Entirely disable IPv6 on bridged interfaces

Prevents any potential leakage due to autoconfigured IPv6 on bridged
interfaces. These are exclusively VM-side bridges, and the PVC host
should not have any IPv6 configuration on them, ever.
This commit is contained in:
Joshua Boniface 2020-10-15 11:00:59 -04:00
parent 9366977fe6
commit aa5f8c93fd
1 changed files with 2 additions and 2 deletions

View File

@ -511,9 +511,9 @@ add rule inet filter forward ip6 saddr {netaddr6} counter jump {vxlannic}-out
)
)
# Disable IPv6 DAD on bridge interface
# Disable IPv6 on bridge interface (prevents leakage)
common.run_os_command(
'sysctl net.ipv6.conf.{}.accept_dad=0'.format(
'sysctl net.ipv6.conf.{}.disable_ipv6=1'.format(
self.bridge_nic
)
)