From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from gate001.proxmox.com (gate001.proxmox.com [45.144.208.40]) by lore.proxmox.com (Postfix) with ESMTPS id 81BA41FF0C0 for ; Wed, 04 Nov 2026 15:56:54 +0100 (CET) Received: from gate001.proxmox.com (localhost.localdomain [127.0.0.1]) by gate001.proxmox.com (Proxmox) with ESMTP id 3EA7921729; Wed, 04 Nov 2026 15:55:57 +0100 (CET) From: Lukas Sichert To: pve-devel@lists.proxmox.com Subject: [PATCH docs v5 10/10] sdn: drop global ipv6 forwarding workaround from docs Date: Wed, 4 Nov 2026 15:55:11 +0100 Message-ID: <20261104145513.21471-11-l.sichert@proxmox.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20261104145513.21471-1-l.sichert@proxmox.com> References: <20261104145513.21471-1-l.sichert@proxmox.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1793804124827 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.489 Adjusted score from AWL reputation of From: address DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment (newer systems) RCVD_IN_DNSWL_MED -2.3 Sender listed at https://www.dnswl.org/, medium trust SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Message-ID-Hash: MWVWZCBFXMEZQA3DBWCAW4F2QABAOOLF X-Message-ID-Hash: MWVWZCBFXMEZQA3DBWCAW4F2QABAOOLF X-MailFrom: l.sichert@proxmox.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: Lukas Sichert X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: OpenFabric and BGP fabrics with ipv6 need forwarding on transit nodes so packets can be relayed between peers that are not directly connected. Drop the old recommendation to enable host-wide net.ipv6.conf.all.forwarding from the documentation. The generated fabric interface configuration now handles the required forwarding setup, so the manual global forwarding workaround is no longer needed. Signed-off-by: Lukas Sichert --- pvesdn.adoc | 27 +++++++-------------------- 1 file changed, 7 insertions(+), 20 deletions(-) diff --git a/pvesdn.adoc b/pvesdn.adoc index c85d86a..1894270 100644 --- a/pvesdn.adoc +++ b/pvesdn.adoc @@ -673,23 +673,13 @@ behavior and proper source address selection throughout the fabric. Notes on IPv6 ^^^^^^^^^^^^^ -IPv6 is currently only usable on OpenFabric fabrics. These IPv6 Fabrics need -global IPv6 forwarding enabled on all nodes contained in the fabric. Without -IPv6 forwarding, non-full-mesh fabrics won't work because the transit nodes -don't forward packets to the outer nodes. Currently there isn't an easy way to -enable IPv6 forwarding per-interface like with IPv4, so it has to be enabled -globally. This can be accomplished by appending this line: - ----- -post-up sysctl -w net.ipv6.conf.all.forwarding=1 ----- - -to a fabric interface in the `/etc/network/interfaces` file. This will enable -IPv6 forwarding globally once that interface comes up. Note that this affects -how your interfaces handle automatic IPv6 setup (SLAAC), Neighbour -Advertisements, Router Solicitations, and Router Advertisements. More details -here: https://www.kernel.org/doc/Documentation/networking/ip-sysctl.txt under -`net.ipv6.conf.all.forwarding`. +IPv6 is currently only usable on OpenFabric and BGP fabrics. These IPv6 Fabrics +need IPv6 forwarding enabled on all transit nodes contained in the fabric. +Without IPv6 forwarding, non-full-mesh fabrics won't work because the transit +nodes don't forward packets to the outer nodes. IPv6 forwarding is enabled by +default on the necessary interfaces using the force_forwarding flag. This flag +is only present on kernel 6.17 or newer. More details here: +https://docs.kernel.org/networking/ip-sysctl.html [[pvesdn_openfabric]] OpenFabric @@ -715,9 +705,6 @@ all router-IDs in the fabric are contained within this prefix. IPv6 Prefix:: IPv6 CIDR network range (e.g., 2001:db8::/64) used to verify that all router-IDs in the fabric are contained within this prefix. -WARNING: For IPv6 fabrics to work, global forwarding needs to be enabled on all -nodes. Check xref:pvesdn_config_fabrics_ipv6[Notes on IPv6] for how to do it and additional info. - Hello Interval:: Controls how frequently (in seconds) hello packets are sent to discover and maintain connections with neighboring nodes. Lower values detect failures faster but increase network traffic. This option is global on the -- 2.47.3