Disabling ipv6 accept_ra explicitely on the created interface

flannel-io · Jun 5, 2020 · e2f31ac · e2f31ac
1 parent 4856497
commit e2f31ac
Show file tree

Hide file tree

Showing 2 changed files with 84 additions and 0 deletions.
diff --git a/backend/vxlan/device.go b/backend/vxlan/device.go
@@ -26,6 +26,7 @@ import (
 	"github.com/vishvananda/netlink"
 
 	"github.com/coreos/flannel/pkg/ip"
+        "github.com/containernetworking/plugins/pkg/utils/sysctl"
 )
 
 type vxlanDeviceAttrs struct {
@@ -60,6 +61,9 @@ func newVXLANDevice(devAttrs *vxlanDeviceAttrs) (*vxlanDevice, error) {
 	if err != nil {
 		return nil, err
 	}
+
+        _, _ = sysctl.Sysctl(fmt.Sprintf("net/ipv6/conf/%s/accept_ra", devAttrs.name), "0")
+
 	return &vxlanDevice{
 		link: link,
 	}, nil

diff --git a/vendor/github.com/containernetworking/plugins/pkg/utils/sysctl/sysctl_linux.go b/vendor/github.com/containernetworking/plugins/pkg/utils/sysctl/sysctl_linux.go