From 5a8bcb674f71a20e95df55319b34c556638378ce Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Tue, 13 Jan 2015 13:47:08 +0100 Subject: networkd: add minimal IP forwarding and masquerading support to .network files This adds two new settings to networkd's .network files: IPForwarding=yes and IPMasquerade=yes. The former controls the "forwarding" sysctl setting of the interface, thus controlling whether IP forwarding shall be enabled on the specific interface. The latter controls whether a firewall rule shall be installed that exposes traffic coming from the interface as coming from the local host to all other interfaces. This also enables both options by default for container network interfaces, thus making "systemd-nspawn --network-veth" have network connectivity out of the box. --- network/80-container-ve.network | 2 ++ 1 file changed, 2 insertions(+) (limited to 'network') diff --git a/network/80-container-ve.network b/network/80-container-ve.network index cb04c7cb3d..fe24eb45f8 100644 --- a/network/80-container-ve.network +++ b/network/80-container-ve.network @@ -13,3 +13,5 @@ Driver=veth Address=0.0.0.0/28 IPv4LL=yes DHCPServer=yes +IPForward=yes +IPMasquerade=yes -- cgit v1.2.1