You are not logged in.

#1 2024-07-26 05:36:35

ectospasm
Member
Registered: 2015-08-28
Posts: 292

[SOLVED]DHCP4 clients not receiving DHCPOFFER packets

SOLVED
The reason has to do with the I226-LM having vPro Essentials enabled on it (see links provided by seth below).  The possible workaround is to disable AMT in the BIOS for this NIC, but that may not work.  I will need to reach out to my OEM vendor, SimplyNUC to see if they have a solution.  This really is only for the default VLAN, which is why I saw other VLANs working fine.  Perhaps set up VLANs if you have a capable Ethernet switch to work around this if disabling AMT doesn't work.

For now, I've swapped the physical ports, and made the requisite configuration changes.

Original SOLVED message with caveat:
This ended up being a hardware issue, but was very strange that it was so specific that the original LAN interface wouldn't send the DHCPOFFER on the wire.  My two Intel 2.5GbE devices are actually two slightly different models:

  • enp88s0:  an I226-LM, which is a lower-end model meant for desktops and embedded applications

  • enp87s0:  an I226-V, which is higher end and meant for servers

I'm going to engage with the Intel community forums, see if I can get an answer why the I226-LM does not appear to be able to serve DHCPOFFER messages on the network.  If I get a real answer from Intel, I'll update this and remove the caveat.

Original Post, for posterity
I'm setting up Arch Linux on a SimplyNUC Onyx Pro, to act as a DIY home router.  I get the same behavior whether I use the dhcp package (which ISC has placed EOL), and kea.  Since kea is what is currently supported, I'm going with that.

While the router receives DHCPDISCOVER packets on its LAN interface, the DHCPOFFER packets it's sending in response do not appear to reach the client.  I've tried a couple of different Ethernet switches, and they all exhibit the same behavior.

I'm running the following tcpdump command, and I see the following:

# tcpdump -i enp88s0 -vnn
00:52:31.407060 IP (tos 0xc0, ttl 64, id 0, offset 0, flags [none], proto UDP (17), length 323)    00:52:31 [3/433]
    0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 24:6e:96:af:31:0c, length 295, xid 0x1d4f9a2e, secs 3
3104, Flags [none]
          Client-Ethernet-Address 24:6e:96:af:31:0c
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Discover
            Client-ID (61), length 19: hardware-type 255, d3:d8:65:35:00:02:00:00:ab:11:14:40:02:d7:1e:99:42:9b
            Parameter-Request (55), length 10:
              Subnet-Mask (1), Default-Gateway (3), Domain-Name-Server (6), Hostname (12)
              Domain-Name (15), Static-Route (33), NTP (42), URL (114)
              Unknown (120), Classless-Static-Route (121)
            MSZ (57), length 2: 1472
            SLP-NA (80), length 0""
            Hostname (12), length 10: "tennessine"
00:52:31.408614 IP (tos 0x10, ttl 128, id 0, offset 0, flags [DF], proto UDP (17), length 347)
    10.20.30.254.67 > 10.20.30.117.68: BOOTP/DHCP, Reply, length 319, xid 0x1d4f9a2e, Flags [none]
          Your-IP 10.20.30.117
          Client-Ethernet-Address 24:6e:96:af:31:0c
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Offer
            Subnet-Mask (1), length 4: 255.255.255.0
            Default-Gateway (3), length 4: 10.20.30.254
            Domain-Name-Server (6), length 4: 10.20.30.254
            Hostname (12), length 10: "tennessine"
            Lease-Time (51), length 4: 3600
            Server-ID (54), length 4: 10.20.30.254
            RN (58), length 4: 900
            RB (59), length 4: 1800
            Client-ID (61), length 19: hardware-type 255, d3:d8:65:35:00:02:00:00:ab:11:14:40:02:d7:1e:99:42:9b

My desired setup has multiple VLANs and subnets, to be used with a UniFi Network Controller (unifi from the AUR) running on another Arch Linux device on my network, and associated UniFi 1GbE switches and WiFi6 access points. 

However, in isolating this problem, I have removed the LAN interface of the router from the UniFi switch, and connected to a dumb, unmanaged 1GbE Ethernet switch (the LAN port on the router is a 2.5GbE port, but ethtool shows it has negotiated 1000Mbps properly).

I'm using systemd-networkd as my network manager, and here is my 20-LAN.network definition:

[Match]
Name=enp88s0
Type=ether

[Network]
Address=10.20.30.254/24
DNS=10.20.30.254
Domains=ceti.internal
#VLAN=enp88s0.1
VLAN=enp88s0.66
VLAN=enp88s0.99

To simplify things, the .network and .netdev files for the VLANs have been removed until I can figure this DHCPOFFER issue out.  Here is /etc/kea/kea-dhcp4.conf:

{
  "Dhcp4": {
    "interfaces-config": {
      "interfaces": [
        "enp88s0/10.20.30.254",
      ]
    },
    "control-socket": {
      "socket-type": "unix",
      "socket-name": "/run/kea/kea4-ctrl-socket"
    },
    "lease-database": {
      "type": "memfile",
      "persist": true,
      "name": "/var/lib/kea/leases4.csv",
      "lfc-interval": 3600,
      "max-row-errors": 100
    },
    "expired-leases-processing": {
      "reclaim-timer-wait-time": 10,
      "flush-reclaimed-timer-wait-time": 25,
      "hold-reclaimed-time": 3600,
      "max-reclaim-leases": 100,
      "max-reclaim-time": 250,
      "unwarned-reclaim-cycles": 5
    },
    "renew-timer": 900,
    "rebind-timer": 1800,
    "valid-lifetime": 3600,
    "subnet4": [
      {
        "id": 1,
        "subnet": "10.20.30.0/24",
        "pools": [
          {
            "pool": "10.20.30.201 - 10.20.30.250"
          }
        ],
        "option-data": [
          {
            "name": "routers",
            "data": "10.20.30.254"
          },
          {
            "name": "domain-name-servers",
            "data": "10.20.30.254"
          }
        ],
        "reservations": [
          {
            "hw-address": "c0:a5:e8:b1:d0:b9",
            "ip-address": "10.20.30.9",
            "hostname": "fluorine"
          },
          {
            "hw-address": "24:6e:96:af:31:0c",
            "ip-address": "10.20.30.117",
            "hostname": "tennessine"
          }
        ]
      }
    ],
    "loggers": [
      {
        "name": "kea-dhcp4",
        "output-options": [
          {
            "output": "stdout",
            "pattern": "%-5p %m\n",
            "flush": true
          }
        ],
        "severity": "DEBUG",
        "debuglevel": 0
      }
    ]
  }
}

My intent also is to use firewalld on this router, but to eliminate that from causing the problem I've stopped the firewalld.service.

I've done an arping from the router, and the client (also running Arch Linux) definitely sees these ARP pings, so I don't suspect a physical or lower level networking issue.  Also, I can assign the 10.20.30.117 IP address manually on the client using the ip addr add... command, and it can then communicate just fine with the router over that interface. 

My best guess at this point is kea-dhcp4 is sending the DHCPOFFER as unicast, and for whatever reason the Arch Linux client can't see it.  I've searched throught the kea documentation and I can't find any configuration parameters which govern this, or force kea to send the DHCPOFFER as multicast.  I'm using the raw socket option (enabled by default), and it doesn't appear the client is setting any flags to tell the server to send its response as multicast (i.e., to send the response to 255.255.255.255).  I'm really stumped.

And when I was connected to the UniFi network I tried a couple of other clients as well, including my Arch Linux laptop (WiFi only using NetworkManager), and my Android phone (also over WiFi).  They all failed to receive the IP address from the router when connecting to the SSID serving my default/main LAN subnet. 

One strange thing I noticed when I had the 66 VLAN and subnet configured (for IoT), clients on this other subnet and SSID (also served by this DHCP server) would get DHCPOFFERs; I saw DHCPREQUEST packets come in, on this same physical interface (enp88s0.66; enp88s0.99 hadn't been configured yet).  Only my default, untagged interface seemed to be the problem.  But that was with the EOL dhcpd4 service, and I hadn't done much isolation of the problem at that point.

I really appreciate any ideas, this one has been plaguing me since I got this new router in early June.  Due to life, I haven't been able to spend much time on this, and it may be a while before I can follow up if anyone responds to this topic.

Last edited by ectospasm (2024-08-04 03:00:01)

Offline

#2 2024-07-26 06:46:41

-thc
Member
Registered: 2017-03-15
Posts: 717

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

I ran into a similar problem after migrating from isc-dhcp-server to kea-dhcpX-server on Debian 12 (bookworm).

I have two clients (1 PC and 1 streaming box) that are connected to my simple home LAN (2 simple 1 GB switches and one WiFi AP) via two small 5 GHz WiFi Access Points in "Client Mode" - a kind of WiFi/LAN bridge for one LAN port.

After the migration those two clients stopped receiving DHCPOFFER packets sent from the KEA server. The firmware on those two bridges refuses to relay those (somehow different) packets. This is a very specific behavior - since all other kinds of packets are bridged/unaffected. After configuring the IP address manually everything works.

Make sure the packets arrive at the client.

Last edited by -thc (2024-07-26 07:37:36)

Offline

#3 2024-07-26 07:26:35

seth
Member
Registered: 2012-09-03
Posts: 59,193

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

My best guess at this point is kea-dhcp4 is sending the DHCPOFFER as unicast

Don't guess, wireshark.
It looks like you're using the gateway as static IP for the dhcp server?
Does the simple example in the wiki work for you?
https://wiki.archlinux.org/title/Kea#Ex … figuration

Edit: F5, but the OP also indicated having resorted to a dumb switch?

Last edited by seth (2024-07-26 07:27:43)

Offline

#4 2024-07-27 19:25:18

ectospasm
Member
Registered: 2015-08-28
Posts: 292

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

seth wrote:

Don't guess, wireshark.
It looks like you're using the gateway as static IP for the dhcp server?
Does the simple example in the wiki work for you?
https://wiki.archlinux.org/title/Kea#Ex … figuration

Edit: F5, but the OP also indicated having resorted to a dumb switch?

It was late after having done quite a bit of work outside of this that evening when I made my original post.  I forgot to mention a few things.  The dhcpd4 configuration came from some other Arch systems I was using as my home router, and this problem did not exist on those.  Thus I suspect it's something with this particular system (as both dhcpd4 and kea-dhcp4 exhibit the same behavior). 

I'm running tcpdump -i eno3 -vnn on the client, and all I see is the DHCPDISCOVER going out:

14:07:28.575903 IP (tos 0xc0, ttl 64, id 0, offset 0, flags [none], proto UDP (17), length 323)
    0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 24:6e:96:af:31:0c, length 295, xid 0x1d4f9a2e, secs 3
6129, Flags [none]
          Client-Ethernet-Address 24:6e:96:af:31:0c
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Discover
            Client-ID (61), length 19: hardware-type 255, d3:d8:65:35:00:02:00:00:ab:11:14:40:02:d7:1e:99:42:9b
            Parameter-Request (55), length 10:
              Subnet-Mask (1), Default-Gateway (3), Domain-Name-Server (6), Hostname (12)
              Domain-Name (15), Static-Route (33), NTP (42), URL (114)
              Unknown (120), Classless-Static-Route (121)
            MSZ (57), length 2: 1472
            SLP-NA (80), length 0""
            Hostname (12), length 10: "tennessine"
14:07:37.820942 IP6 (flowlabel 0x19b46, hlim 1, next-header UDP (17) payload length: 386) fe80::266e:96ff:feaf:310c
.35007 > ff12::8384.21027: [bad udp cksum 0x6fd5 -> 0x636b!] UDP, length 378

I included that IPv6 packet to show that it was almost 10 seconds and no DHCPOFFER came in from the server.  Here are the corresponding packets in another tcpdump -i enp88s0 -vnn on the DHCP server:

14:07:28.581650 IP (tos 0xc0, ttl 64, id 0, offset 0, flags [none], proto UDP (17), length 323)
    0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 24:6e:96:af:31:0c, length 295, xid 0x1d4f9a2e, secs 3
6129, Flags [none]
          Client-Ethernet-Address 24:6e:96:af:31:0c
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Discover
            Client-ID (61), length 19: hardware-type 255, d3:d8:65:35:00:02:00:00:ab:11:14:40:02:d7:1e:99:42:9b
            Parameter-Request (55), length 10:
              Subnet-Mask (1), Default-Gateway (3), Domain-Name-Server (6), Hostname (12)
              Domain-Name (15), Static-Route (33), NTP (42), URL (114)
              Unknown (120), Classless-Static-Route (121)
            MSZ (57), length 2: 1472
            SLP-NA (80), length 0""
            Hostname (12), length 10: "tennessine"
14:07:28.583708 IP (tos 0x10, ttl 128, id 0, offset 0, flags [DF], proto UDP (17), length 347)
    10.20.30.254.67 > 10.20.30.117.68: BOOTP/DHCP, Reply, length 319, xid 0x1d4f9a2e, Flags [none]
          Your-IP 10.20.30.117
          Client-Ethernet-Address 24:6e:96:af:31:0c
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Offer
            Subnet-Mask (1), length 4: 255.255.255.0
            Default-Gateway (3), length 4: 10.20.30.254
            Domain-Name-Server (6), length 4: 10.20.30.254
            Hostname (12), length 10: "tennessine"
            Lease-Time (51), length 4: 3600
            Server-ID (54), length 4: 10.20.30.254
            RN (58), length 4: 900
            RB (59), length 4: 1800
            Client-ID (61), length 19: hardware-type 255, d3:d8:65:35:00:02:00:00:ab:11:14:40:02:d7:1e:99:42:9b
14:07:37.826705 IP6 (flowlabel 0x19b46, hlim 1, next-header UDP (17) payload length: 386) fe80::266e:96ff:feaf:310c
.35007 > ff12::8384.21027: [udp sum ok] UDP, length 378

So the server responds in about 2ms, but the client never receives them.  Here's the output of ip -s link show dev enp88s0 on the server:

ip -s link show dev enp88s0
3: enp88s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 58:47:ca:77:31:21 brd ff:ff:ff:ff:ff:ff
    RX:  bytes packets errors dropped  missed   mcast
        754086    2222      0       0       0      60
    TX:  bytes packets errors dropped carrier collsns
        783975    2222      0       0       0       0

So, no dropped TX packets, at least as detected by the kernel.  Here's the output of ip -s link show dev eno3 on the client:

2: eno3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 24:6e:96:af:31:0c brd ff:ff:ff:ff:ff:ff
    RX:  bytes packets errors dropped  missed   mcast
    3923552677 2672550      0    1647       0    5844
    TX:  bytes packets errors dropped carrier collsns
     160963527  614419      0       0       0       0
    altname enp7s0f0

So it does show some dropped packets, but when I originally looked at these that counter may have been on boot (or when I was moving the Ethernet cable from the UniFi switch to my dumb switch);  they haven't increased in at least a few days (client uptime is 12 days at the moment)). 

To ensure I'm at a baseline, I did a full system upgrade on both the router and the client.  I had upgraded and rebooted the router the other day, so it did not need a reboot (no new kernel was installed).  I rebooted the client to clear these counters, and here's what it shows now:

$ ip -s link show dev eno3
2: eno3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 24:6e:96:af:31:0c brd ff:ff:ff:ff:ff:ff
    RX:  bytes packets errors dropped  missed   mcast
             0       0      0       0       0       0
    TX:  bytes packets errors dropped carrier collsns
          6428      34      0       0       0       0
    altname enp7s0f0

Interesting that it is not receiving any packets on this interface yet.  I ran arping -bI enp88s0 10.20.30.117 from the router, and I see the packets on the client:

14:33:17.728389 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.20.30.117 (ff:ff:ff:ff:ff:ff) tell 10.20.30
.254, length 46
14:33:18.728437 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.20.30.117 (ff:ff:ff:ff:ff:ff) tell 10.20.30
.254, length 46
14:33:19.728444 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.20.30.117 (ff:ff:ff:ff:ff:ff) tell 10.20.30
.254, length 46
14:33:20.728468 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.20.30.117 (ff:ff:ff:ff:ff:ff) tell 10.20.30
.254, length 46
14:33:21.728420 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.20.30.117 (ff:ff:ff:ff:ff:ff) tell 10.20.30
.254, length 46
14:33:22.728368 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.20.30.117 (ff:ff:ff:ff:ff:ff) tell 10.20.30
.254, length 46

Sure enough, now I see RX packets on the client:

2: eno3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 24:6e:96:af:31:0c brd ff:ff:ff:ff:ff:ff
    RX:  bytes packets errors dropped  missed   mcast
          1740      29      0       0       0       0
    TX:  bytes packets errors dropped carrier collsns
         10137      44      0       0       0       0
    altname enp7s0f0

Here's the output of ethtool enp88s0 on the router:

Settings for enp88s0:
        Supported ports: [ TP ]
        Supported link modes:   10baseT/Half 10baseT/Full
                                100baseT/Half 100baseT/Full
                                1000baseT/Full
                                2500baseT/Full
        Supported pause frame use: Symmetric
        Supports auto-negotiation: Yes
        Supported FEC modes: Not reported
        Advertised link modes:  10baseT/Half 10baseT/Full
                                100baseT/Half 100baseT/Full
                                1000baseT/Full
                                2500baseT/Full
        Advertised pause frame use: Symmetric
        Advertised auto-negotiation: Yes
        Advertised FEC modes: Not reported
        Speed: 1000Mb/s
        Duplex: Full
        Auto-negotiation: on
        Port: Twisted Pair
        PHYAD: 0
        Transceiver: internal
        MDI-X: off (auto)
        Supports Wake-on: pumbg
        Wake-on: g
        Current message level: 0x00000007 (7)
                               drv probe link
        Link detected: yes

Still no dropped packets seen on the TX side on the router:

3: enp88s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
    link/ether 58:47:ca:77:31:21 brd ff:ff:ff:ff:ff:ff
    RX:  bytes packets errors dropped  missed   mcast
        789043    2351      0       0       0     159
    TX:  bytes packets errors dropped carrier collsns
        801931    2421      0       0       0       0

The dumb switch I have between the router and client is a TRENDnet TEG-S80g H/W: V1.0R, so it's quite old and currently unsupported.  I hadn't used it in years since I acquired my UniFi equipment several years ago.

So, I decided to take the switch out of the equation, and connected the client's cable directly into the router.  That didn't solve the problem, either.  Same symptom, router sees and responds to the DHCPDISCOVER, but client never sees the DHCPOFFER.  firewalld.service is disabled on both systems.

