From: Alexandre Derumier <aderumier@odiso.com>
Date: Mon, 13 Aug 2018 09:11:38 +0000 (+0200)
Subject: split sysctl.conf to symmetric and asymmetric setup
X-Git-Url: https://git.proxmox.com/?p=pve-docs.git;a=commitdiff_plain;h=ccecb4f94c668967fcf3a329d36907b5c8017c21;hp=5dde3d645834b204257e8d5b3ce8b65e6842abe8

split sysctl.conf to symmetric and asymmetric setup
---

diff --git a/vxlan-and-evpn.adoc b/vxlan-and-evpn.adoc
index 9dd36dc..da9ccfc 100644
--- a/vxlan-and-evpn.adoc
+++ b/vxlan-and-evpn.adoc
@@ -500,20 +500,6 @@ to have working vm live migration and no network disruption.
 VXLAN layer3 routing only work with FRR and non-aware bridge. 
 (vlan aware bridge support is buggy currently).
 
-
-sysctl.conf tuning
-
-----
-#enable routing
-net.ipv4.ip_forward=1
-net.ipv6.conf.all.forwarding=1
-#disable reverse path filtering
-net.ipv4.conf.default.rp_filter=0
-net.ipv4.conf.all.rp_filter=0
-#allow frr to work with vrf
-net.ipv4.tcp_l3mdev_accept=1
-----
-
 asymmetric model
 ^^^^^^^^^^^^^^^^
 
@@ -527,6 +513,14 @@ in each direction (always the destination VNI) across the routed infrastructure.
 image::images/vxlan-l3-asymmetric.svg["vxlan l3 asymmetric",align="center"]
 
 
+sysctl.conf tuning
+
+----
+#enable routing
+net.ipv4.ip_forward=1
+net.ipv6.conf.all.forwarding=1
+----
+
 * node1
 
 ----
@@ -765,6 +759,18 @@ A vrf is needed for the L3VNI, so all vmbr bridge need to be in the vrf if they
 
 image::images/vxlan-l3-symmetric.svg["vxlan l3 symmetric",align="center"]
 
+sysctl.conf tuning
+
+----
+#enable routing
+net.ipv4.ip_forward=1
+net.ipv6.conf.all.forwarding=1
+#disable reverse path filtering
+net.ipv4.conf.default.rp_filter=0
+net.ipv4.conf.all.rp_filter=0
+#allow frr to work with vrf (kernel >4.14 bug)
+net.ipv4.tcp_l3mdev_accept=1
+----
 
 * node1