[pve-devel] [PATCH pve-docs 1/1] add vxlan l3 routing

[Dietmar Maurer]

some questions about sysctl setup:

> +sysctl.conf tuning
> +
> +----
> +#enable routing
> +net.ipv4.ip_forward=1
> +net.ipv6.conf.all.forwarding=1
> +#disable reverse path filtering
> +net.ipv4.conf.default.rp_filter=0
> +net.ipv4.conf.all.rp_filter=0

rp_filter is essential for security. Why do we 
need to turn this off?


> +#allow frr to work with vrf
> +net.ipv4.tcp_l3mdev_accept=1
> +----