Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Drop gratuitous ARP packets #291

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

raja-grewal
Copy link
Contributor

As per #279 (comment).

Changes

Set sysctl net.ipv4.conf.*.drop_gratuitous_arp=1

Mandatory Checklist

  • Legal agreements accepted. By contributing to this organisation, you acknowledge you have read, understood, and agree to be bound by these these agreements:

Terms of Service, Privacy Policy, Cookie Policy, E-Sign Consent, DMCA, Imprint

Optional Checklist

The following items are optional but might be requested in certain cases.

  • I have tested it locally
  • I have reviewed and updated any documentation if relevant
  • I am providing new code and test(s) for it

@ArrayBolt3
Copy link
Contributor

Doesn't look like it's likely to cause problems in a home use scenario, but what happens in a cloud scenario where you rely on other servers on the local network for certain resources, and those servers sometimes have their MAC addresses change? (I don't know if AWS ever has to change the MAC addresses of things like package update servers and whatnot, but I would assume it could happen if they're shuffling VMs around.) That could cause things to break, possibly quite badly. I can also imagine something like this happening in a corporate scenario where a server is reconfigured and it has to tell all client machines on the network the new MAC address for its IP.

I think for most users this is probably fine, since IPs don't just randomly switch MACs very often AFAIK. In an environment where gratuitous ARP is needed, the sysadmin will probably know, and be able to turn this setting off. So I think this is another thing that's good to enable by default, but that we should support disabling, and document how to turn it off.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants