From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 10DCF2E610D for ; Tue, 15 Jul 2025 13:35:02 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.129.124 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1752586505; cv=none; b=mXjWFMegkduSb3XnYeqSkwDZxP4WD4Xat8QgDfPX9QgHKHWcIZwtNYKsbtOQ8iG8rnl6P9Unwl9W+Rc6h3hu0Wl9M6ncL1PU2ULu1lh8LXSziOUdKF//vCUDl4YMBZvRcoJgT8fpUhhhvnGoQKNr++NjJNmIUYcHsElBASGMyWo= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1752586505; c=relaxed/simple; bh=FNkrpVUP8aBvhfjNdBg9m90d8eea1ssCdQUMoWqFo0g=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=maB0dGqKnG1e7GVBlsU38gBnmO2pnVgKHhGutO5AlHAb6MKfp1RIibMrbPSszxH3pQW/f2oWHPUT1jcJsR/Tu8YPm6algZNYd/K3/5ktsLaGF3sA6bfeBwlPbP2YnfsSmDKZd9XMNaQtLAGYmiWSDicd8mpCS2Qsi2cVUVeBsQg= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=Eg2xqcb4; arc=none smtp.client-ip=170.10.129.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="Eg2xqcb4" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1752586502; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Hna3RjrfnrkuE/vpT4GxFQWfy5w2zHOHWkjX7cFXw9A=; b=Eg2xqcb4oNtXckM5xZlZdI+mEgxwRMtGUSQvQKxuQ0UxdnVADeBkK3m0vM+btNu1z5kyVO e8JkYWIWlSoTrGfoxhkcfp49fzgpfMzPGnsIS0xIZdMOuwguGoDTs+uF8QBk5IL5GOLJO8 UNpfSHLpYTgopsPTgu/6q7HrMA/vTzQ= Received: from mail-wm1-f69.google.com (mail-wm1-f69.google.com [209.85.128.69]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-249-tTeLp_B2N9S-lhkQCs0veA-1; Tue, 15 Jul 2025 09:35:00 -0400 X-MC-Unique: tTeLp_B2N9S-lhkQCs0veA-1 X-Mimecast-MFC-AGG-ID: tTeLp_B2N9S-lhkQCs0veA_1752586499 Received: by mail-wm1-f69.google.com with SMTP id 5b1f17b1804b1-455f79a2a16so32198625e9.2 for ; Tue, 15 Jul 2025 06:35:00 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752586499; x=1753191299; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=Hna3RjrfnrkuE/vpT4GxFQWfy5w2zHOHWkjX7cFXw9A=; b=N7LdufVnmF+v8b6tiRgw0ybUReUq0a8tglNpvGr7LpfvPpm5V5sfKIhqnJksEb5i3T tkqi77DsR2hO/m+GNsbnko4P5Xf0mo/tdg0iyts3CtUb9vJcTn0qAx5gYNG3BACeDK8d luayj4uU0ZQxLkx6VFQk8Yyw5OJ/5DxcPSqWr7S2MXDVbapSuzE/qfubXwN/k8/XSDl0 Y/Jug8jCKUH/LQqSKI9u6wQ9doAJj+4xyFHjHp24rzp0i8E39RO5L91vWOxyVeXhIcaP N6hgdtv6mAuBQeOp3cz/zjgvcX8/S6jTpwFJcZ1VtV2ToqiuqmIz9olJSJeKkCHVKVij VRoQ== X-Forwarded-Encrypted: i=1; AJvYcCWEYJwOeFeJQAF0R72+TKzHFMwopZa1+p3RAMNrVkH7lVNzmy8V0n/Ouvj0rurkiCy7jeS5qnINmPYcw44=@vger.kernel.org X-Gm-Message-State: AOJu0YzSiv8O8VdRxLRpui6jxLQzuHQrNN5ZCi83HMfj3geobvcrwRro prLEbhat2thkzzJhpUmc5oVIvv0owvvQg25VhxFguuJJLijio+4Q3rXtUX9tCczFmQ4pl/lmL7B sCLN5b/09hzqQcBoOvoVzHD/uywFrlTMpn7lYdA5F1kxvhl9/MTc7L4gdzvQiEYGQbQ== X-Gm-Gg: ASbGncs30V9nd6oYlQRIZfTltWtxoNavxcs77YKMLduhW8839lWvXOHJTw+3JRzgiQG d3cXu0Iv/nqExVJPkkKbZBvNsBOgRA+3sm/PqMhwojiSLAdFGRvuqKEPtGOncbtxji5u8mWUygB hpVoeURP3bSrB3pLZKCVIBNa5tt20inCRCU5t88k653Nhf1FfEm+zTHqkuaN347wzsGwuvAOPNc PW68BeICqT2zK7nO4LFtATYgoNvBY4X4AkJ7K4ouxI5MM/Oy8f2M7zpsrvq/h/dvxFjkUlVChZy