Here's the output of sysctl --all on the router/server, in case I'm not aware of some variable which is causing this:

abi.vsyscall32 = 1
debug.exception-trace = 1
debug.kprobes-optimization = 1
dev.hpet.max-user-freq = 64
dev.i915.oa_max_sample_rate = 100000
dev.i915.perf_stream_paranoid = 1
dev.mac_hid.mouse_button2_keycode = 97
dev.mac_hid.mouse_button3_keycode = 100
dev.mac_hid.mouse_button_emulation = 0
dev.scsi.logging_level = 0
dev.tty.ldisc_autoload = 1
dev.tty.legacy_tiocsti = 0
dev.tty.tiocsti_restrict = 1
fs.aio-max-nr = 65536
fs.aio-nr = 0
fs.binfmt_misc.status = enabled
fs.dentry-state = 57715	52681	45	0	17358	0
fs.device_sidechannel_restrict = 1
fs.dir-notify-enable = 1
fs.epoll.max_user_watches = 3580438
fs.fanotify.max_queued_events = 16384
fs.fanotify.max_user_groups = 128
fs.fanotify.max_user_marks = 116974
fs.file-max = 9223372036854775807
fs.file-nr = 1408	0	9223372036854775807
fs.inode-nr = 40270	203
fs.inode-state = 40270	203	0	0	0	0	0
fs.inotify.max_queued_events = 16384
fs.inotify.max_user_instances = 1024
fs.inotify.max_user_watches = 524288
fs.lease-break-time = 45
fs.leases-enable = 1
fs.mount-max = 100000
fs.mqueue.msg_default = 10
fs.mqueue.msg_max = 10
fs.mqueue.msgsize_default = 8192
fs.mqueue.msgsize_max = 8192
fs.mqueue.queues_max = 256
fs.nr_open = 1073741816
fs.overflowgid = 65534
fs.overflowuid = 65534
fs.pipe-max-size = 1048576
fs.pipe-user-pages-hard = 0
fs.pipe-user-pages-soft = 16384
fs.protected_fifos = 1
fs.protected_hardlinks = 1
fs.protected_regular = 1
fs.protected_symlinks = 1
fs.quota.allocated_dquots = 0
fs.quota.cache_hits = 0
fs.quota.drops = 0
fs.quota.free_dquots = 0
fs.quota.lookups = 0
fs.quota.reads = 0
fs.quota.syncs = 0
fs.quota.writes = 0
fs.suid_dumpable = 2
fs.verity.require_signatures = 0
kernel.acct = 4	2	30
kernel.acpi_video_flags = 0
kernel.arch = x86_64
kernel.auto_msgmni = 0
kernel.bootloader_type = 33
kernel.bootloader_version = 1
kernel.bpf_stats_enabled = 0
kernel.cad_pid = 1
kernel.cap_last_cap = 40
kernel.core_file_note_size_limit = 4194304
kernel.core_pattern = |/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %h
kernel.core_pipe_limit = 16
kernel.core_uses_pid = 1
kernel.ctrl-alt-del = 0
kernel.deny_new_usb = 0
kernel.dmesg_restrict = 1
kernel.domainname = (none)
kernel.ftrace_dump_on_oops = 0
kernel.ftrace_enabled = 1
kernel.hardlockup_all_cpu_backtrace = 0
kernel.hardlockup_panic = 0
kernel.hostname = bastion
kernel.hung_task_all_cpu_backtrace = 0
kernel.hung_task_check_count = 4194304
kernel.hung_task_check_interval_secs = 0
kernel.hung_task_panic = 0
kernel.hung_task_timeout_secs = 120
kernel.hung_task_warnings = 10
kernel.io_delay_type = 0
kernel.io_uring_disabled = 1
kernel.io_uring_group = -1
kernel.keys.gc_delay = 300
kernel.keys.maxbytes = 20000
kernel.keys.maxkeys = 200
kernel.keys.persistent_keyring_expiry = 259200
kernel.keys.root_maxbytes = 25000000
kernel.keys.root_maxkeys = 1000000
kernel.kptr_restrict = 2
kernel.max_lock_depth = 1024
kernel.max_rcu_stall_to_panic = 0
kernel.modprobe = /sbin/modprobe
kernel.modules_disabled = 0
kernel.msgmax = 8192
kernel.msgmnb = 16384
kernel.msgmni = 32000
kernel.ngroups_max = 65536
kernel.nmi_watchdog = 1
kernel.numa_balancing = 0
kernel.numa_balancing_promote_rate_limit_MBps = 65536
kernel.oops_all_cpu_backtrace = 0
kernel.oops_limit = 10000
kernel.osrelease = 6.10.1-hardened1-1-hardened
kernel.ostype = Linux
kernel.overflowgid = 65534
kernel.overflowuid = 65534
kernel.panic = 0
kernel.panic_on_io_nmi = 0
kernel.panic_on_oops = 1
kernel.panic_on_rcu_stall = 0
kernel.panic_on_unrecovered_nmi = 0
kernel.panic_on_warn = 0
kernel.panic_print = 0
kernel.perf_cpu_time_max_percent = 25
kernel.perf_event_max_contexts_per_stack = 8
kernel.perf_event_max_sample_rate = 100000
kernel.perf_event_max_stack = 127
kernel.perf_event_mlock_kb = 516
kernel.perf_event_paranoid = 3
kernel.pid_max = 4194304
kernel.poweroff_cmd = /sbin/poweroff
kernel.print-fatal-signals = 0
kernel.printk = 3	4	1	3
kernel.printk_delay = 0
kernel.printk_devkmsg = on
kernel.printk_ratelimit = 5
kernel.printk_ratelimit_burst = 10
kernel.pty.max = 4096
kernel.pty.nr = 3
kernel.pty.reserve = 1024
kernel.random.boot_id = 0f68272d-3b21-4736-8426-6f1439b6f6dd
kernel.random.entropy_avail = 256
kernel.random.poolsize = 256
kernel.random.urandom_min_reseed_secs = 60
kernel.random.uuid = f0bd04bd-ac14-403a-bc9e-e30a13164875
kernel.random.write_wakeup_threshold = 256
kernel.randomize_va_space = 2
kernel.real-root-dev = 0
kernel.sched_autogroup_enabled = 1
kernel.sched_cfs_bandwidth_slice_us = 5000
kernel.sched_deadline_period_max_us = 4194304
kernel.sched_deadline_period_min_us = 100
kernel.sched_itmt_enabled = 1
kernel.sched_rr_timeslice_ms = 100
kernel.sched_rt_period_us = 1000000
kernel.sched_rt_runtime_us = 950000
kernel.sched_schedstats = 0
kernel.sched_util_clamp_max = 1024
kernel.sched_util_clamp_min = 1024
kernel.sched_util_clamp_min_rt_default = 1024
kernel.seccomp.actions_avail = kill_process kill_thread trap errno user_notif trace log allow
kernel.seccomp.actions_logged = kill_process kill_thread trap errno user_notif trace log
kernel.sem = 32000	1024000000	500	32000
kernel.shm_rmid_forced = 0
kernel.shmall = 18446744073692774399
kernel.shmmax = 18446744073692774399
kernel.shmmni = 4096
kernel.soft_watchdog = 1
kernel.softlockup_all_cpu_backtrace = 0
kernel.softlockup_panic = 0
kernel.split_lock_mitigate = 1
kernel.stack_tracer_enabled = 0
kernel.sysctl_writes_strict = 1
kernel.sysrq = 16
kernel.tainted = 131072
kernel.task_delayacct = 0
kernel.threads-max = 125656
kernel.timer_migration = 1
kernel.traceoff_on_warning = 0
kernel.tracepoint_printk = 0
kernel.unknown_nmi_panic = 0
kernel.unprivileged_bpf_disabled = 2
kernel.unprivileged_userns_clone = 0
kernel.usermodehelper.bset = 4294967295	511
kernel.usermodehelper.inheritable = 4294967295	511
kernel.version = #1 SMP PREEMPT_DYNAMIC Wed, 24 Jul 2024 19:22:59 +0000
kernel.warn_limit = 0
kernel.watchdog = 1
kernel.watchdog_cpumask = 0-19
kernel.watchdog_thresh = 10
kernel.yama.ptrace_scope = 1
net.core.bpf_jit_enable = 1
net.core.bpf_jit_harden = 2
net.core.bpf_jit_kallsyms = 1
net.core.bpf_jit_limit = 528482304
net.core.busy_poll = 0
net.core.busy_read = 0
net.core.default_qdisc = fq_codel
net.core.dev_weight = 64
net.core.dev_weight_rx_bias = 1
net.core.dev_weight_tx_bias = 1
net.core.devconf_inherit_init_net = 0
net.core.fb_tunnels_only_for_init_net = 0
net.core.flow_limit_cpu_bitmap = 00000
net.core.flow_limit_table_len = 4096
net.core.gro_normal_batch = 8
net.core.high_order_alloc_disable = 0
net.core.max_skb_frags = 17
net.core.mem_pcpu_rsv = 256
net.core.message_burst = 10
net.core.message_cost = 5
net.core.netdev_budget = 300
net.core.netdev_budget_usecs = 6666
net.core.netdev_max_backlog = 1000
net.core.netdev_rss_key = 49:86:da:f7:66:16:20:0b:5b:f5:74:06:3f:ea:d6:ba:1a:92:66:59:4e:79:fa:12:6a:95:98:f3:2a:df:f3:b7:83:a1:6c:83:a1:22:45:ba:73:b6:7d:c9:00:ca:0a:fa:60:fa:94:2b
net.core.netdev_tstamp_prequeue = 1
net.core.netdev_unregister_timeout_secs = 10
net.core.optmem_max = 131072
net.core.rmem_default = 212992
net.core.rmem_max = 212992
net.core.rps_default_mask = 00000
net.core.rps_sock_flow_entries = 0
net.core.skb_defer_max = 64
net.core.somaxconn = 4096
net.core.tstamp_allow_data = 1
net.core.txrehash = 1
net.core.warnings = 0
net.core.wmem_default = 212992
net.core.wmem_max = 212992
net.core.xfrm_acq_expires = 30
net.core.xfrm_aevent_etime = 10
net.core.xfrm_aevent_rseqth = 2
net.core.xfrm_larval_drop = 1
net.ipv4.cipso_cache_bucket_size = 10
net.ipv4.cipso_cache_enable = 1
net.ipv4.cipso_rbm_optfmt = 0
net.ipv4.cipso_rbm_strictvalid = 1
net.ipv4.conf.all.accept_local = 0
net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.all.accept_source_route = 0
net.ipv4.conf.all.arp_accept = 0
net.ipv4.conf.all.arp_announce = 0
net.ipv4.conf.all.arp_evict_nocarrier = 1
net.ipv4.conf.all.arp_filter = 0
net.ipv4.conf.all.arp_ignore = 0
net.ipv4.conf.all.arp_notify = 0
net.ipv4.conf.all.bc_forwarding = 0
net.ipv4.conf.all.bootp_relay = 0
net.ipv4.conf.all.disable_policy = 0
net.ipv4.conf.all.disable_xfrm = 0
net.ipv4.conf.all.drop_gratuitous_arp = 0
net.ipv4.conf.all.drop_unicast_in_l2_multicast = 0
net.ipv4.conf.all.force_igmp_version = 0
net.ipv4.conf.all.forwarding = 1
net.ipv4.conf.all.igmpv2_unsolicited_report_interval = 10000
net.ipv4.conf.all.igmpv3_unsolicited_report_interval = 1000
net.ipv4.conf.all.ignore_routes_with_linkdown = 0
net.ipv4.conf.all.log_martians = 0
net.ipv4.conf.all.mc_forwarding = 0
net.ipv4.conf.all.medium_id = 0
net.ipv4.conf.all.promote_secondaries = 0
net.ipv4.conf.all.proxy_arp = 0
net.ipv4.conf.all.proxy_arp_pvlan = 0
net.ipv4.conf.all.route_localnet = 0
net.ipv4.conf.all.rp_filter = 2
net.ipv4.conf.all.secure_redirects = 1
net.ipv4.conf.all.send_redirects = 1
net.ipv4.conf.all.shared_media = 1
net.ipv4.conf.all.src_valid_mark = 0
net.ipv4.conf.all.tag = 0
net.ipv4.conf.default.accept_local = 0
net.ipv4.conf.default.accept_redirects = 1
net.ipv4.conf.default.accept_source_route = 0
net.ipv4.conf.default.arp_accept = 0
net.ipv4.conf.default.arp_announce = 0
net.ipv4.conf.default.arp_evict_nocarrier = 1
net.ipv4.conf.default.arp_filter = 0
net.ipv4.conf.default.arp_ignore = 0
net.ipv4.conf.default.arp_notify = 0
net.ipv4.conf.default.bc_forwarding = 0
net.ipv4.conf.default.bootp_relay = 0
net.ipv4.conf.default.disable_policy = 0
net.ipv4.conf.default.disable_xfrm = 0
net.ipv4.conf.default.drop_gratuitous_arp = 0
net.ipv4.conf.default.drop_unicast_in_l2_multicast = 0
net.ipv4.conf.default.force_igmp_version = 0
net.ipv4.conf.default.forwarding = 1
net.ipv4.conf.default.igmpv2_unsolicited_report_interval = 10000
net.ipv4.conf.default.igmpv3_unsolicited_report_interval = 1000
net.ipv4.conf.default.ignore_routes_with_linkdown = 0
net.ipv4.conf.default.log_martians = 0
net.ipv4.conf.default.mc_forwarding = 0
net.ipv4.conf.default.medium_id = 0
net.ipv4.conf.default.promote_secondaries = 1
net.ipv4.conf.default.proxy_arp = 0
net.ipv4.conf.default.proxy_arp_pvlan = 0
net.ipv4.conf.default.route_localnet = 0
net.ipv4.conf.default.rp_filter = 2
net.ipv4.conf.default.secure_redirects = 1
net.ipv4.conf.default.send_redirects = 1
net.ipv4.conf.default.shared_media = 1
net.ipv4.conf.default.src_valid_mark = 0
net.ipv4.conf.default.tag = 0
net.ipv4.conf.enp2s0f0np0.accept_local = 0
net.ipv4.conf.enp2s0f0np0.accept_redirects = 1
net.ipv4.conf.enp2s0f0np0.accept_source_route = 0
net.ipv4.conf.enp2s0f0np0.arp_accept = 0
net.ipv4.conf.enp2s0f0np0.arp_announce = 0
net.ipv4.conf.enp2s0f0np0.arp_evict_nocarrier = 1
net.ipv4.conf.enp2s0f0np0.arp_filter = 0
net.ipv4.conf.enp2s0f0np0.arp_ignore = 0
net.ipv4.conf.enp2s0f0np0.arp_notify = 0
net.ipv4.conf.enp2s0f0np0.bc_forwarding = 0
net.ipv4.conf.enp2s0f0np0.bootp_relay = 0
net.ipv4.conf.enp2s0f0np0.disable_policy = 0
net.ipv4.conf.enp2s0f0np0.disable_xfrm = 0
net.ipv4.conf.enp2s0f0np0.drop_gratuitous_arp = 0
net.ipv4.conf.enp2s0f0np0.drop_unicast_in_l2_multicast = 0
net.ipv4.conf.enp2s0f0np0.force_igmp_version = 0
net.ipv4.conf.enp2s0f0np0.forwarding = 1
net.ipv4.conf.enp2s0f0np0.igmpv2_unsolicited_report_interval = 10000
net.ipv4.conf.enp2s0f0np0.igmpv3_unsolicited_report_interval = 1000
net.ipv4.conf.enp2s0f0np0.ignore_routes_with_linkdown = 0
net.ipv4.conf.enp2s0f0np0.log_martians = 0
net.ipv4.conf.enp2s0f0np0.mc_forwarding = 0
net.ipv4.conf.enp2s0f0np0.medium_id = 0
net.ipv4.conf.enp2s0f0np0.promote_secondaries = 1
net.ipv4.conf.enp2s0f0np0.proxy_arp = 0
net.ipv4.conf.enp2s0f0np0.proxy_arp_pvlan = 0
net.ipv4.conf.enp2s0f0np0.route_localnet = 0
net.ipv4.conf.enp2s0f0np0.rp_filter = 2
net.ipv4.conf.enp2s0f0np0.secure_redirects = 1
net.ipv4.conf.enp2s0f0np0.send_redirects = 1
net.ipv4.conf.enp2s0f0np0.shared_media = 1
net.ipv4.conf.enp2s0f0np0.src_valid_mark = 0
net.ipv4.conf.enp2s0f0np0.tag = 0
net.ipv4.conf.enp2s0f1np1.accept_local = 0
net.ipv4.conf.enp2s0f1np1.accept_redirects = 1
net.ipv4.conf.enp2s0f1np1.accept_source_route = 0
net.ipv4.conf.enp2s0f1np1.arp_accept = 0
net.ipv4.conf.enp2s0f1np1.arp_announce = 0
net.ipv4.conf.enp2s0f1np1.arp_evict_nocarrier = 1
net.ipv4.conf.enp2s0f1np1.arp_filter = 0
net.ipv4.conf.enp2s0f1np1.arp_ignore = 0
net.ipv4.conf.enp2s0f1np1.arp_notify = 0
net.ipv4.conf.enp2s0f1np1.bc_forwarding = 0
net.ipv4.conf.enp2s0f1np1.bootp_relay = 0
