From 4368fce0a32560b58fac36969054da7e7913dbb0 Mon Sep 17 00:00:00 2001 From: Alexandre Derumier Date: Tue, 21 Mar 2023 07:53:07 +0100 Subject: [PATCH] sdn: add rp_filter sysctl tuning when mulitple evpn nodes are used Signed-off-by: Alexandre Derumier --- pvesdn.adoc | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/pvesdn.adoc b/pvesdn.adoc index be62769..d1ff036 100644 --- a/pvesdn.adoc +++ b/pvesdn.adoc @@ -928,6 +928,19 @@ and 10.0.2.0/24 in this example), will be announced dynamically. Notes ----- +Multiple EVPN Exit Nodes +~~~~~~~~~~~~~~~~~~~~~~~~ + +If you have multiple gateway nodes, disable rp_filter as packet could incoming in a 1 node, and outgoing +to another node. + + +sysctl.conf +----- +net.ipv4.conf.default.rp_filter=0 +net.ipv4.conf.all.rp_filter=0 +----- + VXLAN IPSEC Encryption ~~~~~~~~~~~~~~~~~~~~~~ -- 2.39.2