On 10/1/18 2:43 AM, Mike Manning wrote:
> Add a sysctl raw_l3mdev_accept to control raw socket lookup in a manner
> similar to use of tcp_l3mdev_accept for stream and of udp_l3mdev_accept
> for datagram sockets. Have this default to off as this is what users
> expect, given that there is no explicit mechanism to set unmodified
> VRF-unaware application into a default VRF.

It needs to default to on to avoid breaking existing users. With the
raw_l3mdev_accept sysctl set to 0 both 'ping -I <vrf> <addr>' and 'ping
-I <dev> <addr>' fail when they succeed today.

Reply via email to