net.ipv4.conf.enp2s0f1np1.disable_policy = 0
net.ipv4.conf.enp2s0f1np1.disable_xfrm = 0
net.ipv4.conf.enp2s0f1np1.drop_gratuitous_arp = 0
net.ipv4.conf.enp2s0f1np1.drop_unicast_in_l2_multicast = 0
net.ipv4.conf.enp2s0f1np1.force_igmp_version = 0
net.ipv4.conf.enp2s0f1np1.forwarding = 1
net.ipv4.conf.enp2s0f1np1.igmpv2_unsolicited_report_interval = 10000
net.ipv4.conf.enp2s0f1np1.igmpv3_unsolicited_report_interval = 1000
net.ipv4.conf.enp2s0f1np1.ignore_routes_with_linkdown = 0
net.ipv4.conf.enp2s0f1np1.log_martians = 0
net.ipv4.conf.enp2s0f1np1.mc_forwarding = 0
net.ipv4.conf.enp2s0f1np1.medium_id = 0
net.ipv4.conf.enp2s0f1np1.promote_secondaries = 1
net.ipv4.conf.enp2s0f1np1.proxy_arp = 0
net.ipv4.conf.enp2s0f1np1.proxy_arp_pvlan = 0
net.ipv4.conf.enp2s0f1np1.route_localnet = 0
net.ipv4.conf.enp2s0f1np1.rp_filter = 2
net.ipv4.conf.enp2s0f1np1.secure_redirects = 1
net.ipv4.conf.enp2s0f1np1.send_redirects = 1
net.ipv4.conf.enp2s0f1np1.shared_media = 1
net.ipv4.conf.enp2s0f1np1.src_valid_mark = 0
net.ipv4.conf.enp2s0f1np1.tag = 0
net.ipv4.conf.enp87s0.accept_local = 0
net.ipv4.conf.enp87s0.accept_redirects = 1
net.ipv4.conf.enp87s0.accept_source_route = 0
net.ipv4.conf.enp87s0.arp_accept = 0
net.ipv4.conf.enp87s0.arp_announce = 0
net.ipv4.conf.enp87s0.arp_evict_nocarrier = 1
net.ipv4.conf.enp87s0.arp_filter = 0
net.ipv4.conf.enp87s0.arp_ignore = 0
net.ipv4.conf.enp87s0.arp_notify = 0
net.ipv4.conf.enp87s0.bc_forwarding = 0
net.ipv4.conf.enp87s0.bootp_relay = 0
net.ipv4.conf.enp87s0.disable_policy = 0
net.ipv4.conf.enp87s0.disable_xfrm = 0
net.ipv4.conf.enp87s0.drop_gratuitous_arp = 0
net.ipv4.conf.enp87s0.drop_unicast_in_l2_multicast = 0
net.ipv4.conf.enp87s0.force_igmp_version = 0
net.ipv4.conf.enp87s0.forwarding = 1
net.ipv4.conf.enp87s0.igmpv2_unsolicited_report_interval = 10000
net.ipv4.conf.enp87s0.igmpv3_unsolicited_report_interval = 1000
net.ipv4.conf.enp87s0.ignore_routes_with_linkdown = 0
net.ipv4.conf.enp87s0.log_martians = 0
net.ipv4.conf.enp87s0.mc_forwarding = 0
net.ipv4.conf.enp87s0.medium_id = 0
net.ipv4.conf.enp87s0.promote_secondaries = 1
net.ipv4.conf.enp87s0.proxy_arp = 0
net.ipv4.conf.enp87s0.proxy_arp_pvlan = 0
net.ipv4.conf.enp87s0.route_localnet = 0
net.ipv4.conf.enp87s0.rp_filter = 2
net.ipv4.conf.enp87s0.secure_redirects = 1
net.ipv4.conf.enp87s0.send_redirects = 1
net.ipv4.conf.enp87s0.shared_media = 1
net.ipv4.conf.enp87s0.src_valid_mark = 0
net.ipv4.conf.enp87s0.tag = 0
net.ipv4.conf.enp88s0.accept_local = 0
net.ipv4.conf.enp88s0.accept_redirects = 1
net.ipv4.conf.enp88s0.accept_source_route = 0
net.ipv4.conf.enp88s0.arp_accept = 0
net.ipv4.conf.enp88s0.arp_announce = 0
net.ipv4.conf.enp88s0.arp_evict_nocarrier = 1
net.ipv4.conf.enp88s0.arp_filter = 0
net.ipv4.conf.enp88s0.arp_ignore = 0
net.ipv4.conf.enp88s0.arp_notify = 0
net.ipv4.conf.enp88s0.bc_forwarding = 0
net.ipv4.conf.enp88s0.bootp_relay = 0
net.ipv4.conf.enp88s0.disable_policy = 0
net.ipv4.conf.enp88s0.disable_xfrm = 0
net.ipv4.conf.enp88s0.drop_gratuitous_arp = 0
net.ipv4.conf.enp88s0.drop_unicast_in_l2_multicast = 0
net.ipv4.conf.enp88s0.force_igmp_version = 0
net.ipv4.conf.enp88s0.forwarding = 1
net.ipv4.conf.enp88s0.igmpv2_unsolicited_report_interval = 10000
net.ipv4.conf.enp88s0.igmpv3_unsolicited_report_interval = 1000
net.ipv4.conf.enp88s0.ignore_routes_with_linkdown = 0
net.ipv4.conf.enp88s0.log_martians = 0
net.ipv4.conf.enp88s0.mc_forwarding = 0
net.ipv4.conf.enp88s0.medium_id = 0
net.ipv4.conf.enp88s0.promote_secondaries = 1
net.ipv4.conf.enp88s0.proxy_arp = 0
net.ipv4.conf.enp88s0.proxy_arp_pvlan = 0
net.ipv4.conf.enp88s0.route_localnet = 0
net.ipv4.conf.enp88s0.rp_filter = 2
net.ipv4.conf.enp88s0.secure_redirects = 1
net.ipv4.conf.enp88s0.send_redirects = 1
net.ipv4.conf.enp88s0.shared_media = 1
net.ipv4.conf.enp88s0.src_valid_mark = 0
net.ipv4.conf.enp88s0.tag = 0
net.ipv4.conf.lo.accept_local = 0
net.ipv4.conf.lo.accept_redirects = 1
net.ipv4.conf.lo.accept_source_route = 0
net.ipv4.conf.lo.arp_accept = 0
net.ipv4.conf.lo.arp_announce = 0
net.ipv4.conf.lo.arp_evict_nocarrier = 1
net.ipv4.conf.lo.arp_filter = 0
net.ipv4.conf.lo.arp_ignore = 0
net.ipv4.conf.lo.arp_notify = 0
net.ipv4.conf.lo.bc_forwarding = 0
net.ipv4.conf.lo.bootp_relay = 0
net.ipv4.conf.lo.disable_policy = 1
net.ipv4.conf.lo.disable_xfrm = 1
net.ipv4.conf.lo.drop_gratuitous_arp = 0
net.ipv4.conf.lo.drop_unicast_in_l2_multicast = 0
net.ipv4.conf.lo.force_igmp_version = 0
net.ipv4.conf.lo.forwarding = 1
net.ipv4.conf.lo.igmpv2_unsolicited_report_interval = 10000
net.ipv4.conf.lo.igmpv3_unsolicited_report_interval = 1000
net.ipv4.conf.lo.ignore_routes_with_linkdown = 0
net.ipv4.conf.lo.log_martians = 0
net.ipv4.conf.lo.mc_forwarding = 0
net.ipv4.conf.lo.medium_id = 0
net.ipv4.conf.lo.promote_secondaries = 1
net.ipv4.conf.lo.proxy_arp = 0
net.ipv4.conf.lo.proxy_arp_pvlan = 0
net.ipv4.conf.lo.route_localnet = 0
net.ipv4.conf.lo.rp_filter = 2
net.ipv4.conf.lo.secure_redirects = 1
net.ipv4.conf.lo.send_redirects = 1
net.ipv4.conf.lo.shared_media = 1
net.ipv4.conf.lo.src_valid_mark = 0
net.ipv4.conf.lo.tag = 0
net.ipv4.conf.wlp89s0.accept_local = 0
net.ipv4.conf.wlp89s0.accept_redirects = 1
net.ipv4.conf.wlp89s0.accept_source_route = 0
net.ipv4.conf.wlp89s0.arp_accept = 0
net.ipv4.conf.wlp89s0.arp_announce = 0
net.ipv4.conf.wlp89s0.arp_evict_nocarrier = 1
net.ipv4.conf.wlp89s0.arp_filter = 0
net.ipv4.conf.wlp89s0.arp_ignore = 0
net.ipv4.conf.wlp89s0.arp_notify = 0
net.ipv4.conf.wlp89s0.bc_forwarding = 0
net.ipv4.conf.wlp89s0.bootp_relay = 0
net.ipv4.conf.wlp89s0.disable_policy = 0
net.ipv4.conf.wlp89s0.disable_xfrm = 0
net.ipv4.conf.wlp89s0.drop_gratuitous_arp = 0
net.ipv4.conf.wlp89s0.drop_unicast_in_l2_multicast = 0
net.ipv4.conf.wlp89s0.force_igmp_version = 0
net.ipv4.conf.wlp89s0.forwarding = 1
net.ipv4.conf.wlp89s0.igmpv2_unsolicited_report_interval = 10000
net.ipv4.conf.wlp89s0.igmpv3_unsolicited_report_interval = 1000
net.ipv4.conf.wlp89s0.ignore_routes_with_linkdown = 0
net.ipv4.conf.wlp89s0.log_martians = 0
net.ipv4.conf.wlp89s0.mc_forwarding = 0
net.ipv4.conf.wlp89s0.medium_id = 0
net.ipv4.conf.wlp89s0.promote_secondaries = 1
net.ipv4.conf.wlp89s0.proxy_arp = 0
net.ipv4.conf.wlp89s0.proxy_arp_pvlan = 0
net.ipv4.conf.wlp89s0.route_localnet = 0
net.ipv4.conf.wlp89s0.rp_filter = 2
net.ipv4.conf.wlp89s0.secure_redirects = 1
net.ipv4.conf.wlp89s0.send_redirects = 1
net.ipv4.conf.wlp89s0.shared_media = 1
net.ipv4.conf.wlp89s0.src_valid_mark = 0
net.ipv4.conf.wlp89s0.tag = 0
net.ipv4.fib_multipath_hash_fields = 7
net.ipv4.fib_multipath_hash_policy = 0
net.ipv4.fib_multipath_use_neigh = 0
net.ipv4.fib_notify_on_flag_change = 0
net.ipv4.fib_sync_mem = 524288
net.ipv4.fwmark_reflect = 0
net.ipv4.icmp_echo_enable_probe = 0
net.ipv4.icmp_echo_ignore_all = 0
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_errors_use_inbound_ifaddr = 0
net.ipv4.icmp_ignore_bogus_error_responses = 1
net.ipv4.icmp_msgs_burst = 50
net.ipv4.icmp_msgs_per_sec = 1000
net.ipv4.icmp_ratelimit = 1000
net.ipv4.icmp_ratemask = 6168
net.ipv4.igmp_link_local_mcast_reports = 1
net.ipv4.igmp_max_memberships = 20
net.ipv4.igmp_max_msf = 10
net.ipv4.igmp_qrv = 2
net.ipv4.inet_peer_maxttl = 600
net.ipv4.inet_peer_minttl = 120
net.ipv4.inet_peer_threshold = 65664
net.ipv4.ip_autobind_reuse = 0
net.ipv4.ip_default_ttl = 64
net.ipv4.ip_dynaddr = 0
net.ipv4.ip_early_demux = 1
net.ipv4.ip_forward = 1
net.ipv4.ip_forward_update_priority = 1
net.ipv4.ip_forward_use_pmtu = 0
net.ipv4.ip_local_port_range = 32768	60999
net.ipv4.ip_local_reserved_ports = 
net.ipv4.ip_no_pmtu_disc = 0
net.ipv4.ip_nonlocal_bind = 0
net.ipv4.ip_unprivileged_port_start = 1024
net.ipv4.ipfrag_high_thresh = 4194304
net.ipv4.ipfrag_low_thresh = 3145728
net.ipv4.ipfrag_max_dist = 64
net.ipv4.ipfrag_secret_interval = 0
net.ipv4.ipfrag_time = 30
net.ipv4.neigh.default.anycast_delay = 99
net.ipv4.neigh.default.app_solicit = 0
net.ipv4.neigh.default.base_reachable_time_ms = 30000
net.ipv4.neigh.default.delay_first_probe_time = 5
net.ipv4.neigh.default.gc_interval = 30
net.ipv4.neigh.default.gc_stale_time = 60
net.ipv4.neigh.default.gc_thresh1 = 128
net.ipv4.neigh.default.gc_thresh2 = 512
net.ipv4.neigh.default.gc_thresh3 = 1024
net.ipv4.neigh.default.interval_probe_time_ms = 5000
net.ipv4.neigh.default.locktime = 99
net.ipv4.neigh.default.mcast_resolicit = 0
net.ipv4.neigh.default.mcast_solicit = 3
net.ipv4.neigh.default.proxy_delay = 79
net.ipv4.neigh.default.proxy_qlen = 64
net.ipv4.neigh.default.retrans_time_ms = 1000
net.ipv4.neigh.default.ucast_solicit = 3
net.ipv4.neigh.default.unres_qlen = 101
net.ipv4.neigh.default.unres_qlen_bytes = 212992
net.ipv4.neigh.enp2s0f0np0.anycast_delay = 99
net.ipv4.neigh.enp2s0f0np0.app_solicit = 0
net.ipv4.neigh.enp2s0f0np0.base_reachable_time_ms = 30000
net.ipv4.neigh.enp2s0f0np0.delay_first_probe_time = 5
net.ipv4.neigh.enp2s0f0np0.gc_stale_time = 60
net.ipv4.neigh.enp2s0f0np0.interval_probe_time_ms = 5000
net.ipv4.neigh.enp2s0f0np0.locktime = 99
net.ipv4.neigh.enp2s0f0np0.mcast_resolicit = 0
net.ipv4.neigh.enp2s0f0np0.mcast_solicit = 3
net.ipv4.neigh.enp2s0f0np0.proxy_delay = 79
net.ipv4.neigh.enp2s0f0np0.proxy_qlen = 64
net.ipv4.neigh.enp2s0f0np0.retrans_time_ms = 1000
net.ipv4.neigh.enp2s0f0np0.ucast_solicit = 3
net.ipv4.neigh.enp2s0f0np0.unres_qlen = 101
net.ipv4.neigh.enp2s0f0np0.unres_qlen_bytes = 212992
net.ipv4.neigh.enp2s0f1np1.anycast_delay = 99
net.ipv4.neigh.enp2s0f1np1.app_solicit = 0
net.ipv4.neigh.enp2s0f1np1.base_reachable_time_ms = 30000
net.ipv4.neigh.enp2s0f1np1.delay_first_probe_time = 5
net.ipv4.neigh.enp2s0f1np1.gc_stale_time = 60
net.ipv4.neigh.enp2s0f1np1.interval_probe_time_ms = 5000
net.ipv4.neigh.enp2s0f1np1.locktime = 99
net.ipv4.neigh.enp2s0f1np1.mcast_resolicit = 0
net.ipv4.neigh.enp2s0f1np1.mcast_solicit = 3
net.ipv4.neigh.enp2s0f1np1.proxy_delay = 79
net.ipv4.neigh.enp2s0f1np1.proxy_qlen = 64
net.ipv4.neigh.enp2s0f1np1.retrans_time_ms = 1000
net.ipv4.neigh.enp2s0f1np1.ucast_solicit = 3
net.ipv4.neigh.enp2s0f1np1.unres_qlen = 101
net.ipv4.neigh.enp2s0f1np1.unres_qlen_bytes = 212992
net.ipv4.neigh.enp87s0.anycast_delay = 99
net.ipv4.neigh.enp87s0.app_solicit = 0
net.ipv4.neigh.enp87s0.base_reachable_time_ms = 30000
net.ipv4.neigh.enp87s0.delay_first_probe_time = 5
net.ipv4.neigh.enp87s0.gc_stale_time = 60
net.ipv4.neigh.enp87s0.interval_probe_time_ms = 5000
net.ipv4.neigh.enp87s0.locktime = 99
net.ipv4.neigh.enp87s0.mcast_resolicit = 0
net.ipv4.neigh.enp87s0.mcast_solicit = 3
net.ipv4.neigh.enp87s0.proxy_delay = 79
net.ipv4.neigh.enp87s0.proxy_qlen = 64
net.ipv4.neigh.enp87s0.retrans_time_ms = 1000
net.ipv4.neigh.enp87s0.ucast_solicit = 3
net.ipv4.neigh.enp87s0.unres_qlen = 101
net.ipv4.neigh.enp87s0.unres_qlen_bytes = 212992
net.ipv4.neigh.enp88s0.anycast_delay = 99
net.ipv4.neigh.enp88s0.app_solicit = 0
net.ipv4.neigh.enp88s0.base_reachable_time_ms = 30000
net.ipv4.neigh.enp88s0.delay_first_probe_time = 5
net.ipv4.neigh.enp88s0.gc_stale_time = 60
net.ipv4.neigh.enp88s0.interval_probe_time_ms = 5000
net.ipv4.neigh.enp88s0.locktime = 99
net.ipv4.neigh.enp88s0.mcast_resolicit = 0
net.ipv4.neigh.enp88s0.mcast_solicit = 3
net.ipv4.neigh.enp88s0.proxy_delay = 79
net.ipv4.neigh.enp88s0.proxy_qlen = 64
net.ipv4.neigh.enp88s0.retrans_time_ms = 1000
net.ipv4.neigh.enp88s0.ucast_solicit = 3
net.ipv4.neigh.enp88s0.unres_qlen = 101
net.ipv4.neigh.enp88s0.unres_qlen_bytes = 212992
net.ipv4.neigh.lo.anycast_delay = 99
net.ipv4.neigh.lo.app_solicit = 0
net.ipv4.neigh.lo.base_reachable_time_ms = 30000
net.ipv4.neigh.lo.delay_first_probe_time = 5
net.ipv4.neigh.lo.gc_stale_time = 60
net.ipv4.neigh.lo.interval_probe_time_ms = 5000
net.ipv4.neigh.lo.locktime = 99
net.ipv4.neigh.lo.mcast_resolicit = 0
net.ipv4.neigh.lo.mcast_solicit = 3
net.ipv4.neigh.lo.proxy_delay = 79
net.ipv4.neigh.lo.proxy_qlen = 64
net.ipv4.neigh.lo.retrans_time_ms = 1000
net.ipv4.neigh.lo.ucast_solicit = 3
net.ipv4.neigh.lo.unres_qlen = 101
net.ipv4.neigh.lo.unres_qlen_bytes = 212992
net.ipv4.neigh.wlp89s0.anycast_delay = 99
net.ipv4.neigh.wlp89s0.app_solicit = 0
net.ipv4.neigh.wlp89s0.base_reachable_time_ms = 30000
net.ipv4.neigh.wlp89s0.delay_first_probe_time = 5
net.ipv4.neigh.wlp89s0.gc_stale_time = 60
net.ipv4.neigh.wlp89s0.interval_probe_time_ms = 5000
net.ipv4.neigh.wlp89s0.locktime = 99
net.ipv4.neigh.wlp89s0.mcast_resolicit = 0
