14 Commits

Author	SHA1	Message	Date
Yu Watanabe	6cde5b4b1c	network: use IPMasquerade=both instead of yes ... Follow-up for 4c72d851cd.	2021-02-24 15:01:43 +01:00
Daan De Meyer	2ec6191c38	networkd: Enable IPv6SendRA on builtin network files ... RAs trigger neighbor discovery which allows users to query the LL address of the container/VM via `ip neighbor get dev`. This is useful as it gives users an easy way to connect to the container without needing LLMNR or mDNS to resolve the hostname of the container to an IP address. In practice, this allows connecting with only networkd enabled and without resolved running in the host/container.	2021-01-06 20:00:49 +01:00
Yu Watanabe	db9ecf0501	license: LGPL-2.1+ -> LGPL-2.1-or-later	2020-11-09 13:23:58 +09:00
Zbigniew Jędrzejewski-Szmek	d9215cd838	Add SPDX license headers to various assorted files	2017-11-19 19:08:15 +01:00
Lennart Poettering	bbc0c09448	network: allow LLDP packets to cross non-customer bridges for container network interfaces ... This changes the default .network files we ship for nspawn containers to set EmitLLDP=customer-bridge in order to allow propagation of the LLDP packets across bridges. This is useful so that "networkctl status" shows all peers connected to a virtual container network, collecting this data via LLDP. This is safe since the default configuration for these interfaces does not bridge these links to external interfaces, but relies on IP routing for this.	2016-05-09 15:45:31 +02:00
Lennart Poettering	3af18d8eab	network: add automatic configuration for the networks created by nspawn --network-zone= ... This way, they "just work", similar to --network-veth behaves, as long as networkd is enabled and running on all involved nodes.	2016-05-09 15:45:31 +02:00
Lennart Poettering	2a5a6e05ca	network: turn on LLDP tx+rx for the default container network configuration ... Containers are relatively trusted and the veth tunnels are small networks, hence let's turn on LLDP both ways for them.	2016-02-21 20:58:59 +01:00
David Herrmann	0737984f69	network: fix 'LinkLocal' -> 'LinkLocalAddressing' in network files ... 'LinkLocal' was renamed to 'LinkLocalAddressing' in: commit 56fd6bf795 Author: Tom Gundersen <teg@jklm.no> Date: Sat Feb 14 00:32:26 2015 +0100 networkd: .network - rename LinkLocal to LinkLocalAddressing ..but apparently the network files were not updated. Fix this.	2015-02-14 15:31:26 +01:00
Tom Gundersen	d0d6a4cd70	networkd: generalize IPv4LL to LinkLocal ... This allows both IPv4 and IPv6 link-local addresses to be enabled or disabled. By default we still enable IPv6LL and disable IPv4LL. The old config option is kept for backwards compatibility, but removed from the documentation.	2015-02-09 12:20:10 +01:00
Lennart Poettering	db9fd84944	network: IPMasquerade= implies IPForward=, hence remove it	2015-01-13 20:17:07 +01:00
Tom Gundersen	2f6379a9ac	doc: network - add comment about default prefix size ... Should hopefully make it clear that this is not some magic value, just the default we picked. Suggested by Jan Engelhardt.	2015-01-13 18:23:59 +01:00
Lennart Poettering	5a8bcb674f	networkd: add minimal IP forwarding and masquerading support to .network files ... This adds two new settings to networkd's .network files: IPForwarding=yes and IPMasquerade=yes. The former controls the "forwarding" sysctl setting of the interface, thus controlling whether IP forwarding shall be enabled on the specific interface. The latter controls whether a firewall rule shall be installed that exposes traffic coming from the interface as coming from the local host to all other interfaces. This also enables both options by default for container network interfaces, thus making "systemd-nspawn --network-veth" have network connectivity out of the box.	2015-01-13 13:55:15 +01:00
Lennart Poettering	7826397d92	network: automatically assign each container veth link a /28 IP address range	2014-06-18 18:28:29 +02:00
Lennart Poettering	4eaea66423	network: always take possession of host side of nspawn veth tunnels and do IPv4LL on them	2014-05-18 20:52:49 +09:00