q5w3zUJpxU4PdnadoekRM45ApUVg6dNYIKxiki3XhZ2b1BjPlMzvZLD0IYnSPFy0NdzOoAM2IQW UNmQwF4lZYg0= X-Received: by 2002:a05:600c:6295:b0:456:58e:318e with SMTP id 5b1f17b1804b1-4562771c329mr32530615e9.30.1752586499380; Tue, 15 Jul 2025 06:34:59 -0700 (PDT) X-Google-Smtp-Source: AGHT+IFFLt0H3ouwQHrfzti4Gau5tDX0PXneRZR47ct1MkwMEfPNZ/zhgGSAD+eLXD1StfdRkCurLQ== X-Received: by 2002:a05:600c:6295:b0:456:58e:318e with SMTP id 5b1f17b1804b1-4562771c329mr32530235e9.30.1752586498941; Tue, 15 Jul 2025 06:34:58 -0700 (PDT) Received: from ?IPV6:2a0d:3344:2712:7e10:4d59:d956:544f:d65c? ([2a0d:3344:2712:7e10:4d59:d956:544f:d65c]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-456278a4460sm13752225e9.1.2025.07.15.06.34.57 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 15 Jul 2025 06:34:58 -0700 (PDT) Message-ID: Date: Tue, 15 Jul 2025 15:34:56 +0200 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH net-next v6] ipv6: add `force_forwarding` sysctl to enable per-interface forwarding To: Gabriel Goller , Nicolas Dichtel , "David S. Miller" , Eric Dumazet , Jakub Kicinski , Simon Horman , Jonathan Corbet , David Ahern , Shuah Khan Cc: netdev@vger.kernel.org, linux-doc@vger.kernel.org, linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org References: <20250711124243.526735-1-g.goller@proxmox.com> Content-Language: en-US From: Paolo Abeni In-Reply-To: <20250711124243.526735-1-g.goller@proxmox.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit On 7/11/25 2:42 PM, Gabriel Goller wrote: > It is currently impossible to enable ipv6 forwarding on a per-interface > basis like in ipv4. To enable forwarding on an ipv6 interface we need to > enable it on all interfaces and disable it on the other interfaces using > a netfilter rule. This is especially cumbersome if you have lots of > interface and only want to enable forwarding on a few. According to the > sysctl docs [0] the `net.ipv6.conf.all.forwarding` enables forwarding > for all interfaces, while the interface-specific > `net.ipv6.conf..forwarding` configures the interface > Host/Router configuration. > > Introduce a new sysctl flag `force_forwarding`, which can be set on every > interface. The ip6_forwarding function will then check if the global > forwarding flag OR the force_forwarding flag is active and forward the > packet. > > To preserver backwards-compatibility reset the flag (on all interfaces) > to 0 if the net.ipv6.conf.all.forwarding flag is set to 0. > > Add a short selftest that checks if a packet gets forwarded with and > without `force_forwarding`. > > [0]: https://www.kernel.org/doc/Documentation/networking/ip-sysctl.txt > > Signed-off-by: Gabriel Goller > Acked-by: Nicolas Dichtel > --- > v6: > * rebase > * remove brackts around single line > * add 'nodad' to addresses in selftest to avoid sporadic failures I'm sorry, but it still does not apply. Please rebase again and re-submit. Thanks, Paolo