net.ipv4.neigh.wlp89s0.mcast_solicit = 3
net.ipv4.neigh.wlp89s0.proxy_delay = 79
net.ipv4.neigh.wlp89s0.proxy_qlen = 64
net.ipv4.neigh.wlp89s0.retrans_time_ms = 1000
net.ipv4.neigh.wlp89s0.ucast_solicit = 3
net.ipv4.neigh.wlp89s0.unres_qlen = 101
net.ipv4.neigh.wlp89s0.unres_qlen_bytes = 212992
net.ipv4.nexthop_compat_mode = 1
net.ipv4.ping_group_range = 0	2147483647
net.ipv4.raw_l3mdev_accept = 1
net.ipv4.route.error_burst = 1500
net.ipv4.route.error_cost = 300
net.ipv4.route.gc_elasticity = 8
net.ipv4.route.gc_interval = 60
net.ipv4.route.gc_min_interval = 0
net.ipv4.route.gc_min_interval_ms = 500
net.ipv4.route.gc_thresh = -1
net.ipv4.route.gc_timeout = 300
net.ipv4.route.max_size = 2147483647
net.ipv4.route.min_adv_mss = 256
net.ipv4.route.min_pmtu = 552
net.ipv4.route.mtu_expires = 600
net.ipv4.route.redirect_load = 6
net.ipv4.route.redirect_number = 9
net.ipv4.route.redirect_silence = 6144
net.ipv4.tcp_abort_on_overflow = 0
net.ipv4.tcp_adv_win_scale = 1
net.ipv4.tcp_allowed_congestion_control = reno cubic
net.ipv4.tcp_app_win = 31
net.ipv4.tcp_autocorking = 1
net.ipv4.tcp_available_congestion_control = reno cubic
net.ipv4.tcp_available_ulp = espintcp mptcp tls
net.ipv4.tcp_backlog_ack_defer = 1
net.ipv4.tcp_base_mss = 1024
net.ipv4.tcp_challenge_ack_limit = 2147483647
net.ipv4.tcp_child_ehash_entries = 0
net.ipv4.tcp_comp_sack_delay_ns = 1000000
net.ipv4.tcp_comp_sack_nr = 44
net.ipv4.tcp_comp_sack_slack_ns = 100000
net.ipv4.tcp_congestion_control = cubic
net.ipv4.tcp_dsack = 1
net.ipv4.tcp_early_demux = 1
net.ipv4.tcp_early_retrans = 3
net.ipv4.tcp_ecn = 2
net.ipv4.tcp_ecn_fallback = 1
net.ipv4.tcp_ehash_entries = 131072
net.ipv4.tcp_fack = 0
net.ipv4.tcp_fastopen = 1
net.ipv4.tcp_fastopen_blackhole_timeout_sec = 0
net.ipv4.tcp_fastopen_key = 06e303ed-40143243-3b24e350-35e3568f
net.ipv4.tcp_fin_timeout = 60
net.ipv4.tcp_frto = 2
net.ipv4.tcp_fwmark_accept = 0
net.ipv4.tcp_invalid_ratelimit = 500
net.ipv4.tcp_keepalive_intvl = 75
net.ipv4.tcp_keepalive_probes = 9
net.ipv4.tcp_keepalive_time = 7200
net.ipv4.tcp_l3mdev_accept = 0
net.ipv4.tcp_limit_output_bytes = 1048576
net.ipv4.tcp_low_latency = 0
net.ipv4.tcp_max_orphans = 65536
net.ipv4.tcp_max_reordering = 300
net.ipv4.tcp_max_syn_backlog = 1024
net.ipv4.tcp_max_tw_buckets = 65536
net.ipv4.tcp_mem = 187296	249729	374592
net.ipv4.tcp_migrate_req = 0
net.ipv4.tcp_min_rtt_wlen = 300
net.ipv4.tcp_min_snd_mss = 48
net.ipv4.tcp_min_tso_segs = 2
net.ipv4.tcp_moderate_rcvbuf = 1
net.ipv4.tcp_mtu_probe_floor = 48
net.ipv4.tcp_mtu_probing = 0
net.ipv4.tcp_no_metrics_save = 0
net.ipv4.tcp_no_ssthresh_metrics_save = 1
net.ipv4.tcp_notsent_lowat = 4294967295
net.ipv4.tcp_orphan_retries = 0
net.ipv4.tcp_pacing_ca_ratio = 120
net.ipv4.tcp_pacing_ss_ratio = 200
net.ipv4.tcp_pingpong_thresh = 1
net.ipv4.tcp_plb_cong_thresh = 128
net.ipv4.tcp_plb_enabled = 0
net.ipv4.tcp_plb_idle_rehash_rounds = 3
net.ipv4.tcp_plb_rehash_rounds = 12
net.ipv4.tcp_plb_suspend_rto_sec = 60
net.ipv4.tcp_probe_interval = 600
net.ipv4.tcp_probe_threshold = 8
net.ipv4.tcp_recovery = 1
net.ipv4.tcp_reflect_tos = 0
net.ipv4.tcp_reordering = 3
net.ipv4.tcp_retrans_collapse = 1
net.ipv4.tcp_retries1 = 3
net.ipv4.tcp_retries2 = 15
net.ipv4.tcp_rfc1337 = 0
net.ipv4.tcp_rmem = 4096	131072	6291456
net.ipv4.tcp_sack = 1
net.ipv4.tcp_shrink_window = 0
net.ipv4.tcp_simult_connect = 0
net.ipv4.tcp_slow_start_after_idle = 1
net.ipv4.tcp_stdurg = 0
net.ipv4.tcp_syn_linear_timeouts = 4
net.ipv4.tcp_syn_retries = 6
net.ipv4.tcp_synack_retries = 5
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_thin_linear_timeouts = 0
net.ipv4.tcp_timestamps = 1
net.ipv4.tcp_tso_rtt_log = 9
net.ipv4.tcp_tso_win_divisor = 3
net.ipv4.tcp_tw_reuse = 2
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_wmem = 4096	16384	4194304
net.ipv4.tcp_workaround_signed_windows = 0
net.ipv4.udp_child_hash_entries = 0
net.ipv4.udp_early_demux = 1
net.ipv4.udp_hash_entries = 8192
net.ipv4.udp_l3mdev_accept = 0
net.ipv4.udp_mem = 374592	499458	749184
net.ipv4.udp_rmem_min = 4096
net.ipv4.udp_wmem_min = 4096
net.ipv4.xfrm4_gc_thresh = 32768
net.ipv6.anycast_src_echo_reply = 0
net.ipv6.auto_flowlabels = 1
net.ipv6.bindv6only = 0
net.ipv6.calipso_cache_bucket_size = 10
net.ipv6.calipso_cache_enable = 1
net.ipv6.conf.all.accept_dad = 0
net.ipv6.conf.all.accept_ra = 1
net.ipv6.conf.all.accept_ra_defrtr = 1
net.ipv6.conf.all.accept_ra_from_local = 0
net.ipv6.conf.all.accept_ra_min_hop_limit = 1
net.ipv6.conf.all.accept_ra_min_lft = 0
net.ipv6.conf.all.accept_ra_mtu = 1
net.ipv6.conf.all.accept_ra_pinfo = 1
net.ipv6.conf.all.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.all.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.all.accept_ra_rtr_pref = 1
net.ipv6.conf.all.accept_redirects = 1
net.ipv6.conf.all.accept_source_route = 0
net.ipv6.conf.all.accept_untracked_na = 0
net.ipv6.conf.all.addr_gen_mode = 0
net.ipv6.conf.all.autoconf = 1
net.ipv6.conf.all.dad_transmits = 1
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.all.disable_policy = 0
net.ipv6.conf.all.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.all.drop_unsolicited_na = 0
net.ipv6.conf.all.enhanced_dad = 1
net.ipv6.conf.all.force_mld_version = 0
net.ipv6.conf.all.force_tllao = 0
net.ipv6.conf.all.forwarding = 0
net.ipv6.conf.all.hop_limit = 64
net.ipv6.conf.all.ignore_routes_with_linkdown = 0
net.ipv6.conf.all.ioam6_enabled = 0
net.ipv6.conf.all.ioam6_id = 65535
net.ipv6.conf.all.ioam6_id_wide = 4294967295
net.ipv6.conf.all.keep_addr_on_down = 0
net.ipv6.conf.all.max_addresses = 16
net.ipv6.conf.all.max_desync_factor = 600
net.ipv6.conf.all.mc_forwarding = 0
net.ipv6.conf.all.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.all.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.all.mtu = 1280
net.ipv6.conf.all.ndisc_evict_nocarrier = 1
net.ipv6.conf.all.ndisc_notify = 0
net.ipv6.conf.all.ndisc_tclass = 0
net.ipv6.conf.all.optimistic_dad = 0
net.ipv6.conf.all.proxy_ndp = 0
net.ipv6.conf.all.ra_defrtr_metric = 1024
net.ipv6.conf.all.ra_honor_pio_life = 0
net.ipv6.conf.all.regen_max_retry = 3
net.ipv6.conf.all.regen_min_advance = 2
net.ipv6.conf.all.router_probe_interval = 60
net.ipv6.conf.all.router_solicitation_delay = 1
net.ipv6.conf.all.router_solicitation_interval = 4
net.ipv6.conf.all.router_solicitation_max_interval = 3600
net.ipv6.conf.all.router_solicitations = -1
net.ipv6.conf.all.rpl_seg_enabled = 0
net.ipv6.conf.all.seg6_enabled = 0
net.ipv6.conf.all.seg6_require_hmac = 0
net.ipv6.conf.all.suppress_frag_ndisc = 1
net.ipv6.conf.all.temp_prefered_lft = 86400
net.ipv6.conf.all.temp_valid_lft = 604800
net.ipv6.conf.all.use_oif_addrs_only = 0
net.ipv6.conf.all.use_optimistic = 0
net.ipv6.conf.all.use_tempaddr = 0
net.ipv6.conf.default.accept_dad = 1
net.ipv6.conf.default.accept_ra = 1
net.ipv6.conf.default.accept_ra_defrtr = 1
net.ipv6.conf.default.accept_ra_from_local = 0
net.ipv6.conf.default.accept_ra_min_hop_limit = 1
net.ipv6.conf.default.accept_ra_min_lft = 0
net.ipv6.conf.default.accept_ra_mtu = 1
net.ipv6.conf.default.accept_ra_pinfo = 1
net.ipv6.conf.default.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.default.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.default.accept_ra_rtr_pref = 1
net.ipv6.conf.default.accept_redirects = 1
net.ipv6.conf.default.accept_source_route = 0
net.ipv6.conf.default.accept_untracked_na = 0
net.ipv6.conf.default.addr_gen_mode = 0
net.ipv6.conf.default.autoconf = 1
net.ipv6.conf.default.dad_transmits = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.default.disable_policy = 0
net.ipv6.conf.default.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.default.drop_unsolicited_na = 0
net.ipv6.conf.default.enhanced_dad = 1
net.ipv6.conf.default.force_mld_version = 0
net.ipv6.conf.default.force_tllao = 0
net.ipv6.conf.default.forwarding = 0
net.ipv6.conf.default.hop_limit = 64
net.ipv6.conf.default.ignore_routes_with_linkdown = 0
net.ipv6.conf.default.ioam6_enabled = 0
net.ipv6.conf.default.ioam6_id = 65535
net.ipv6.conf.default.ioam6_id_wide = 4294967295
net.ipv6.conf.default.keep_addr_on_down = 0
net.ipv6.conf.default.max_addresses = 16
net.ipv6.conf.default.max_desync_factor = 600
net.ipv6.conf.default.mc_forwarding = 0
net.ipv6.conf.default.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.default.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.default.mtu = 1280
net.ipv6.conf.default.ndisc_evict_nocarrier = 1
net.ipv6.conf.default.ndisc_notify = 0
net.ipv6.conf.default.ndisc_tclass = 0
net.ipv6.conf.default.optimistic_dad = 0
net.ipv6.conf.default.proxy_ndp = 0
net.ipv6.conf.default.ra_defrtr_metric = 1024
net.ipv6.conf.default.ra_honor_pio_life = 0
net.ipv6.conf.default.regen_max_retry = 3
net.ipv6.conf.default.regen_min_advance = 2
net.ipv6.conf.default.router_probe_interval = 60
net.ipv6.conf.default.router_solicitation_delay = 1
net.ipv6.conf.default.router_solicitation_interval = 4
net.ipv6.conf.default.router_solicitation_max_interval = 3600
net.ipv6.conf.default.router_solicitations = -1
net.ipv6.conf.default.rpl_seg_enabled = 0
net.ipv6.conf.default.seg6_enabled = 0
net.ipv6.conf.default.seg6_require_hmac = 0
net.ipv6.conf.default.suppress_frag_ndisc = 1
net.ipv6.conf.default.temp_prefered_lft = 86400
net.ipv6.conf.default.temp_valid_lft = 604800
net.ipv6.conf.default.use_oif_addrs_only = 0
net.ipv6.conf.default.use_optimistic = 0
net.ipv6.conf.default.use_tempaddr = 0
net.ipv6.conf.enp2s0f0np0.accept_dad = 1
net.ipv6.conf.enp2s0f0np0.accept_ra = 1
net.ipv6.conf.enp2s0f0np0.accept_ra_defrtr = 1
net.ipv6.conf.enp2s0f0np0.accept_ra_from_local = 0
net.ipv6.conf.enp2s0f0np0.accept_ra_min_hop_limit = 1
net.ipv6.conf.enp2s0f0np0.accept_ra_min_lft = 0
net.ipv6.conf.enp2s0f0np0.accept_ra_mtu = 1
net.ipv6.conf.enp2s0f0np0.accept_ra_pinfo = 1
net.ipv6.conf.enp2s0f0np0.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.enp2s0f0np0.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.enp2s0f0np0.accept_ra_rtr_pref = 1
net.ipv6.conf.enp2s0f0np0.accept_redirects = 1
net.ipv6.conf.enp2s0f0np0.accept_source_route = 0
net.ipv6.conf.enp2s0f0np0.accept_untracked_na = 0
net.ipv6.conf.enp2s0f0np0.addr_gen_mode = 0
net.ipv6.conf.enp2s0f0np0.autoconf = 1
net.ipv6.conf.enp2s0f0np0.dad_transmits = 1
net.ipv6.conf.enp2s0f0np0.disable_ipv6 = 1
net.ipv6.conf.enp2s0f0np0.disable_policy = 0
net.ipv6.conf.enp2s0f0np0.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.enp2s0f0np0.drop_unsolicited_na = 0
net.ipv6.conf.enp2s0f0np0.enhanced_dad = 1
net.ipv6.conf.enp2s0f0np0.force_mld_version = 0
net.ipv6.conf.enp2s0f0np0.force_tllao = 0
net.ipv6.conf.enp2s0f0np0.forwarding = 0
net.ipv6.conf.enp2s0f0np0.hop_limit = 64
net.ipv6.conf.enp2s0f0np0.ignore_routes_with_linkdown = 0
net.ipv6.conf.enp2s0f0np0.ioam6_enabled = 0
net.ipv6.conf.enp2s0f0np0.ioam6_id = 65535
net.ipv6.conf.enp2s0f0np0.ioam6_id_wide = 4294967295
net.ipv6.conf.enp2s0f0np0.keep_addr_on_down = 0
net.ipv6.conf.enp2s0f0np0.max_addresses = 16
net.ipv6.conf.enp2s0f0np0.max_desync_factor = 600
net.ipv6.conf.enp2s0f0np0.mc_forwarding = 0
net.ipv6.conf.enp2s0f0np0.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.enp2s0f0np0.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.enp2s0f0np0.mtu = 1500
net.ipv6.conf.enp2s0f0np0.ndisc_evict_nocarrier = 1
net.ipv6.conf.enp2s0f0np0.ndisc_notify = 0
net.ipv6.conf.enp2s0f0np0.ndisc_tclass = 0
net.ipv6.conf.enp2s0f0np0.optimistic_dad = 0
net.ipv6.conf.enp2s0f0np0.proxy_ndp = 0
net.ipv6.conf.enp2s0f0np0.ra_defrtr_metric = 1024
net.ipv6.conf.enp2s0f0np0.ra_honor_pio_life = 0
net.ipv6.conf.enp2s0f0np0.regen_max_retry = 3
net.ipv6.conf.enp2s0f0np0.regen_min_advance = 2
net.ipv6.conf.enp2s0f0np0.router_probe_interval = 60
net.ipv6.conf.enp2s0f0np0.router_solicitation_delay = 1
net.ipv6.conf.enp2s0f0np0.router_solicitation_interval = 4
net.ipv6.conf.enp2s0f0np0.router_solicitation_max_interval = 3600
net.ipv6.conf.enp2s0f0np0.router_solicitations = -1
net.ipv6.conf.enp2s0f0np0.rpl_seg_enabled = 0
net.ipv6.conf.enp2s0f0np0.seg6_enabled = 0
net.ipv6.conf.enp2s0f0np0.seg6_require_hmac = 0
net.ipv6.conf.enp2s0f0np0.suppress_frag_ndisc = 1
net.ipv6.conf.enp2s0f0np0.temp_prefered_lft = 86400
net.ipv6.conf.enp2s0f0np0.temp_valid_lft = 604800
net.ipv6.conf.enp2s0f0np0.use_oif_addrs_only = 0
net.ipv6.conf.enp2s0f0np0.use_optimistic = 0
net.ipv6.conf.enp2s0f0np0.use_tempaddr = 0
