e68a24a12b
The value of '0' for rp_filter appears to be unnecessary in at least some deployments, and can lead to confusing symptoms where apparently impossible network routes are available. It may also pose a security risk for hosts which are closer to the Internet. Changing this default could be very disruptive to deployments which depend upon it, but for those that wish to change it this currently requires re-definition of the entire 'openstack_kernel_options' dict. This patch adds two new variables to enable user-configuration of the 'net.ipv4.conf.all.rp_filter' and 'net.ipv4.conf.default.rp_filter' parameters. Change-Id: I75093e50a2786956e3669f89027042cc74b62d22 |
||
---|---|---|
.. | ||
main.yml |