-09-18 16:22:47 +03:00
EmitSIP=
SIP=
network: clean-up DHCP lease server data configuration This is an attempt to clean up the POP3/SMTP/LPR/… DHCP lease server data logic in networkd. This reduces code duplication and fixes a number of bugs. This removes any support for collecting POP3/SMPT/LPR servers acquired via local DHCP client releases since noone uses that, and given how old these protocols are I doubt this will change. It keeps support for configuring them for the dhcp server however. The differences between the DNS/NTP/SIP/POP3/SMTP/LPR configuration logics are minimized. This removes the relevant symbols from sd-network.h (which is an internal API only at this point after all). This is unfortunately not well test, given the old code for this had barely any tests. But the new code should not perform worse at least, and allow us to release, since it corrects some interfaces visible in the .network configuration format. Fixes: #15943
2020-06-16 21:35:18 +03:00
EmitPOP3=
POP3=
EmitSMTP=
SMTP=
EmitLPR=
LPR=
tests: add a couple of files containing all the sections and directives This should help the fuzzers to discover code paths faster. In case anyone is interested, they were generated with the following script ``` perl -aF'/[\s,]+/' -ne ' if (my ($s, $d) = ($F[0] =~ /^([^\s\.]+)\.([^\s\.]+)$/)) { $d{$s}{$d} = 1; } END { while (my ($key, $value) = each %d) { printf "[%s]\n%s\n", $key, join("\n", keys(%$value)) }}' ``` by passing src/network/networkd-network-gperf.gperf and src/network/netdev/netdev-gperf.gperf to it.
2018-11-06 21:42:29 +03:00
EmitRouter=
MaxLeaseTimeSec=
DefaultLeaseTimeSec=
EmitTimezone=
DNS=
network: rename SendRawOption= to SendOption= As DHCPv4.SendOption= and DHCPServer.SendRawOption= take the same format.
2019-11-18 11:33:58 +03:00
SendOption=
network: Fix split in `SendOption=` on client and server When specifying `DHCPv4.SendOption=`, it is used by systemd-networkd to set the value of that option within the DHCP request that is sent out. This differs to setting `DHCPServer.SendOption=`, which will place all the options together as suboptions into the vendor-specific information (code 43) option. This commit adds two new config options, `DHCPv4.SendVendorOption=` and `DHCPServer.SendVendorOption=`. These both have the behaviour of the old `DHCPServer.SendOption=` flag, and set the value of the suboption in the vendor-specific information option. The behaviour of `DHCPServer.SendOption=` is then changed to reflect that of `DHCPv4.SendOption=`. It will set the value of the corresponding option in the DHCP request.
2020-02-28 21:28:49 +03:00
SendVendorOption=
network: introduce ip nexthop routing Used to manipulate entries in the kernel's nexthop tables. Example: ``` [NextHop] Id=3 Gateway=192.168.5.1 ```
2019-10-04 22:40:51 +03:00
[NextHop]
Id=
Gateway=
network: nexthop: introduce Family= setting in [NextHop] section This is an alias of `Gateway=0.0.0.0` or `Gateway=::`.
2021-02-03 10:59:26 +03:00
Family=
network: nexthop: add OnLink= setting
2021-02-14 08:49:35 +03:00
OnLink=
network: nexthop: add Blackhole= setting in [NextHop] section As similar to unreachable type routes, blackhole nexthops do not have NHA_OID attribute, so they are managed by Manager.
2021-02-14 20:56:24 +03:00
Blackhole=
network: introduce new [QDisc] section to support Parent=ingress Follow-up for 18de0969c5763ce119692b59f8622c379e79c6cc.
2020-02-05 13:10:33 +03:00
[QDisc]
Parent=
network: add support for qdisc handle
2020-02-10 10:05:35 +03:00
Handle=
network: split TrafficControlQueueingDiscipline section into small pieces Closes #14763.
2020-02-04 15:45:29 +03:00
[NetworkEmulator]
Parent=
network: add support for qdisc handle
2020-02-10 10:05:35 +03:00
Handle=
network: split TrafficControlQueueingDiscipline section into small pieces Closes #14763.
2020-02-04 15:45:29 +03:00
DelaySec=
DelayJitterSec=
LossRate=
DuplicateRate=
PacketLimit=
network: TokenBufferFilter→TokenBucketFilter This never made into a release, so we can change the name with impunity. Noticed by Davide Pesavento.
2020-02-04 19:22:41 +03:00
[TokenBucketFilter]
network: split TrafficControlQueueingDiscipline section into small pieces Closes #14763.
2020-02-04 15:45:29 +03:00
Parent=
network: add support for qdisc handle
2020-02-10 10:05:35 +03:00
Handle=
network: split TrafficControlQueueingDiscipline section into small pieces Closes #14763.
2020-02-04 15:45:29 +03:00
Rate=
network: tc: rename several settings which take size in bytes
2020-07-01 10:05:32 +03:00
BurstBytes=
network: split TrafficControlQueueingDiscipline section into small pieces Closes #14763.
2020-02-04 15:45:29 +03:00
Burst=
network: tc: rename several settings which take size in bytes
2020-07-01 10:05:32 +03:00
LimitBytes=
network: split TrafficControlQueueingDiscipline section into small pieces Closes #14763.
2020-02-04 15:45:29 +03:00
LimitSize=
MTUBytes=
MPUBytes=
PeakRate=
LatencySec=
[StochasticFairnessQueueing]
Parent=
network: add support for qdisc handle
2020-02-10 10:05:35 +03:00
Handle=
network: split TrafficControlQueueingDiscipline section into small pieces Closes #14763.
2020-02-04 15:45:29 +03:00
PerturbPeriodSec=
[FairQueueingControlledDelay]
Parent=
network: add support for qdisc handle
2020-02-10 10:05:35 +03:00
Handle=
network: split TrafficControlQueueingDiscipline section into small pieces Closes #14763.
2020-02-04 15:45:29 +03:00
PacketLimit=
network: tc: rename several settings which take size in bytes
2020-07-01 10:05:32 +03:00
MemoryLimitBytes=
network: split TrafficControlQueueingDiscipline section into small pieces Closes #14763.
2020-02-04 15:45:29 +03:00
MemoryLimit=
Flows=
network: tc: rename several settings which take size in bytes
2020-07-01 10:05:32 +03:00
QuantumBytes=
network: split TrafficControlQueueingDiscipline section into small pieces Closes #14763.
2020-02-04 15:45:29 +03:00
Quantum=
TargetSec=
IntervalSec=
CEThresholdSec=
ECN=
network: FairQueueTrafficPolicing→FairQueueing This never made into a release, so we can change the name with impunity. Suggested by Davide Pesavento. I opted to add the "ing" ending. "Fair queuing" is the name of the general concept and algorithm, and "Fair queue" is mostly used for the implementation name.
2020-02-04 19:35:12 +03:00
[FairQueueing]
network: split TrafficControlQueueingDiscipline section into small pieces Closes #14763.
2020-02-04 15:45:29 +03:00
Parent=
network: add support for qdisc handle
2020-02-10 10:05:35 +03:00
Handle=
network: split TrafficControlQueueingDiscipline section into small pieces Closes #14763.
2020-02-04 15:45:29 +03:00
PacketLimit=
FlowLimit=
network: tc: rename several settings which take size in bytes
2020-07-01 10:05:32 +03:00
QuantumBytes=
network: split TrafficControlQueueingDiscipline section into small pieces Closes #14763.
2020-02-04 15:45:29 +03:00
Quantum=
network: tc: rename several settings which take size in bytes
2020-07-01 10:05:32 +03:00
InitialQuantumBytes=
network: split TrafficControlQueueingDiscipline section into small pieces Closes #14763.
2020-02-04 15:45:29 +03:00
InitialQuantum=
MaximumRate=
Buckets=
OrphanMask=
Pacing=
CEThresholdSec=
[ControlledDelay]
Parent=
network: add support for qdisc handle
2020-02-10 10:05:35 +03:00
Handle=
network: split TrafficControlQueueingDiscipline section into small pieces Closes #14763.
2020-02-04 15:45:29 +03:00
PacketLimit=
TargetSec=
IntervalSec=
CEThresholdSec=
ECN=
network: tc: introduce cake CAKE (Common Applications Kept Enhanced) Please see http://man7.org/linux/man-pages/man8/tc-cake.8.html
2020-03-02 09:54:17 +03:00
[CAKE]
Parent=
Handle=
Bandwidth=
network: tc: rename several settings which take size in bytes
2020-07-01 10:05:32 +03:00
OverheadBytes=
network: introduce TrafficControl Add network delay to a interface
2019-10-07 17:19:00 +03:00
[TrafficControlQueueingDiscipline]
Parent=
NetworkEmulatorDelaySec=
NetworkEmulatorDelayJitterSec=
NetworkEmulatorLossRate=
qdisc: netem add support to duplicate packets. using this option the chosen percent of packets is duplicated before queuing them
2019-10-30 20:58:02 +03:00
NetworkEmulatorDuplicateRate=
network: introduce TrafficControl Add network delay to a interface
2019-10-07 17:19:00 +03:00
NetworkEmulatorPacketLimit=
network: tc: support teql Closes #14792.