net.ipv6.conf.enp2s0f1np1.accept_dad = 1
net.ipv6.conf.enp2s0f1np1.accept_ra = 1
net.ipv6.conf.enp2s0f1np1.accept_ra_defrtr = 1
net.ipv6.conf.enp2s0f1np1.accept_ra_from_local = 0
net.ipv6.conf.enp2s0f1np1.accept_ra_min_hop_limit = 1
net.ipv6.conf.enp2s0f1np1.accept_ra_min_lft = 0
net.ipv6.conf.enp2s0f1np1.accept_ra_mtu = 1
net.ipv6.conf.enp2s0f1np1.accept_ra_pinfo = 1
net.ipv6.conf.enp2s0f1np1.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.enp2s0f1np1.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.enp2s0f1np1.accept_ra_rtr_pref = 1
net.ipv6.conf.enp2s0f1np1.accept_redirects = 1
net.ipv6.conf.enp2s0f1np1.accept_source_route = 0
net.ipv6.conf.enp2s0f1np1.accept_untracked_na = 0
net.ipv6.conf.enp2s0f1np1.addr_gen_mode = 0
net.ipv6.conf.enp2s0f1np1.autoconf = 1
net.ipv6.conf.enp2s0f1np1.dad_transmits = 1
net.ipv6.conf.enp2s0f1np1.disable_ipv6 = 1
net.ipv6.conf.enp2s0f1np1.disable_policy = 0
net.ipv6.conf.enp2s0f1np1.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.enp2s0f1np1.drop_unsolicited_na = 0
net.ipv6.conf.enp2s0f1np1.enhanced_dad = 1
net.ipv6.conf.enp2s0f1np1.force_mld_version = 0
net.ipv6.conf.enp2s0f1np1.force_tllao = 0
net.ipv6.conf.enp2s0f1np1.forwarding = 0
net.ipv6.conf.enp2s0f1np1.hop_limit = 64
net.ipv6.conf.enp2s0f1np1.ignore_routes_with_linkdown = 0
net.ipv6.conf.enp2s0f1np1.ioam6_enabled = 0
net.ipv6.conf.enp2s0f1np1.ioam6_id = 65535
net.ipv6.conf.enp2s0f1np1.ioam6_id_wide = 4294967295
net.ipv6.conf.enp2s0f1np1.keep_addr_on_down = 0
net.ipv6.conf.enp2s0f1np1.max_addresses = 16
net.ipv6.conf.enp2s0f1np1.max_desync_factor = 600
net.ipv6.conf.enp2s0f1np1.mc_forwarding = 0
net.ipv6.conf.enp2s0f1np1.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.enp2s0f1np1.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.enp2s0f1np1.mtu = 1500
net.ipv6.conf.enp2s0f1np1.ndisc_evict_nocarrier = 1
net.ipv6.conf.enp2s0f1np1.ndisc_notify = 0
net.ipv6.conf.enp2s0f1np1.ndisc_tclass = 0
net.ipv6.conf.enp2s0f1np1.optimistic_dad = 0
net.ipv6.conf.enp2s0f1np1.proxy_ndp = 0
net.ipv6.conf.enp2s0f1np1.ra_defrtr_metric = 1024
net.ipv6.conf.enp2s0f1np1.ra_honor_pio_life = 0
net.ipv6.conf.enp2s0f1np1.regen_max_retry = 3
net.ipv6.conf.enp2s0f1np1.regen_min_advance = 2
net.ipv6.conf.enp2s0f1np1.router_probe_interval = 60
net.ipv6.conf.enp2s0f1np1.router_solicitation_delay = 1
net.ipv6.conf.enp2s0f1np1.router_solicitation_interval = 4
net.ipv6.conf.enp2s0f1np1.router_solicitation_max_interval = 3600
net.ipv6.conf.enp2s0f1np1.router_solicitations = -1
net.ipv6.conf.enp2s0f1np1.rpl_seg_enabled = 0
net.ipv6.conf.enp2s0f1np1.seg6_enabled = 0
net.ipv6.conf.enp2s0f1np1.seg6_require_hmac = 0
net.ipv6.conf.enp2s0f1np1.suppress_frag_ndisc = 1
net.ipv6.conf.enp2s0f1np1.temp_prefered_lft = 86400
net.ipv6.conf.enp2s0f1np1.temp_valid_lft = 604800
net.ipv6.conf.enp2s0f1np1.use_oif_addrs_only = 0
net.ipv6.conf.enp2s0f1np1.use_optimistic = 0
net.ipv6.conf.enp2s0f1np1.use_tempaddr = 0
net.ipv6.conf.enp87s0.accept_dad = 1
net.ipv6.conf.enp87s0.accept_ra = 0
net.ipv6.conf.enp87s0.accept_ra_defrtr = 1
net.ipv6.conf.enp87s0.accept_ra_from_local = 0
net.ipv6.conf.enp87s0.accept_ra_min_hop_limit = 1
net.ipv6.conf.enp87s0.accept_ra_min_lft = 0
net.ipv6.conf.enp87s0.accept_ra_mtu = 1
net.ipv6.conf.enp87s0.accept_ra_pinfo = 1
net.ipv6.conf.enp87s0.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.enp87s0.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.enp87s0.accept_ra_rtr_pref = 1
net.ipv6.conf.enp87s0.accept_redirects = 1
net.ipv6.conf.enp87s0.accept_source_route = 0
net.ipv6.conf.enp87s0.accept_untracked_na = 0
net.ipv6.conf.enp87s0.addr_gen_mode = 0
net.ipv6.conf.enp87s0.autoconf = 1
net.ipv6.conf.enp87s0.dad_transmits = 1
net.ipv6.conf.enp87s0.disable_ipv6 = 0
net.ipv6.conf.enp87s0.disable_policy = 0
net.ipv6.conf.enp87s0.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.enp87s0.drop_unsolicited_na = 0
net.ipv6.conf.enp87s0.enhanced_dad = 1
net.ipv6.conf.enp87s0.force_mld_version = 0
net.ipv6.conf.enp87s0.force_tllao = 0
net.ipv6.conf.enp87s0.forwarding = 0
net.ipv6.conf.enp87s0.hop_limit = 64
net.ipv6.conf.enp87s0.ignore_routes_with_linkdown = 0
net.ipv6.conf.enp87s0.ioam6_enabled = 0
net.ipv6.conf.enp87s0.ioam6_id = 65535
net.ipv6.conf.enp87s0.ioam6_id_wide = 4294967295
net.ipv6.conf.enp87s0.keep_addr_on_down = 0
net.ipv6.conf.enp87s0.max_addresses = 16
net.ipv6.conf.enp87s0.max_desync_factor = 600
net.ipv6.conf.enp87s0.mc_forwarding = 0
net.ipv6.conf.enp87s0.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.enp87s0.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.enp87s0.mtu = 1500
net.ipv6.conf.enp87s0.ndisc_evict_nocarrier = 1
net.ipv6.conf.enp87s0.ndisc_notify = 0
net.ipv6.conf.enp87s0.ndisc_tclass = 0
net.ipv6.conf.enp87s0.optimistic_dad = 0
net.ipv6.conf.enp87s0.proxy_ndp = 0
net.ipv6.conf.enp87s0.ra_defrtr_metric = 1024
net.ipv6.conf.enp87s0.ra_honor_pio_life = 0
net.ipv6.conf.enp87s0.regen_max_retry = 3
net.ipv6.conf.enp87s0.regen_min_advance = 2
net.ipv6.conf.enp87s0.router_probe_interval = 60
net.ipv6.conf.enp87s0.router_solicitation_delay = 1
net.ipv6.conf.enp87s0.router_solicitation_interval = 4
net.ipv6.conf.enp87s0.router_solicitation_max_interval = 3600
net.ipv6.conf.enp87s0.router_solicitations = -1
net.ipv6.conf.enp87s0.rpl_seg_enabled = 0
net.ipv6.conf.enp87s0.seg6_enabled = 0
net.ipv6.conf.enp87s0.seg6_require_hmac = 0
net.ipv6.conf.enp87s0.suppress_frag_ndisc = 1
net.ipv6.conf.enp87s0.temp_prefered_lft = 86400
net.ipv6.conf.enp87s0.temp_valid_lft = 604800
net.ipv6.conf.enp87s0.use_oif_addrs_only = 0
net.ipv6.conf.enp87s0.use_optimistic = 0
net.ipv6.conf.enp87s0.use_tempaddr = 0
net.ipv6.conf.enp88s0.accept_dad = 1
net.ipv6.conf.enp88s0.accept_ra = 0
net.ipv6.conf.enp88s0.accept_ra_defrtr = 1
net.ipv6.conf.enp88s0.accept_ra_from_local = 0
net.ipv6.conf.enp88s0.accept_ra_min_hop_limit = 1
net.ipv6.conf.enp88s0.accept_ra_min_lft = 0
net.ipv6.conf.enp88s0.accept_ra_mtu = 1
net.ipv6.conf.enp88s0.accept_ra_pinfo = 1
net.ipv6.conf.enp88s0.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.enp88s0.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.enp88s0.accept_ra_rtr_pref = 1
net.ipv6.conf.enp88s0.accept_redirects = 1
net.ipv6.conf.enp88s0.accept_source_route = 0
net.ipv6.conf.enp88s0.accept_untracked_na = 0
net.ipv6.conf.enp88s0.addr_gen_mode = 0
net.ipv6.conf.enp88s0.autoconf = 1
net.ipv6.conf.enp88s0.dad_transmits = 1
net.ipv6.conf.enp88s0.disable_ipv6 = 0
net.ipv6.conf.enp88s0.disable_policy = 0
net.ipv6.conf.enp88s0.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.enp88s0.drop_unsolicited_na = 0
net.ipv6.conf.enp88s0.enhanced_dad = 1
net.ipv6.conf.enp88s0.force_mld_version = 0
net.ipv6.conf.enp88s0.force_tllao = 0
net.ipv6.conf.enp88s0.forwarding = 0
net.ipv6.conf.enp88s0.hop_limit = 64
net.ipv6.conf.enp88s0.ignore_routes_with_linkdown = 0
net.ipv6.conf.enp88s0.ioam6_enabled = 0
net.ipv6.conf.enp88s0.ioam6_id = 65535
net.ipv6.conf.enp88s0.ioam6_id_wide = 4294967295
net.ipv6.conf.enp88s0.keep_addr_on_down = 0
net.ipv6.conf.enp88s0.max_addresses = 16
net.ipv6.conf.enp88s0.max_desync_factor = 600
net.ipv6.conf.enp88s0.mc_forwarding = 0
net.ipv6.conf.enp88s0.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.enp88s0.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.enp88s0.mtu = 1500
net.ipv6.conf.enp88s0.ndisc_evict_nocarrier = 1
net.ipv6.conf.enp88s0.ndisc_notify = 0
net.ipv6.conf.enp88s0.ndisc_tclass = 0
net.ipv6.conf.enp88s0.optimistic_dad = 0
net.ipv6.conf.enp88s0.proxy_ndp = 0
net.ipv6.conf.enp88s0.ra_defrtr_metric = 1024
net.ipv6.conf.enp88s0.ra_honor_pio_life = 0
net.ipv6.conf.enp88s0.regen_max_retry = 3
net.ipv6.conf.enp88s0.regen_min_advance = 2
net.ipv6.conf.enp88s0.router_probe_interval = 60
net.ipv6.conf.enp88s0.router_solicitation_delay = 1
net.ipv6.conf.enp88s0.router_solicitation_interval = 4
net.ipv6.conf.enp88s0.router_solicitation_max_interval = 3600
net.ipv6.conf.enp88s0.router_solicitations = -1
net.ipv6.conf.enp88s0.rpl_seg_enabled = 0
net.ipv6.conf.enp88s0.seg6_enabled = 0
net.ipv6.conf.enp88s0.seg6_require_hmac = 0
net.ipv6.conf.enp88s0.suppress_frag_ndisc = 1
net.ipv6.conf.enp88s0.temp_prefered_lft = 86400
net.ipv6.conf.enp88s0.temp_valid_lft = 604800
net.ipv6.conf.enp88s0.use_oif_addrs_only = 0
net.ipv6.conf.enp88s0.use_optimistic = 0
net.ipv6.conf.enp88s0.use_tempaddr = 0
net.ipv6.conf.lo.accept_dad = -1
net.ipv6.conf.lo.accept_ra = 1
net.ipv6.conf.lo.accept_ra_defrtr = 1
net.ipv6.conf.lo.accept_ra_from_local = 0
net.ipv6.conf.lo.accept_ra_min_hop_limit = 1
net.ipv6.conf.lo.accept_ra_min_lft = 0
net.ipv6.conf.lo.accept_ra_mtu = 1
net.ipv6.conf.lo.accept_ra_pinfo = 1
net.ipv6.conf.lo.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.lo.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.lo.accept_ra_rtr_pref = 1
net.ipv6.conf.lo.accept_redirects = 1
net.ipv6.conf.lo.accept_source_route = 0
net.ipv6.conf.lo.accept_untracked_na = 0
net.ipv6.conf.lo.addr_gen_mode = 0
net.ipv6.conf.lo.autoconf = 1
net.ipv6.conf.lo.dad_transmits = 1
net.ipv6.conf.lo.disable_ipv6 = 1
net.ipv6.conf.lo.disable_policy = 0
net.ipv6.conf.lo.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.lo.drop_unsolicited_na = 0
net.ipv6.conf.lo.enhanced_dad = 1
net.ipv6.conf.lo.force_mld_version = 0
net.ipv6.conf.lo.force_tllao = 0
net.ipv6.conf.lo.forwarding = 0
net.ipv6.conf.lo.hop_limit = 64
net.ipv6.conf.lo.ignore_routes_with_linkdown = 0
net.ipv6.conf.lo.ioam6_enabled = 0
net.ipv6.conf.lo.ioam6_id = 65535
net.ipv6.conf.lo.ioam6_id_wide = 4294967295
net.ipv6.conf.lo.keep_addr_on_down = 0
net.ipv6.conf.lo.max_addresses = 16
net.ipv6.conf.lo.max_desync_factor = 600
net.ipv6.conf.lo.mc_forwarding = 0
net.ipv6.conf.lo.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.lo.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.lo.mtu = 65536
net.ipv6.conf.lo.ndisc_evict_nocarrier = 1
net.ipv6.conf.lo.ndisc_notify = 0
net.ipv6.conf.lo.ndisc_tclass = 0
net.ipv6.conf.lo.optimistic_dad = 0
net.ipv6.conf.lo.proxy_ndp = 0
net.ipv6.conf.lo.ra_defrtr_metric = 1024
net.ipv6.conf.lo.ra_honor_pio_life = 0
net.ipv6.conf.lo.regen_max_retry = 3
net.ipv6.conf.lo.regen_min_advance = 2
net.ipv6.conf.lo.router_probe_interval = 60
net.ipv6.conf.lo.router_solicitation_delay = 1
net.ipv6.conf.lo.router_solicitation_interval = 4
net.ipv6.conf.lo.router_solicitation_max_interval = 3600
net.ipv6.conf.lo.router_solicitations = -1
net.ipv6.conf.lo.rpl_seg_enabled = 0
net.ipv6.conf.lo.seg6_enabled = 0
net.ipv6.conf.lo.seg6_require_hmac = 0
net.ipv6.conf.lo.suppress_frag_ndisc = 1
net.ipv6.conf.lo.temp_prefered_lft = 86400
net.ipv6.conf.lo.temp_valid_lft = 604800
net.ipv6.conf.lo.use_oif_addrs_only = 0
net.ipv6.conf.lo.use_optimistic = 0
net.ipv6.conf.lo.use_tempaddr = -1
net.ipv6.conf.wlp89s0.accept_dad = 1
net.ipv6.conf.wlp89s0.accept_ra = 1
net.ipv6.conf.wlp89s0.accept_ra_defrtr = 1
net.ipv6.conf.wlp89s0.accept_ra_from_local = 0
net.ipv6.conf.wlp89s0.accept_ra_min_hop_limit = 1
net.ipv6.conf.wlp89s0.accept_ra_min_lft = 0
net.ipv6.conf.wlp89s0.accept_ra_mtu = 1
net.ipv6.conf.wlp89s0.accept_ra_pinfo = 1
net.ipv6.conf.wlp89s0.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.wlp89s0.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.wlp89s0.accept_ra_rtr_pref = 1
net.ipv6.conf.wlp89s0.accept_redirects = 1
net.ipv6.conf.wlp89s0.accept_source_route = 0
net.ipv6.conf.wlp89s0.accept_untracked_na = 0
net.ipv6.conf.wlp89s0.addr_gen_mode = 0
net.ipv6.conf.wlp89s0.autoconf = 1
net.ipv6.conf.wlp89s0.dad_transmits = 1
net.ipv6.conf.wlp89s0.disable_ipv6 = 1
net.ipv6.conf.wlp89s0.disable_policy = 0
net.ipv6.conf.wlp89s0.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.wlp89s0.drop_unsolicited_na = 0
net.ipv6.conf.wlp89s0.enhanced_dad = 1
net.ipv6.conf.wlp89s0.force_mld_version = 0
net.ipv6.conf.wlp89s0.force_tllao = 0
net.ipv6.conf.wlp89s0.forwarding = 0
net.ipv6.conf.wlp89s0.hop_limit = 64
net.ipv6.conf.wlp89s0.ignore_routes_with_linkdown = 0
net.ipv6.conf.wlp89s0.ioam6_enabled = 0
net.ipv6.conf.wlp89s0.ioam6_id = 65535
net.ipv6.conf.wlp89s0.ioam6_id_wide = 4294967295
net.ipv6.conf.wlp89s0.keep_addr_on_down = 0
net.ipv6.conf.wlp89s0.max_addresses = 16
net.ipv6.conf.wlp89s0.max_desync_factor = 600
net.ipv6.conf.wlp89s0.mc_forwarding = 0
net.ipv6.conf.wlp89s0.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.wlp89s0.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.wlp89s0.mtu = 1500
net.ipv6.conf.wlp89s0.ndisc_evict_nocarrier = 1
net.ipv6.conf.wlp89s0.ndisc_notify = 0
net.ipv6.conf.wlp89s0.ndisc_tclass = 0
net.ipv6.conf.wlp89s0.optimistic_dad = 0
net.ipv6.conf.wlp89s0.proxy_ndp = 0
net.ipv6.conf.wlp89s0.ra_defrtr_metric = 1024
net.ipv6.conf.wlp89s0.ra_honor_pio_life = 0
net.ipv6.conf.wlp89s0.regen_max_retry = 3
net.ipv6.conf.wlp89s0.regen_min_advance = 2
net.ipv6.conf.wlp89s0.router_probe_interval = 60
net.ipv6.conf.wlp89s0.router_solicitation_delay = 1
net.ipv6.conf.wlp89s0.router_solicitation_interval = 4
net.ipv6.conf.wlp89s0.router_solicitation_max_interval = 3600
net.ipv6.conf.wlp89s0.router_solicitations = -1
net.ipv6.conf.wlp89s0.rpl_seg_enabled = 0
net.ipv6.conf.wlp89s0.seg6_enabled = 0
net.ipv6.conf.wlp89s0.seg6_require_hmac = 0
net.ipv6.conf.wlp89s0.suppress_frag_ndisc = 1
net.ipv6.conf.wlp89s0.temp_prefered_lft = 86400
net.ipv6.conf.wlp89s0.temp_valid_lft = 604800
net.ipv6.conf.wlp89s0.use_oif_addrs_only = 0
net.ipv6.conf.wlp89s0.use_optimistic = 0
net.ipv6.conf.wlp89s0.use_tempaddr = 0
net.ipv6.fib_multipath_hash_fields = 7
net.ipv6.fib_multipath_hash_policy = 0
net.ipv6.fib_notify_on_flag_change = 0
net.ipv6.flowlabel_consistency = 1
net.ipv6.flowlabel_reflect = 0
net.ipv6.flowlabel_state_ranges = 0
net.ipv6.fwmark_reflect = 0
net.ipv6.icmp.echo_ignore_all = 0
net.ipv6.icmp.echo_ignore_anycast = 0
net.ipv6.icmp.echo_ignore_multicast = 0
net.ipv6.icmp.error_anycast_as_unicast = 0
net.ipv6.icmp.ratelimit = 1000
net.ipv6.icmp.ratemask = 0-1,3-127
net.ipv6.idgen_delay = 1
net.ipv6.idgen_retries = 3
net.ipv6.ioam6_id = 16777215
net.ipv6.ioam6_id_wide = 72057594037927935
net.ipv6.ip6frag_high_thresh = 4194304
net.ipv6.ip6frag_low_thresh = 3145728
net.ipv6.ip6frag_secret_interval = 0
net.ipv6.ip6frag_time = 60
net.ipv6.ip_nonlocal_bind = 0
net.ipv6.max_dst_opts_length = 2147483647
net.ipv6.max_dst_opts_number = 8
net.ipv6.max_hbh_length = 2147483647
net.ipv6.max_hbh_opts_number = 8
net.ipv6.mld_max_msf = 64
net.ipv6.mld_qrv = 2
net.ipv6.neigh.default.anycast_delay = 99
net.ipv6.neigh.default.app_solicit = 0
net.ipv6.neigh.default.base_reachable_time_ms = 30000
net.ipv6.neigh.default.delay_first_probe_time = 5
net.ipv6.neigh.default.gc_interval = 30
net.ipv6.neigh.default.gc_stale_time = 60
net.ipv6.neigh.default.gc_thresh1 = 128
net.ipv6.neigh.default.gc_thresh2 = 512
net.ipv6.neigh.default.gc_thresh3 = 1024
net.ipv6.neigh.default.interval_probe_time_ms = 5000
net.ipv6.neigh.default.locktime = 0
net.ipv6.neigh.default.mcast_resolicit = 0
net.ipv6.neigh.default.mcast_solicit = 3
net.ipv6.neigh.default.proxy_delay = 79
net.ipv6.neigh.default.proxy_qlen = 64
net.ipv6.neigh.default.retrans_time_ms = 1000
net.ipv6.neigh.default.ucast_solicit = 3
net.ipv6.neigh.default.unres_qlen = 101
net.ipv6.neigh.default.unres_qlen_bytes = 212992
net.ipv6.neigh.enp2s0f0np0.anycast_delay = 99
net.ipv6.neigh.enp2s0f0np0.app_solicit = 0
net.ipv6.neigh.enp2s0f0np0.base_reachable_time_ms = 30000
net.ipv6.neigh.enp2s0f0np0.delay_first_probe_time = 5
net.ipv6.neigh.enp2s0f0np0.gc_stale_time = 60
net.ipv6.neigh.enp2s0f0np0.interval_probe_time_ms = 5000
net.ipv6.neigh.enp2s0f0np0.locktime = 0
net.ipv6.neigh.enp2s0f0np0.mcast_resolicit = 0
net.ipv6.neigh.enp2s0f0np0.mcast_solicit = 3
net.ipv6.neigh.enp2s0f0np0.proxy_delay = 79
net.ipv6.neigh.enp2s0f0np0.proxy_qlen = 64
net.ipv6.neigh.enp2s0f0np0.retrans_time_ms = 1000
net.ipv6.neigh.enp2s0f0np0.ucast_solicit = 3
net.ipv6.neigh.enp2s0f0np0.unres_qlen = 101
net.ipv6.neigh.enp2s0f0np0.unres_qlen_bytes = 212992
net.ipv6.neigh.enp2s0f1np1.anycast_delay = 99
net.ipv6.neigh.enp2s0f1np1.app_solicit = 0
net.ipv6.neigh.enp2s0f1np1.base_reachable_time_ms = 30000
net.ipv6.neigh.enp2s0f1np1.delay_first_probe_time = 5
net.ipv6.neigh.enp2s0f1np1.gc_stale_time = 60
net.ipv6.neigh.enp2s0f1np1.interval_probe_time_ms = 5000
net.ipv6.neigh.enp2s0f1np1.locktime = 0
net.ipv6.neigh.enp2s0f1np1.mcast_resolicit = 0
net.ipv6.neigh.enp2s0f1np1.mcast_solicit = 3
net.ipv6.neigh.enp2s0f1np1.proxy_delay = 79
net.ipv6.neigh.enp2s0f1np1.proxy_qlen = 64
net.ipv6.neigh.enp2s0f1np1.retrans_time_ms = 1000
net.ipv6.neigh.enp2s0f1np1.ucast_solicit = 3
net.ipv6.neigh.enp2s0f1np1.unres_qlen = 101
net.ipv6.neigh.enp2s0f1np1.unres_qlen_bytes = 212992
net.ipv6.neigh.enp87s0.anycast_delay = 99
net.ipv6.neigh.enp87s0.app_solicit = 0
net.ipv6.neigh.enp87s0.base_reachable_time_ms = 30000
net.ipv6.neigh.enp87s0.delay_first_probe_time = 5
net.ipv6.neigh.enp87s0.gc_stale_time = 60
net.ipv6.neigh.enp87s0.interval_probe_time_ms = 5000
net.ipv6.neigh.enp87s0.locktime = 0
net.ipv6.neigh.enp87s0.mcast_resolicit = 0
net.ipv6.neigh.enp87s0.mcast_solicit = 3
net.ipv6.neigh.enp87s0.proxy_delay = 79
net.ipv6.neigh.enp87s0.proxy_qlen = 64
net.ipv6.neigh.enp87s0.retrans_time_ms = 1000
net.ipv6.neigh.enp87s0.ucast_solicit = 3
net.ipv6.neigh.enp87s0.unres_qlen = 101
net.ipv6.neigh.enp87s0.unres_qlen_bytes = 212992
net.ipv6.neigh.enp88s0.anycast_delay = 99
net.ipv6.neigh.enp88s0.app_solicit = 0
net.ipv6.neigh.enp88s0.base_reachable_time_ms = 30000
net.ipv6.neigh.enp88s0.delay_first_probe_time = 5
net.ipv6.neigh.enp88s0.gc_stale_time = 60
net.ipv6.neigh.enp88s0.interval_probe_time_ms = 5000
net.ipv6.neigh.enp88s0.locktime = 0
net.ipv6.neigh.enp88s0.mcast_resolicit = 0
net.ipv6.neigh.enp88s0.mcast_solicit = 3
net.ipv6.neigh.enp88s0.proxy_delay = 79
net.ipv6.neigh.enp88s0.proxy_qlen = 64
net.ipv6.neigh.enp88s0.retrans_time_ms = 1000
net.ipv6.neigh.enp88s0.ucast_solicit = 3
net.ipv6.neigh.enp88s0.unres_qlen = 101
net.ipv6.neigh.enp88s0.unres_qlen_bytes = 212992
net.ipv6.neigh.lo.anycast_delay = 99
net.ipv6.neigh.lo.app_solicit = 0
net.ipv6.neigh.lo.base_reachable_time_ms = 30000
net.ipv6.neigh.lo.delay_first_probe_time = 5
net.ipv6.neigh.lo.gc_stale_time = 60
net.ipv6.neigh.lo.interval_probe_time_ms = 5000
net.ipv6.neigh.lo.locktime = 0
net.ipv6.neigh.lo.mcast_resolicit = 0
net.ipv6.neigh.lo.mcast_solicit = 3
net.ipv6.neigh.lo.proxy_delay = 79
net.ipv6.neigh.lo.proxy_qlen = 64
net.ipv6.neigh.lo.retrans_time_ms = 1000
net.ipv6.neigh.lo.ucast_solicit = 3
net.ipv6.neigh.lo.unres_qlen = 101
net.ipv6.neigh.lo.unres_qlen_bytes = 212992
net.ipv6.neigh.wlp89s0.anycast_delay = 99
net.ipv6.neigh.wlp89s0.app_solicit = 0
net.ipv6.neigh.wlp89s0.base_reachable_time_ms = 30000
net.ipv6.neigh.wlp89s0.delay_first_probe_time = 5
net.ipv6.neigh.wlp89s0.gc_stale_time = 60
net.ipv6.neigh.wlp89s0.interval_probe_time_ms = 5000
net.ipv6.neigh.wlp89s0.locktime = 0
net.ipv6.neigh.wlp89s0.mcast_resolicit = 0
net.ipv6.neigh.wlp89s0.mcast_solicit = 3
net.ipv6.neigh.wlp89s0.proxy_delay = 79
net.ipv6.neigh.wlp89s0.proxy_qlen = 64
net.ipv6.neigh.wlp89s0.retrans_time_ms = 1000
net.ipv6.neigh.wlp89s0.ucast_solicit = 3
net.ipv6.neigh.wlp89s0.unres_qlen = 101
net.ipv6.neigh.wlp89s0.unres_qlen_bytes = 212992
net.ipv6.route.gc_elasticity = 9
net.ipv6.route.gc_interval = 30
net.ipv6.route.gc_min_interval = 0
net.ipv6.route.gc_min_interval_ms = 500
net.ipv6.route.gc_thresh = 1024
net.ipv6.route.gc_timeout = 60
net.ipv6.route.max_size = 2147483647
net.ipv6.route.min_adv_mss = 1220
net.ipv6.route.mtu_expires = 600
net.ipv6.route.skip_notify_on_dev_down = 0
net.ipv6.seg6_flowlabel = 0
net.ipv6.xfrm6_gc_thresh = 32768
net.mptcp.add_addr_timeout = 120
net.mptcp.allow_join_initial_addr_port = 1
net.mptcp.available_schedulers = default
net.mptcp.checksum_enabled = 0
net.mptcp.close_timeout = 60
net.mptcp.enabled = 1
net.mptcp.pm_type = 0
net.mptcp.scheduler = default
net.mptcp.stale_loss_cnt = 4
net.netfilter.nf_conntrack_acct = 0
net.netfilter.nf_conntrack_buckets = 262144
net.netfilter.nf_conntrack_checksum = 1
net.netfilter.nf_conntrack_count = 0
net.netfilter.nf_conntrack_dccp_loose = 1
net.netfilter.nf_conntrack_dccp_timeout_closereq = 64
net.netfilter.nf_conntrack_dccp_timeout_closing = 64
net.netfilter.nf_conntrack_dccp_timeout_open = 43200
net.netfilter.nf_conntrack_dccp_timeout_partopen = 480
net.netfilter.nf_conntrack_dccp_timeout_request = 240
net.netfilter.nf_conntrack_dccp_timeout_respond = 480
net.netfilter.nf_conntrack_dccp_timeout_timewait = 240
net.netfilter.nf_conntrack_events = 2
net.netfilter.nf_conntrack_expect_max = 4096
net.netfilter.nf_conntrack_frag6_high_thresh = 4194304
net.netfilter.nf_conntrack_frag6_low_thresh = 3145728
net.netfilter.nf_conntrack_frag6_timeout = 60
net.netfilter.nf_conntrack_generic_timeout = 600
net.netfilter.nf_conntrack_gre_timeout = 30
net.netfilter.nf_conntrack_gre_timeout_stream = 180
net.netfilter.nf_conntrack_icmp_timeout = 30
net.netfilter.nf_conntrack_icmpv6_timeout = 30
net.netfilter.nf_conntrack_log_invalid = 0
net.netfilter.nf_conntrack_max = 262144
net.netfilter.nf_conntrack_sctp_timeout_closed = 10
net.netfilter.nf_conntrack_sctp_timeout_cookie_echoed = 3
net.netfilter.nf_conntrack_sctp_timeout_cookie_wait = 3
net.netfilter.nf_conntrack_sctp_timeout_established = 210
net.netfilter.nf_conntrack_sctp_timeout_heartbeat_sent = 30
net.netfilter.nf_conntrack_sctp_timeout_shutdown_ack_sent = 3
net.netfilter.nf_conntrack_sctp_timeout_shutdown_recd = 3
net.netfilter.nf_conntrack_sctp_timeout_shutdown_sent = 3
net.netfilter.nf_conntrack_tcp_be_liberal = 0
net.netfilter.nf_conntrack_tcp_ignore_invalid_rst = 0
net.netfilter.nf_conntrack_tcp_loose = 1
net.netfilter.nf_conntrack_tcp_max_retrans = 3
net.netfilter.nf_conntrack_tcp_timeout_close = 10
net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60
net.netfilter.nf_conntrack_tcp_timeout_established = 432000
net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 120
net.netfilter.nf_conntrack_tcp_timeout_last_ack = 30
net.netfilter.nf_conntrack_tcp_timeout_max_retrans = 300
net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 60
net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 120
net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120
net.netfilter.nf_conntrack_tcp_timeout_unacknowledged = 300
net.netfilter.nf_conntrack_timestamp = 0
net.netfilter.nf_conntrack_udp_timeout = 30
net.netfilter.nf_conntrack_udp_timeout_stream = 120
net.netfilter.nf_flowtable_tcp_timeout = 30
net.netfilter.nf_flowtable_udp_timeout = 30
net.netfilter.nf_hooks_lwtunnel = 0
net.netfilter.nf_log.0 = NONE
net.netfilter.nf_log.1 = NONE
net.netfilter.nf_log.10 = nf_log_ipv6
net.netfilter.nf_log.2 = nf_log_ipv4
net.netfilter.nf_log.3 = nf_log_arp
net.netfilter.nf_log.4 = NONE
net.netfilter.nf_log.5 = nf_log_netdev
net.netfilter.nf_log.6 = NONE
net.netfilter.nf_log.7 = nf_log_bridge
net.netfilter.nf_log.8 = NONE
net.netfilter.nf_log.9 = NONE
net.netfilter.nf_log_all_netns = 0
net.nf_conntrack_max = 262144
net.unix.max_dgram_qlen = 512
user.max_cgroup_namespaces = 62828
user.max_fanotify_groups = 128
user.max_fanotify_marks = 116974
user.max_inotify_instances = 1024
user.max_inotify_watches = 524288
user.max_ipc_namespaces = 62828
user.max_mnt_namespaces = 62828
user.max_net_namespaces = 62828
user.max_pid_namespaces = 62828
user.max_time_namespaces = 62828
user.max_user_namespaces = 62828
user.max_uts_namespaces = 62828
vm.admin_reserve_kbytes = 8192
vm.compact_unevictable_allowed = 1
vm.compaction_proactiveness = 20
vm.dirty_background_bytes = 0
vm.dirty_background_ratio = 10
vm.dirty_bytes = 0
vm.dirty_expire_centisecs = 3000
vm.dirty_ratio = 20
vm.dirty_writeback_centisecs = 500
vm.dirtytime_expire_seconds = 43200
vm.extfrag_threshold = 500
vm.hugetlb_optimize_vmemmap = 0
vm.hugetlb_shm_group = 0
vm.laptop_mode = 0
vm.legacy_va_layout = 0
vm.lowmem_reserve_ratio = 256	256	32	0	0
vm.max_map_count = 1048576
vm.memfd_noexec = 0
vm.memory_failure_early_kill = 0
vm.memory_failure_recovery = 1
vm.min_free_kbytes = 67584
vm.min_slab_ratio = 5
vm.min_unmapped_ratio = 1
vm.mmap_min_addr = 65536
vm.mmap_rnd_bits = 32
vm.mmap_rnd_compat_bits = 16
vm.nr_hugepages = 0
vm.nr_hugepages_mempolicy = 0
vm.nr_overcommit_hugepages = 0
vm.numa_stat = 1
vm.numa_zonelist_order = Node
vm.oom_dump_tasks = 1
vm.oom_kill_allocating_task = 0
vm.overcommit_kbytes = 0
vm.overcommit_memory = 0
vm.overcommit_ratio = 50
vm.page-cluster = 3
vm.page_lock_unfairness = 5
vm.panic_on_oom = 0
vm.percpu_pagelist_high_fraction = 0
vm.stat_interval = 1
vm.swappiness = 60
vm.user_reserve_kbytes = 131072
vm.vfs_cache_pressure = 100
vm.watermark_boost_factor = 15000
vm.watermark_scale_factor = 10
vm.zone_reclaim_mode = 0

Here it is on the client:

abi.vsyscall32 = 1
debug.exception-trace = 1
debug.kprobes-optimization = 1
dev.hpet.max-user-freq = 64
dev.mac_hid.mouse_button2_keycode = 97
dev.mac_hid.mouse_button3_keycode = 100
dev.mac_hid.mouse_button_emulation = 0
dev.scsi.logging_level = 0
dev.tty.ldisc_autoload = 1
dev.tty.legacy_tiocsti = 0
fs.aio-max-nr = 65536
fs.aio-nr = 32
fs.binfmt_misc.status = enabled
fs.dentry-state = 57221	42929	45	0	7718	0
fs.dir-notify-enable = 1
fs.epoll.max_user_watches = 3624002
fs.fanotify.max_queued_events = 16384
fs.fanotify.max_user_groups = 128
fs.fanotify.max_user_marks = 130236
fs.file-max = 9223372036854775807
fs.file-nr = 4448	0	9223372036854775807
fs.inode-nr = 49502	588
fs.inode-state = 49502	588	0	0	0	0	0
fs.inotify.max_queued_events = 16384
fs.inotify.max_user_instances = 1024
fs.inotify.max_user_watches = 524288
fs.lease-break-time = 45
fs.leases-enable = 1
fs.mount-max = 100000
fs.mqueue.msg_default = 10
fs.mqueue.msg_max = 10
fs.mqueue.msgsize_default = 8192
fs.mqueue.msgsize_max = 8192
fs.mqueue.queues_max = 256
fs.nfs.nlm_grace_period = 0
fs.nfs.nlm_tcpport = 0
fs.nfs.nlm_timeout = 10
fs.nfs.nlm_udpport = 0
fs.nfs.nsm_local_state = 3
fs.nfs.nsm_use_hostnames = 0
fs.nr_open = 1073741816
fs.overflowgid = 65534
fs.overflowuid = 65534
fs.pipe-max-size = 1048576
fs.pipe-user-pages-hard = 0
fs.pipe-user-pages-soft = 16384
fs.protected_fifos = 1
fs.protected_hardlinks = 1
fs.protected_regular = 1
fs.protected_symlinks = 1
fs.quota.allocated_dquots = 0
fs.quota.cache_hits = 0
fs.quota.drops = 0
fs.quota.free_dquots = 0
fs.quota.lookups = 0
fs.quota.reads = 0
fs.quota.syncs = 0
fs.quota.writes = 0
fs.suid_dumpable = 2
fs.verity.require_signatures = 0
kernel.acct = 4	2	30
kernel.acpi_video_flags = 0
kernel.arch = x86_64
kernel.auto_msgmni = 0
kernel.bootloader_type = 33
kernel.bootloader_version = 1
kernel.bpf_stats_enabled = 0
kernel.cad_pid = 1
kernel.cap_last_cap = 40
kernel.core_file_note_size_limit = 4194304
kernel.core_pattern = |/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %h
kernel.core_pipe_limit = 16
kernel.core_uses_pid = 1
kernel.ctrl-alt-del = 0
kernel.dmesg_restrict = 1
kernel.domainname = (none)
kernel.ftrace_dump_on_oops = 0
kernel.ftrace_enabled = 1
kernel.hardlockup_all_cpu_backtrace = 0
kernel.hardlockup_panic = 0
kernel.hostname = tennessine
kernel.hung_task_all_cpu_backtrace = 0
kernel.hung_task_check_count = 4194304
kernel.hung_task_check_interval_secs = 0
kernel.hung_task_panic = 0
kernel.hung_task_timeout_secs = 120
kernel.hung_task_warnings = 10
kernel.io_delay_type = 0
kernel.io_uring_disabled = 0
kernel.io_uring_group = -1
kernel.kexec_load_disabled = 0
kernel.kexec_load_limit_panic = -1
kernel.kexec_load_limit_reboot = -1
kernel.keys.gc_delay = 300
kernel.keys.maxbytes = 20000
kernel.keys.maxkeys = 200
kernel.keys.persistent_keyring_expiry = 259200
kernel.keys.root_maxbytes = 25000000
kernel.keys.root_maxkeys = 1000000
kernel.kptr_restrict = 0
kernel.max_lock_depth = 1024
kernel.max_rcu_stall_to_panic = 0
kernel.modprobe = /sbin/modprobe
kernel.modules_disabled = 0
kernel.msg_next_id = -1
kernel.msgmax = 8192
kernel.msgmnb = 16384
kernel.msgmni = 32000
kernel.ngroups_max = 65536
kernel.nmi_watchdog = 1
kernel.ns_last_pid = 9914
kernel.numa_balancing = 1
kernel.numa_balancing_promote_rate_limit_MBps = 65536
kernel.oops_all_cpu_backtrace = 0
kernel.oops_limit = 10000
kernel.osrelease = 6.10.1-arch1-1
kernel.ostype = Linux
kernel.overflowgid = 65534
kernel.overflowuid = 65534
kernel.panic = 0
kernel.panic_on_io_nmi = 0
kernel.panic_on_oops = 0
kernel.panic_on_rcu_stall = 0
kernel.panic_on_unrecovered_nmi = 0
kernel.panic_on_warn = 0
kernel.panic_print = 0
kernel.perf_cpu_time_max_percent = 25
kernel.perf_event_max_contexts_per_stack = 8
kernel.perf_event_max_sample_rate = 100000
kernel.perf_event_max_stack = 127
kernel.perf_event_mlock_kb = 516
kernel.perf_event_paranoid = 2
kernel.pid_max = 4194304
kernel.poweroff_cmd = /sbin/poweroff
kernel.print-fatal-signals = 0
kernel.printk = 3	4	1	3
kernel.printk_delay = 0
kernel.printk_devkmsg = on
kernel.printk_ratelimit = 5
kernel.printk_ratelimit_burst = 10
kernel.pty.max = 4096
kernel.pty.nr = 18
kernel.pty.reserve = 1024
kernel.random.boot_id = 57b3c7bf-872f-46ce-b8c6-6ccf1911b142
kernel.random.entropy_avail = 256
kernel.random.poolsize = 256
kernel.random.urandom_min_reseed_secs = 60
kernel.random.uuid = 146b8c2f-0d99-4d61-ba86-6a8de92ed7d5
kernel.random.write_wakeup_threshold = 256
kernel.randomize_va_space = 2
kernel.real-root-dev = 0
kernel.sched_autogroup_enabled = 1
kernel.sched_cfs_bandwidth_slice_us = 5000
kernel.sched_deadline_period_max_us = 4194304
kernel.sched_deadline_period_min_us = 100
kernel.sched_rr_timeslice_ms = 100
kernel.sched_rt_period_us = 1000000
kernel.sched_rt_runtime_us = 950000
kernel.sched_schedstats = 0
kernel.sched_util_clamp_max = 1024
kernel.sched_util_clamp_min = 1024
kernel.sched_util_clamp_min_rt_default = 1024
kernel.seccomp.actions_avail = kill_process kill_thread trap errno user_notif trace log allow
kernel.seccomp.actions_logged = kill_process kill_thread trap errno user_notif trace log
kernel.sem = 32000	1024000000	500	32000
kernel.sem_next_id = -1
kernel.shm_next_id = -1
kernel.shm_rmid_forced = 0
kernel.shmall = 18446744073692774399
kernel.shmmax = 18446744073692774399
kernel.shmmni = 4096
kernel.soft_watchdog = 1
kernel.softlockup_all_cpu_backtrace = 0
kernel.softlockup_panic = 0
kernel.split_lock_mitigate = 1
kernel.stack_tracer_enabled = 0
kernel.sysctl_writes_strict = 1
kernel.sysrq = 16
kernel.tainted = 0
kernel.task_delayacct = 0
kernel.threads-max = 127185
kernel.timer_migration = 1
kernel.traceoff_on_warning = 0
kernel.tracepoint_printk = 0
kernel.unknown_nmi_panic = 0
kernel.unprivileged_bpf_disabled = 2
kernel.unprivileged_userns_clone = 1
kernel.user_events_max = 32768
kernel.usermodehelper.bset = 4294967295	511
kernel.usermodehelper.inheritable = 4294967295	511
kernel.version = #1 SMP PREEMPT_DYNAMIC Wed, 24 Jul 2024 22:25:43 +0000
kernel.warn_limit = 0
kernel.watchdog = 1
kernel.watchdog_cpumask = 0-31
kernel.watchdog_thresh = 10
kernel.yama.ptrace_scope = 1
net.core.bpf_jit_enable = 1
net.core.bpf_jit_harden = 0
net.core.bpf_jit_kallsyms = 1
net.core.bpf_jit_limit = 528482304
net.core.busy_poll = 0
net.core.busy_read = 0
net.core.default_qdisc = fq_codel
net.core.dev_weight = 64
net.core.dev_weight_rx_bias = 1
net.core.dev_weight_tx_bias = 1
net.core.devconf_inherit_init_net = 0
net.core.fb_tunnels_only_for_init_net = 0
net.core.flow_limit_cpu_bitmap = 00000000
net.core.flow_limit_table_len = 4096
net.core.gro_normal_batch = 8
net.core.high_order_alloc_disable = 0
net.core.max_skb_frags = 17
net.core.mem_pcpu_rsv = 256
net.core.message_burst = 10
net.core.message_cost = 5
net.core.netdev_budget = 300
net.core.netdev_budget_usecs = 6666
net.core.netdev_max_backlog = 1000
net.core.netdev_rss_key = b0:ac:3b:64:44:eb:33:36:22:70:99:fe:80:bb:88:2e:08:06:0a:91:56:81:c8:84:9c:1c:e3:58:32:1a:6e:c3:84:5d:79:9d:70:99:b7:9d:12:63:5a:44:1b:da:1e:2a:f9:86:7d:4d
net.core.netdev_tstamp_prequeue = 1
net.core.netdev_unregister_timeout_secs = 10
net.core.optmem_max = 131072
net.core.rmem_default = 212992
net.core.rmem_max = 7340032
net.core.rps_default_mask = 00000000
net.core.rps_sock_flow_entries = 0
net.core.skb_defer_max = 64
net.core.somaxconn = 4096
net.core.tstamp_allow_data = 1
net.core.txrehash = 1
net.core.warnings = 0
net.core.wmem_default = 212992
net.core.wmem_max = 7340032
net.core.xfrm_acq_expires = 30
net.core.xfrm_aevent_etime = 10
net.core.xfrm_aevent_rseqth = 2
net.core.xfrm_larval_drop = 1
net.ipv4.cipso_cache_bucket_size = 10
net.ipv4.cipso_cache_enable = 1
net.ipv4.cipso_rbm_optfmt = 0
net.ipv4.cipso_rbm_strictvalid = 1
net.ipv4.conf.all.accept_local = 0
net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.all.accept_source_route = 0
net.ipv4.conf.all.arp_accept = 0
net.ipv4.conf.all.arp_announce = 0
net.ipv4.conf.all.arp_evict_nocarrier = 1
net.ipv4.conf.all.arp_filter = 0
net.ipv4.conf.all.arp_ignore = 0
net.ipv4.conf.all.arp_notify = 0
net.ipv4.conf.all.bc_forwarding = 0
net.ipv4.conf.all.bootp_relay = 0
net.ipv4.conf.all.disable_policy = 0
net.ipv4.conf.all.disable_xfrm = 0
net.ipv4.conf.all.drop_gratuitous_arp = 0
net.ipv4.conf.all.drop_unicast_in_l2_multicast = 0
net.ipv4.conf.all.force_igmp_version = 0
net.ipv4.conf.all.forwarding = 1
net.ipv4.conf.all.igmpv2_unsolicited_report_interval = 10000
net.ipv4.conf.all.igmpv3_unsolicited_report_interval = 1000
net.ipv4.conf.all.ignore_routes_with_linkdown = 0
net.ipv4.conf.all.log_martians = 0
net.ipv4.conf.all.mc_forwarding = 0
net.ipv4.conf.all.medium_id = 0
net.ipv4.conf.all.promote_secondaries = 0
net.ipv4.conf.all.proxy_arp = 0
net.ipv4.conf.all.proxy_arp_pvlan = 0
net.ipv4.conf.all.route_localnet = 0
net.ipv4.conf.all.rp_filter = 2
net.ipv4.conf.all.secure_redirects = 1
net.ipv4.conf.all.send_redirects = 1
net.ipv4.conf.all.shared_media = 1
net.ipv4.conf.all.src_valid_mark = 0
net.ipv4.conf.all.tag = 0
net.ipv4.conf.default.accept_local = 0
net.ipv4.conf.default.accept_redirects = 1
net.ipv4.conf.default.accept_source_route = 0
net.ipv4.conf.default.arp_accept = 0
net.ipv4.conf.default.arp_announce = 0
net.ipv4.conf.default.arp_evict_nocarrier = 1
net.ipv4.conf.default.arp_filter = 0
net.ipv4.conf.default.arp_ignore = 0
net.ipv4.conf.default.arp_notify = 0
net.ipv4.conf.default.bc_forwarding = 0
net.ipv4.conf.default.bootp_relay = 0
net.ipv4.conf.default.disable_policy = 0
net.ipv4.conf.default.disable_xfrm = 0
net.ipv4.conf.default.drop_gratuitous_arp = 0
net.ipv4.conf.default.drop_unicast_in_l2_multicast = 0
net.ipv4.conf.default.force_igmp_version = 0
net.ipv4.conf.default.forwarding = 1
net.ipv4.conf.default.igmpv2_unsolicited_report_interval = 10000
net.ipv4.conf.default.igmpv3_unsolicited_report_interval = 1000
net.ipv4.conf.default.ignore_routes_with_linkdown = 0
net.ipv4.conf.default.log_martians = 0
net.ipv4.conf.default.mc_forwarding = 0
net.ipv4.conf.default.medium_id = 0
net.ipv4.conf.default.promote_secondaries = 1
net.ipv4.conf.default.proxy_arp = 0
net.ipv4.conf.default.proxy_arp_pvlan = 0
net.ipv4.conf.default.route_localnet = 0
net.ipv4.conf.default.rp_filter = 2
net.ipv4.conf.default.secure_redirects = 1
net.ipv4.conf.default.send_redirects = 1
net.ipv4.conf.default.shared_media = 1
net.ipv4.conf.default.src_valid_mark = 0
net.ipv4.conf.default.tag = 0
net.ipv4.conf.eno1.accept_local = 0
net.ipv4.conf.eno1.accept_redirects = 1
net.ipv4.conf.eno1.accept_source_route = 0
net.ipv4.conf.eno1.arp_accept = 0
net.ipv4.conf.eno1.arp_announce = 0
net.ipv4.conf.eno1.arp_evict_nocarrier = 1
net.ipv4.conf.eno1.arp_filter = 0
net.ipv4.conf.eno1.arp_ignore = 0
net.ipv4.conf.eno1.arp_notify = 0
net.ipv4.conf.eno1.bc_forwarding = 0
net.ipv4.conf.eno1.bootp_relay = 0
net.ipv4.conf.eno1.disable_policy = 0
net.ipv4.conf.eno1.disable_xfrm = 0
net.ipv4.conf.eno1.drop_gratuitous_arp = 0
net.ipv4.conf.eno1.drop_unicast_in_l2_multicast = 0
net.ipv4.conf.eno1.force_igmp_version = 0
net.ipv4.conf.eno1.forwarding = 1
net.ipv4.conf.eno1.igmpv2_unsolicited_report_interval = 10000
net.ipv4.conf.eno1.igmpv3_unsolicited_report_interval = 1000
net.ipv4.conf.eno1.ignore_routes_with_linkdown = 0
net.ipv4.conf.eno1.log_martians = 0
net.ipv4.conf.eno1.mc_forwarding = 0
net.ipv4.conf.eno1.medium_id = 0
net.ipv4.conf.eno1.promote_secondaries = 1
net.ipv4.conf.eno1.proxy_arp = 0
net.ipv4.conf.eno1.proxy_arp_pvlan = 0
net.ipv4.conf.eno1.route_localnet = 0
net.ipv4.conf.eno1.rp_filter = 2
net.ipv4.conf.eno1.secure_redirects = 1
net.ipv4.conf.eno1.send_redirects = 1
net.ipv4.conf.eno1.shared_media = 1
net.ipv4.conf.eno1.src_valid_mark = 0
net.ipv4.conf.eno1.tag = 0
net.ipv4.conf.eno2.accept_local = 0
net.ipv4.conf.eno2.accept_redirects = 1
net.ipv4.conf.eno2.accept_source_route = 0
net.ipv4.conf.eno2.arp_accept = 0
net.ipv4.conf.eno2.arp_announce = 0
net.ipv4.conf.eno2.arp_evict_nocarrier = 1
net.ipv4.conf.eno2.arp_filter = 0
net.ipv4.conf.eno2.arp_ignore = 0
net.ipv4.conf.eno2.arp_notify = 0
net.ipv4.conf.eno2.bc_forwarding = 0
net.ipv4.conf.eno2.bootp_relay = 0
net.ipv4.conf.eno2.disable_policy = 0
net.ipv4.conf.eno2.disable_xfrm = 0
net.ipv4.conf.eno2.drop_gratuitous_arp = 0
net.ipv4.conf.eno2.drop_unicast_in_l2_multicast = 0
net.ipv4.conf.eno2.force_igmp_version = 0
net.ipv4.conf.eno2.forwarding = 1
net.ipv4.conf.eno2.igmpv2_unsolicited_report_interval = 10000
net.ipv4.conf.eno2.igmpv3_unsolicited_report_interval = 1000
net.ipv4.conf.eno2.ignore_routes_with_linkdown = 0
net.ipv4.conf.eno2.log_martians = 0
net.ipv4.conf.eno2.mc_forwarding = 0
net.ipv4.conf.eno2.medium_id = 0
net.ipv4.conf.eno2.promote_secondaries = 1
net.ipv4.conf.eno2.proxy_arp = 0
net.ipv4.conf.eno2.proxy_arp_pvlan = 0
net.ipv4.conf.eno2.route_localnet = 0
net.ipv4.conf.eno2.rp_filter = 2
net.ipv4.conf.eno2.secure_redirects = 1
net.ipv4.conf.eno2.send_redirects = 1
net.ipv4.conf.eno2.shared_media = 1
net.ipv4.conf.eno2.src_valid_mark = 0
net.ipv4.conf.eno2.tag = 0
net.ipv4.conf.eno3.accept_local = 0
net.ipv4.conf.eno3.accept_redirects = 1
net.ipv4.conf.eno3.accept_source_route = 0
net.ipv4.conf.eno3.arp_accept = 0
net.ipv4.conf.eno3.arp_announce = 0
net.ipv4.conf.eno3.arp_evict_nocarrier = 1
net.ipv4.conf.eno3.arp_filter = 0
net.ipv4.conf.eno3.arp_ignore = 0
net.ipv4.conf.eno3.arp_notify = 0
net.ipv4.conf.eno3.bc_forwarding = 0
net.ipv4.conf.eno3.bootp_relay = 0
net.ipv4.conf.eno3.disable_policy = 0
net.ipv4.conf.eno3.disable_xfrm = 0
net.ipv4.conf.eno3.drop_gratuitous_arp = 0
net.ipv4.conf.eno3.drop_unicast_in_l2_multicast = 0
net.ipv4.conf.eno3.force_igmp_version = 0
net.ipv4.conf.eno3.forwarding = 1
net.ipv4.conf.eno3.igmpv2_unsolicited_report_interval = 10000
net.ipv4.conf.eno3.igmpv3_unsolicited_report_interval = 1000
net.ipv4.conf.eno3.ignore_routes_with_linkdown = 0
net.ipv4.conf.eno3.log_martians = 0
net.ipv4.conf.eno3.mc_forwarding = 0
net.ipv4.conf.eno3.medium_id = 0
net.ipv4.conf.eno3.promote_secondaries = 1
net.ipv4.conf.eno3.proxy_arp = 0
net.ipv4.conf.eno3.proxy_arp_pvlan = 0
net.ipv4.conf.eno3.route_localnet = 0
net.ipv4.conf.eno3.rp_filter = 2
net.ipv4.conf.eno3.secure_redirects = 1
net.ipv4.conf.eno3.send_redirects = 1
net.ipv4.conf.eno3.shared_media = 1
net.ipv4.conf.eno3.src_valid_mark = 0
net.ipv4.conf.eno3.tag = 0
net.ipv4.conf.eno4.accept_local = 0
net.ipv4.conf.eno4.accept_redirects = 1
net.ipv4.conf.eno4.accept_source_route = 0
net.ipv4.conf.eno4.arp_accept = 0
net.ipv4.conf.eno4.arp_announce = 0
net.ipv4.conf.eno4.arp_evict_nocarrier = 1
net.ipv4.conf.eno4.arp_filter = 0
net.ipv4.conf.eno4.arp_ignore = 0
net.ipv4.conf.eno4.arp_notify = 0
net.ipv4.conf.eno4.bc_forwarding = 0
net.ipv4.conf.eno4.bootp_relay = 0
net.ipv4.conf.eno4.disable_policy = 0
net.ipv4.conf.eno4.disable_xfrm = 0
net.ipv4.conf.eno4.drop_gratuitous_arp = 0
net.ipv4.conf.eno4.drop_unicast_in_l2_multicast = 0
net.ipv4.conf.eno4.force_igmp_version = 0
net.ipv4.conf.eno4.forwarding = 1
net.ipv4.conf.eno4.igmpv2_unsolicited_report_interval = 10000
net.ipv4.conf.eno4.igmpv3_unsolicited_report_interval = 1000
net.ipv4.conf.eno4.ignore_routes_with_linkdown = 0
net.ipv4.conf.eno4.log_martians = 0
net.ipv4.conf.eno4.mc_forwarding = 0
net.ipv4.conf.eno4.medium_id = 0
net.ipv4.conf.eno4.promote_secondaries = 1
net.ipv4.conf.eno4.proxy_arp = 0
net.ipv4.conf.eno4.proxy_arp_pvlan = 0
net.ipv4.conf.eno4.route_localnet = 0
net.ipv4.conf.eno4.rp_filter = 2
net.ipv4.conf.eno4.secure_redirects = 1
net.ipv4.conf.eno4.send_redirects = 1
net.ipv4.conf.eno4.shared_media = 1
net.ipv4.conf.eno4.src_valid_mark = 0
net.ipv4.conf.eno4.tag = 0
net.ipv4.conf.lo.accept_local = 0
net.ipv4.conf.lo.accept_redirects = 1
net.ipv4.conf.lo.accept_source_route = 0
net.ipv4.conf.lo.arp_accept = 0
net.ipv4.conf.lo.arp_announce = 0
net.ipv4.conf.lo.arp_evict_nocarrier = 1
net.ipv4.conf.lo.arp_filter = 0
net.ipv4.conf.lo.arp_ignore = 0
net.ipv4.conf.lo.arp_notify = 0
net.ipv4.conf.lo.bc_forwarding = 0
net.ipv4.conf.lo.bootp_relay = 0
net.ipv4.conf.lo.disable_policy = 1
net.ipv4.conf.lo.disable_xfrm = 1
net.ipv4.conf.lo.drop_gratuitous_arp = 0
net.ipv4.conf.lo.drop_unicast_in_l2_multicast = 0
net.ipv4.conf.lo.force_igmp_version = 0
net.ipv4.conf.lo.forwarding = 1
net.ipv4.conf.lo.igmpv2_unsolicited_report_interval = 10000
net.ipv4.conf.lo.igmpv3_unsolicited_report_interval = 1000
net.ipv4.conf.lo.ignore_routes_with_linkdown = 0
net.ipv4.conf.lo.log_martians = 0
net.ipv4.conf.lo.mc_forwarding = 0
net.ipv4.conf.lo.medium_id = 0
net.ipv4.conf.lo.promote_secondaries = 1
net.ipv4.conf.lo.proxy_arp = 0
net.ipv4.conf.lo.proxy_arp_pvlan = 0
net.ipv4.conf.lo.route_localnet = 0
net.ipv4.conf.lo.rp_filter = 2
net.ipv4.conf.lo.secure_redirects = 1
net.ipv4.conf.lo.send_redirects = 1
net.ipv4.conf.lo.shared_media = 1
net.ipv4.conf.lo.src_valid_mark = 0
net.ipv4.conf.lo.tag = 0
net.ipv4.fib_multipath_hash_fields = 7
net.ipv4.fib_multipath_hash_policy = 0
net.ipv4.fib_multipath_use_neigh = 0
net.ipv4.fib_notify_on_flag_change = 0
net.ipv4.fib_sync_mem = 524288
net.ipv4.fwmark_reflect = 0
net.ipv4.icmp_echo_enable_probe = 0
net.ipv4.icmp_echo_ignore_all = 0
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_errors_use_inbound_ifaddr = 0
net.ipv4.icmp_ignore_bogus_error_responses = 1
net.ipv4.icmp_msgs_burst = 50