2020-02-06 11:52:24 +03:00
[TrivialLinkEqualizer]
Parent=
network: add support for qdisc handle
2020-02-10 10:05:35 +03:00
Handle=
network: tc: support teql Closes #14792.
2020-02-06 11:52:24 +03:00
Id=
network: tc: support Hierarchy Token Bucket (HTB)
2020-02-10 13:41:12 +03:00
[HierarchyTokenBucket]
Parent=
Handle=
DefaultClass=
network: tc: add more settings for HTB Closes #15213.
2020-06-08 11:36:52 +03:00
RateToQuantum=
network: tc: support HTB class
2020-02-12 03:52:56 +03:00
[HierarchyTokenBucketClass]
Parent=
ClassId=
Priority=
network: tc: add more settings for HTB Closes #15213.
2020-06-08 11:36:52 +03:00
QuantumBytes=
MTUBytes=
OverheadBytes=
network: tc: support HTB class
2020-02-12 03:52:56 +03:00
Rate=
CeilRate=
network: tc: add more settings for HTB Closes #15213.
2020-06-08 11:36:52 +03:00
BufferBytes=
CeilBufferBytes=
network: TC - introduce BFIFO bfifo - Byte limited First In, First Out queue
2020-03-10 14:53:32 +03:00
[BFIFO]
Parent=
Handle=
network: tc: rename several settings which take size in bytes
2020-07-01 10:05:32 +03:00
LimitBytes=
network: TC introduce PFIFO
2020-02-10 18:12:21 +03:00
[PFIFO]
Parent=
Handle=
PacketLimit=
network: TC - introduce pfifo_head_drop This adds the required changes to gain access to the head drop classfull queuing discipline named pfifo_head_drop.
2020-03-10 15:19:56 +03:00
[PFIFOHeadDrop]
Parent=
Handle=
PacketLimit=
network: TC - introduce pfifo_fast pfifo_fast - three-band first in, first out queue Please see https://linux.die.net/man/8/tc-pfifo_fast
2020-03-11 13:02:20 +03:00
[PFIFOFast]
Parent=
Handle=
network: TC introduce GRED, Generic Random Early Detection http://tldp.org/en/Traffic-Control-HOWTO/ar01s06.html
2020-02-10 15:24:02 +03:00
[GenericRandomEarlyDetection]
Parent=
Handle=
VirtualQueues=
DefaultVirtualQueue=
GenericRIO=
network: TC introduce sfb - Stochastic Fair Blue Please see https://www.systutorials.com/docs/linux/man/8-tc-sfb/
2020-02-11 10:24:27 +03:00
[StochasticFairBlue]
Parent=
Handle=
PacketLimit=
network: tc- introduce PIE Proportional Integral controller-Enhanced (PIE) is a control theoretic active queue management scheme. It is based on the proportional integral controller but aims to control delay. http://man7.org/linux/man-pages/man8/tc-pie.8.html
2020-03-09 12:48:03 +03:00
[PIE]
Parent=
Handle=
PacketLimit=
network: tc: introduce Quick Fair Queueing (QFQ)
2020-03-20 00:41:57 +03:00
[QuickFairQueueing]
Parent=
Handle=
network: tc: introduce [QuickFairQueueingClass] section
2020-06-03 09:07:45 +03:00
[QuickFairQueueingClass]
Parent=
ClassId=
Weight=
network: tc: rename several settings which take size in bytes
2020-07-01 10:05:32 +03:00
MaxPacketBytes=
network: TC - introduce DRR Introduce the Deficit Round Robin Scheduler is a classful queuing discipline as a more flexible replacement for Stochastic Fairness Queuing. http://man7.org/linux/man-pages/man8/tc-drr.8.html
2020-03-10 10:46:40 +03:00
[DeficitRoundRobinScheduler]
Parent=
Handle=
network: tc: introduce DRR class
2020-03-11 18:36:08 +03:00
[DeficitRoundRobinSchedulerClass]
Parent=
ClassId=
network: tc: rename several settings which take size in bytes
2020-07-01 10:05:32 +03:00
QuantumBytes=
network: tc: introduce Enhanced Transmission Selection (ETS) Closes #15264.
2020-06-09 11:23:11 +03:00
[EnhancedTransmissionSelection]
Parent=
Handle=
Bands=
StrictBands=
QuantumBytes=
PriorityMap=
network: TC - introduce HHF Please see https://lwn.net/Articles/577208/
2020-03-11 13:55:13 +03:00
[HeavyHitterFilter]
Parent=
Handle=
PacketLimit=
network: TC - introduce fq pie see https://patchwork.ozlabs.org/patch/1233253/
2020-03-09 16:03:49 +03:00
[FlowQueuePIE]
Parent=
Handle=
PacketLimit=
Copy Permalink