net.ipv4.icmp_msgs_per_sec = 1000
net.ipv4.icmp_ratelimit = 1000
net.ipv4.icmp_ratemask = 6168
net.ipv4.igmp_link_local_mcast_reports = 1
net.ipv4.igmp_max_memberships = 20
net.ipv4.igmp_max_msf = 10
net.ipv4.igmp_qrv = 2
net.ipv4.inet_peer_maxttl = 600
net.ipv4.inet_peer_minttl = 120
net.ipv4.inet_peer_threshold = 65664
net.ipv4.ip_autobind_reuse = 0
net.ipv4.ip_default_ttl = 64
net.ipv4.ip_dynaddr = 0
net.ipv4.ip_early_demux = 1
net.ipv4.ip_forward = 1
net.ipv4.ip_forward_update_priority = 1
net.ipv4.ip_forward_use_pmtu = 0
net.ipv4.ip_local_port_range = 32768	60999
net.ipv4.ip_local_reserved_ports = 
net.ipv4.ip_no_pmtu_disc = 0
net.ipv4.ip_nonlocal_bind = 0
net.ipv4.ip_unprivileged_port_start = 1024
net.ipv4.ipfrag_high_thresh = 4194304
net.ipv4.ipfrag_low_thresh = 3145728
net.ipv4.ipfrag_max_dist = 64
net.ipv4.ipfrag_secret_interval = 0
net.ipv4.ipfrag_time = 30
net.ipv4.neigh.default.anycast_delay = 99
net.ipv4.neigh.default.app_solicit = 0
net.ipv4.neigh.default.base_reachable_time_ms = 30000
net.ipv4.neigh.default.delay_first_probe_time = 5
net.ipv4.neigh.default.gc_interval = 30
net.ipv4.neigh.default.gc_stale_time = 60
net.ipv4.neigh.default.gc_thresh1 = 128
net.ipv4.neigh.default.gc_thresh2 = 512
net.ipv4.neigh.default.gc_thresh3 = 1024
net.ipv4.neigh.default.interval_probe_time_ms = 5000
net.ipv4.neigh.default.locktime = 99
net.ipv4.neigh.default.mcast_resolicit = 0
net.ipv4.neigh.default.mcast_solicit = 3
net.ipv4.neigh.default.proxy_delay = 79
net.ipv4.neigh.default.proxy_qlen = 64
net.ipv4.neigh.default.retrans_time_ms = 1000
net.ipv4.neigh.default.ucast_solicit = 3
net.ipv4.neigh.default.unres_qlen = 101
net.ipv4.neigh.default.unres_qlen_bytes = 212992
net.ipv4.neigh.eno1.anycast_delay = 99
net.ipv4.neigh.eno1.app_solicit = 0
net.ipv4.neigh.eno1.base_reachable_time_ms = 30000
net.ipv4.neigh.eno1.delay_first_probe_time = 5
net.ipv4.neigh.eno1.gc_stale_time = 60
net.ipv4.neigh.eno1.interval_probe_time_ms = 5000
net.ipv4.neigh.eno1.locktime = 99
net.ipv4.neigh.eno1.mcast_resolicit = 0
net.ipv4.neigh.eno1.mcast_solicit = 3
net.ipv4.neigh.eno1.proxy_delay = 79
net.ipv4.neigh.eno1.proxy_qlen = 64
net.ipv4.neigh.eno1.retrans_time_ms = 1000
net.ipv4.neigh.eno1.ucast_solicit = 3
net.ipv4.neigh.eno1.unres_qlen = 101
net.ipv4.neigh.eno1.unres_qlen_bytes = 212992
net.ipv4.neigh.eno2.anycast_delay = 99
net.ipv4.neigh.eno2.app_solicit = 0
net.ipv4.neigh.eno2.base_reachable_time_ms = 30000
net.ipv4.neigh.eno2.delay_first_probe_time = 5
net.ipv4.neigh.eno2.gc_stale_time = 60
net.ipv4.neigh.eno2.interval_probe_time_ms = 5000
net.ipv4.neigh.eno2.locktime = 99
net.ipv4.neigh.eno2.mcast_resolicit = 0
net.ipv4.neigh.eno2.mcast_solicit = 3
net.ipv4.neigh.eno2.proxy_delay = 79
net.ipv4.neigh.eno2.proxy_qlen = 64
net.ipv4.neigh.eno2.retrans_time_ms = 1000
net.ipv4.neigh.eno2.ucast_solicit = 3
net.ipv4.neigh.eno2.unres_qlen = 101
net.ipv4.neigh.eno2.unres_qlen_bytes = 212992
net.ipv4.neigh.eno3.anycast_delay = 99
net.ipv4.neigh.eno3.app_solicit = 0
net.ipv4.neigh.eno3.base_reachable_time_ms = 30000
net.ipv4.neigh.eno3.delay_first_probe_time = 5
net.ipv4.neigh.eno3.gc_stale_time = 60
net.ipv4.neigh.eno3.interval_probe_time_ms = 5000
net.ipv4.neigh.eno3.locktime = 99
net.ipv4.neigh.eno3.mcast_resolicit = 0
net.ipv4.neigh.eno3.mcast_solicit = 3
net.ipv4.neigh.eno3.proxy_delay = 79
net.ipv4.neigh.eno3.proxy_qlen = 64
net.ipv4.neigh.eno3.retrans_time_ms = 1000
net.ipv4.neigh.eno3.ucast_solicit = 3
net.ipv4.neigh.eno3.unres_qlen = 101
net.ipv4.neigh.eno3.unres_qlen_bytes = 212992
net.ipv4.neigh.eno4.anycast_delay = 99
net.ipv4.neigh.eno4.app_solicit = 0
net.ipv4.neigh.eno4.base_reachable_time_ms = 30000
net.ipv4.neigh.eno4.delay_first_probe_time = 5
net.ipv4.neigh.eno4.gc_stale_time = 60
net.ipv4.neigh.eno4.interval_probe_time_ms = 5000
net.ipv4.neigh.eno4.locktime = 99
net.ipv4.neigh.eno4.mcast_resolicit = 0
net.ipv4.neigh.eno4.mcast_solicit = 3
net.ipv4.neigh.eno4.proxy_delay = 79
net.ipv4.neigh.eno4.proxy_qlen = 64
net.ipv4.neigh.eno4.retrans_time_ms = 1000
net.ipv4.neigh.eno4.ucast_solicit = 3
net.ipv4.neigh.eno4.unres_qlen = 101
net.ipv4.neigh.eno4.unres_qlen_bytes = 212992
net.ipv4.neigh.lo.anycast_delay = 99
net.ipv4.neigh.lo.app_solicit = 0
net.ipv4.neigh.lo.base_reachable_time_ms = 30000
net.ipv4.neigh.lo.delay_first_probe_time = 5
net.ipv4.neigh.lo.gc_stale_time = 60
net.ipv4.neigh.lo.interval_probe_time_ms = 5000
net.ipv4.neigh.lo.locktime = 99
net.ipv4.neigh.lo.mcast_resolicit = 0
net.ipv4.neigh.lo.mcast_solicit = 3
net.ipv4.neigh.lo.proxy_delay = 79
net.ipv4.neigh.lo.proxy_qlen = 64
net.ipv4.neigh.lo.retrans_time_ms = 1000
net.ipv4.neigh.lo.ucast_solicit = 3
net.ipv4.neigh.lo.unres_qlen = 101
net.ipv4.neigh.lo.unres_qlen_bytes = 212992
net.ipv4.nexthop_compat_mode = 1
net.ipv4.ping_group_range = 0	2147483647
net.ipv4.raw_l3mdev_accept = 1
net.ipv4.route.error_burst = 1500
net.ipv4.route.error_cost = 300
net.ipv4.route.gc_elasticity = 8
net.ipv4.route.gc_interval = 60
net.ipv4.route.gc_min_interval = 0
net.ipv4.route.gc_min_interval_ms = 500
net.ipv4.route.gc_thresh = -1
net.ipv4.route.gc_timeout = 300
net.ipv4.route.max_size = 2147483647
net.ipv4.route.min_adv_mss = 256
net.ipv4.route.min_pmtu = 552
net.ipv4.route.mtu_expires = 600
net.ipv4.route.redirect_load = 6
net.ipv4.route.redirect_number = 9
net.ipv4.route.redirect_silence = 6144
net.ipv4.tcp_abort_on_overflow = 0
net.ipv4.tcp_adv_win_scale = 1
net.ipv4.tcp_allowed_congestion_control = reno cubic
net.ipv4.tcp_app_win = 31
net.ipv4.tcp_autocorking = 1
net.ipv4.tcp_available_congestion_control = reno cubic
net.ipv4.tcp_available_ulp = espintcp mptcp
net.ipv4.tcp_backlog_ack_defer = 1
net.ipv4.tcp_base_mss = 1024
net.ipv4.tcp_challenge_ack_limit = 2147483647
net.ipv4.tcp_child_ehash_entries = 0
net.ipv4.tcp_comp_sack_delay_ns = 1000000
net.ipv4.tcp_comp_sack_nr = 44
net.ipv4.tcp_comp_sack_slack_ns = 100000
net.ipv4.tcp_congestion_control = cubic
net.ipv4.tcp_dsack = 1
net.ipv4.tcp_early_demux = 1
net.ipv4.tcp_early_retrans = 3
net.ipv4.tcp_ecn = 2
net.ipv4.tcp_ecn_fallback = 1
net.ipv4.tcp_ehash_entries = 131072
net.ipv4.tcp_fack = 0
net.ipv4.tcp_fastopen = 1
net.ipv4.tcp_fastopen_blackhole_timeout_sec = 0
net.ipv4.tcp_fastopen_key = 76e30e81-7e4435d9-f0f4373b-548b4963
net.ipv4.tcp_fin_timeout = 60
net.ipv4.tcp_frto = 2
net.ipv4.tcp_fwmark_accept = 0
net.ipv4.tcp_invalid_ratelimit = 500
net.ipv4.tcp_keepalive_intvl = 75
net.ipv4.tcp_keepalive_probes = 9
net.ipv4.tcp_keepalive_time = 7200
net.ipv4.tcp_l3mdev_accept = 0
net.ipv4.tcp_limit_output_bytes = 1048576
net.ipv4.tcp_low_latency = 0
net.ipv4.tcp_max_orphans = 65536
net.ipv4.tcp_max_reordering = 300
net.ipv4.tcp_max_syn_backlog = 1024
net.ipv4.tcp_max_tw_buckets = 65536
net.ipv4.tcp_mem = 189195	252260	378390
net.ipv4.tcp_migrate_req = 0
net.ipv4.tcp_min_rtt_wlen = 300
net.ipv4.tcp_min_snd_mss = 48
net.ipv4.tcp_min_tso_segs = 2
net.ipv4.tcp_moderate_rcvbuf = 1
net.ipv4.tcp_mtu_probe_floor = 48
net.ipv4.tcp_mtu_probing = 0
net.ipv4.tcp_no_metrics_save = 0
net.ipv4.tcp_no_ssthresh_metrics_save = 1
net.ipv4.tcp_notsent_lowat = 4294967295
net.ipv4.tcp_orphan_retries = 0
net.ipv4.tcp_pacing_ca_ratio = 120
net.ipv4.tcp_pacing_ss_ratio = 200
net.ipv4.tcp_pingpong_thresh = 1
net.ipv4.tcp_plb_cong_thresh = 128
net.ipv4.tcp_plb_enabled = 0
net.ipv4.tcp_plb_idle_rehash_rounds = 3
net.ipv4.tcp_plb_rehash_rounds = 12
net.ipv4.tcp_plb_suspend_rto_sec = 60
net.ipv4.tcp_probe_interval = 600
net.ipv4.tcp_probe_threshold = 8
net.ipv4.tcp_recovery = 1
net.ipv4.tcp_reflect_tos = 0
net.ipv4.tcp_reordering = 3
net.ipv4.tcp_retrans_collapse = 1
net.ipv4.tcp_retries1 = 3
net.ipv4.tcp_retries2 = 15
net.ipv4.tcp_rfc1337 = 0
net.ipv4.tcp_rmem = 4096	131072	6291456
net.ipv4.tcp_sack = 1
net.ipv4.tcp_shrink_window = 0
net.ipv4.tcp_slow_start_after_idle = 1
net.ipv4.tcp_stdurg = 0
net.ipv4.tcp_syn_linear_timeouts = 4
net.ipv4.tcp_syn_retries = 6
net.ipv4.tcp_synack_retries = 5
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_thin_linear_timeouts = 0
net.ipv4.tcp_timestamps = 1
net.ipv4.tcp_tso_rtt_log = 9
net.ipv4.tcp_tso_win_divisor = 3
net.ipv4.tcp_tw_reuse = 2
net.ipv4.tcp_window_scaling = 1
net.ipv4.tcp_wmem = 4096	16384	4194304
net.ipv4.tcp_workaround_signed_windows = 0
net.ipv4.udp_child_hash_entries = 0
net.ipv4.udp_early_demux = 1
net.ipv4.udp_hash_entries = 8192
net.ipv4.udp_l3mdev_accept = 0
net.ipv4.udp_mem = 378390	504520	756780
net.ipv4.udp_rmem_min = 4096
net.ipv4.udp_wmem_min = 4096
net.ipv4.xfrm4_gc_thresh = 32768
net.ipv6.anycast_src_echo_reply = 0
net.ipv6.auto_flowlabels = 1
net.ipv6.bindv6only = 0
net.ipv6.calipso_cache_bucket_size = 10
net.ipv6.calipso_cache_enable = 1
net.ipv6.conf.all.accept_dad = 0
net.ipv6.conf.all.accept_ra = 1
net.ipv6.conf.all.accept_ra_defrtr = 1
net.ipv6.conf.all.accept_ra_from_local = 0
net.ipv6.conf.all.accept_ra_min_hop_limit = 1
net.ipv6.conf.all.accept_ra_min_lft = 0
net.ipv6.conf.all.accept_ra_mtu = 1
net.ipv6.conf.all.accept_ra_pinfo = 1
net.ipv6.conf.all.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.all.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.all.accept_ra_rtr_pref = 1
net.ipv6.conf.all.accept_redirects = 1
net.ipv6.conf.all.accept_source_route = 0
net.ipv6.conf.all.accept_untracked_na = 0
net.ipv6.conf.all.addr_gen_mode = 0
net.ipv6.conf.all.autoconf = 1
net.ipv6.conf.all.dad_transmits = 1
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.all.disable_policy = 0
net.ipv6.conf.all.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.all.drop_unsolicited_na = 0
net.ipv6.conf.all.enhanced_dad = 1
net.ipv6.conf.all.force_mld_version = 0
net.ipv6.conf.all.force_tllao = 0
net.ipv6.conf.all.forwarding = 0
net.ipv6.conf.all.hop_limit = 64
net.ipv6.conf.all.ignore_routes_with_linkdown = 0
net.ipv6.conf.all.ioam6_enabled = 0
net.ipv6.conf.all.ioam6_id = 65535
net.ipv6.conf.all.ioam6_id_wide = 4294967295
net.ipv6.conf.all.keep_addr_on_down = 0
net.ipv6.conf.all.max_addresses = 16
net.ipv6.conf.all.max_desync_factor = 600
net.ipv6.conf.all.mc_forwarding = 0
net.ipv6.conf.all.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.all.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.all.mtu = 1280
net.ipv6.conf.all.ndisc_evict_nocarrier = 1
net.ipv6.conf.all.ndisc_notify = 0
net.ipv6.conf.all.ndisc_tclass = 0
net.ipv6.conf.all.optimistic_dad = 0
net.ipv6.conf.all.proxy_ndp = 0
net.ipv6.conf.all.ra_defrtr_metric = 1024
net.ipv6.conf.all.ra_honor_pio_life = 0
net.ipv6.conf.all.regen_max_retry = 3
net.ipv6.conf.all.regen_min_advance = 2
net.ipv6.conf.all.router_probe_interval = 60
net.ipv6.conf.all.router_solicitation_delay = 1
net.ipv6.conf.all.router_solicitation_interval = 4
net.ipv6.conf.all.router_solicitation_max_interval = 3600
net.ipv6.conf.all.router_solicitations = -1
net.ipv6.conf.all.rpl_seg_enabled = 0
net.ipv6.conf.all.seg6_enabled = 0
net.ipv6.conf.all.seg6_require_hmac = 0
net.ipv6.conf.all.suppress_frag_ndisc = 1
net.ipv6.conf.all.temp_prefered_lft = 86400
net.ipv6.conf.all.temp_valid_lft = 604800
net.ipv6.conf.all.use_oif_addrs_only = 0
net.ipv6.conf.all.use_optimistic = 0
net.ipv6.conf.all.use_tempaddr = 0
net.ipv6.conf.default.accept_dad = 1
net.ipv6.conf.default.accept_ra = 1
net.ipv6.conf.default.accept_ra_defrtr = 1
net.ipv6.conf.default.accept_ra_from_local = 0
net.ipv6.conf.default.accept_ra_min_hop_limit = 1
net.ipv6.conf.default.accept_ra_min_lft = 0
net.ipv6.conf.default.accept_ra_mtu = 1
net.ipv6.conf.default.accept_ra_pinfo = 1
net.ipv6.conf.default.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.default.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.default.accept_ra_rtr_pref = 1
net.ipv6.conf.default.accept_redirects = 1
net.ipv6.conf.default.accept_source_route = 0
net.ipv6.conf.default.accept_untracked_na = 0
net.ipv6.conf.default.addr_gen_mode = 0
net.ipv6.conf.default.autoconf = 1
net.ipv6.conf.default.dad_transmits = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.default.disable_policy = 0
net.ipv6.conf.default.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.default.drop_unsolicited_na = 0
net.ipv6.conf.default.enhanced_dad = 1
net.ipv6.conf.default.force_mld_version = 0
net.ipv6.conf.default.force_tllao = 0
net.ipv6.conf.default.forwarding = 0
net.ipv6.conf.default.hop_limit = 64
net.ipv6.conf.default.ignore_routes_with_linkdown = 0
net.ipv6.conf.default.ioam6_enabled = 0
net.ipv6.conf.default.ioam6_id = 65535
net.ipv6.conf.default.ioam6_id_wide = 4294967295
net.ipv6.conf.default.keep_addr_on_down = 0
net.ipv6.conf.default.max_addresses = 16
net.ipv6.conf.default.max_desync_factor = 600
net.ipv6.conf.default.mc_forwarding = 0
net.ipv6.conf.default.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.default.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.default.mtu = 1280
net.ipv6.conf.default.ndisc_evict_nocarrier = 1
net.ipv6.conf.default.ndisc_notify = 0
net.ipv6.conf.default.ndisc_tclass = 0
net.ipv6.conf.default.optimistic_dad = 0
net.ipv6.conf.default.proxy_ndp = 0
net.ipv6.conf.default.ra_defrtr_metric = 1024
net.ipv6.conf.default.ra_honor_pio_life = 0
net.ipv6.conf.default.regen_max_retry = 3
net.ipv6.conf.default.regen_min_advance = 2
net.ipv6.conf.default.router_probe_interval = 60
net.ipv6.conf.default.router_solicitation_delay = 1
net.ipv6.conf.default.router_solicitation_interval = 4
net.ipv6.conf.default.router_solicitation_max_interval = 3600
net.ipv6.conf.default.router_solicitations = -1
net.ipv6.conf.default.rpl_seg_enabled = 0
net.ipv6.conf.default.seg6_enabled = 0
net.ipv6.conf.default.seg6_require_hmac = 0
net.ipv6.conf.default.suppress_frag_ndisc = 1
net.ipv6.conf.default.temp_prefered_lft = 86400
net.ipv6.conf.default.temp_valid_lft = 604800
net.ipv6.conf.default.use_oif_addrs_only = 0
net.ipv6.conf.default.use_optimistic = 0
net.ipv6.conf.default.use_tempaddr = 0
net.ipv6.conf.eno1.accept_dad = 1
net.ipv6.conf.eno1.accept_ra = 1
net.ipv6.conf.eno1.accept_ra_defrtr = 1
net.ipv6.conf.eno1.accept_ra_from_local = 0
net.ipv6.conf.eno1.accept_ra_min_hop_limit = 1
net.ipv6.conf.eno1.accept_ra_min_lft = 0
net.ipv6.conf.eno1.accept_ra_mtu = 1
net.ipv6.conf.eno1.accept_ra_pinfo = 1
net.ipv6.conf.eno1.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.eno1.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.eno1.accept_ra_rtr_pref = 1
net.ipv6.conf.eno1.accept_redirects = 1
net.ipv6.conf.eno1.accept_source_route = 0
net.ipv6.conf.eno1.accept_untracked_na = 0
net.ipv6.conf.eno1.addr_gen_mode = 0
net.ipv6.conf.eno1.autoconf = 1
net.ipv6.conf.eno1.dad_transmits = 1
net.ipv6.conf.eno1.disable_ipv6 = 1
net.ipv6.conf.eno1.disable_policy = 0
net.ipv6.conf.eno1.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.eno1.drop_unsolicited_na = 0
net.ipv6.conf.eno1.enhanced_dad = 1
net.ipv6.conf.eno1.force_mld_version = 0
net.ipv6.conf.eno1.force_tllao = 0
net.ipv6.conf.eno1.forwarding = 0
net.ipv6.conf.eno1.hop_limit = 64
net.ipv6.conf.eno1.ignore_routes_with_linkdown = 0
net.ipv6.conf.eno1.ioam6_enabled = 0
net.ipv6.conf.eno1.ioam6_id = 65535
net.ipv6.conf.eno1.ioam6_id_wide = 4294967295
net.ipv6.conf.eno1.keep_addr_on_down = 0
net.ipv6.conf.eno1.max_addresses = 16
net.ipv6.conf.eno1.max_desync_factor = 600
net.ipv6.conf.eno1.mc_forwarding = 0
net.ipv6.conf.eno1.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.eno1.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.eno1.mtu = 1500
net.ipv6.conf.eno1.ndisc_evict_nocarrier = 1
net.ipv6.conf.eno1.ndisc_notify = 0
net.ipv6.conf.eno1.ndisc_tclass = 0
net.ipv6.conf.eno1.optimistic_dad = 0
net.ipv6.conf.eno1.proxy_ndp = 0
net.ipv6.conf.eno1.ra_defrtr_metric = 1024
net.ipv6.conf.eno1.ra_honor_pio_life = 0
net.ipv6.conf.eno1.regen_max_retry = 3
net.ipv6.conf.eno1.regen_min_advance = 2
net.ipv6.conf.eno1.router_probe_interval = 60
net.ipv6.conf.eno1.router_solicitation_delay = 1
net.ipv6.conf.eno1.router_solicitation_interval = 4
net.ipv6.conf.eno1.router_solicitation_max_interval = 3600
net.ipv6.conf.eno1.router_solicitations = -1
net.ipv6.conf.eno1.rpl_seg_enabled = 0
net.ipv6.conf.eno1.seg6_enabled = 0
net.ipv6.conf.eno1.seg6_require_hmac = 0
net.ipv6.conf.eno1.suppress_frag_ndisc = 1
net.ipv6.conf.eno1.temp_prefered_lft = 86400
net.ipv6.conf.eno1.temp_valid_lft = 604800
net.ipv6.conf.eno1.use_oif_addrs_only = 0
net.ipv6.conf.eno1.use_optimistic = 0
net.ipv6.conf.eno1.use_tempaddr = 0
net.ipv6.conf.eno2.accept_dad = 1
net.ipv6.conf.eno2.accept_ra = 0
net.ipv6.conf.eno2.accept_ra_defrtr = 1
net.ipv6.conf.eno2.accept_ra_from_local = 0
net.ipv6.conf.eno2.accept_ra_min_hop_limit = 1
net.ipv6.conf.eno2.accept_ra_min_lft = 0
net.ipv6.conf.eno2.accept_ra_mtu = 1
net.ipv6.conf.eno2.accept_ra_pinfo = 1
net.ipv6.conf.eno2.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.eno2.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.eno2.accept_ra_rtr_pref = 1
net.ipv6.conf.eno2.accept_redirects = 1
net.ipv6.conf.eno2.accept_source_route = 0
net.ipv6.conf.eno2.accept_untracked_na = 0
net.ipv6.conf.eno2.addr_gen_mode = 0
net.ipv6.conf.eno2.autoconf = 1
net.ipv6.conf.eno2.dad_transmits = 1
net.ipv6.conf.eno2.disable_ipv6 = 0
net.ipv6.conf.eno2.disable_policy = 0
net.ipv6.conf.eno2.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.eno2.drop_unsolicited_na = 0
net.ipv6.conf.eno2.enhanced_dad = 1
net.ipv6.conf.eno2.force_mld_version = 0
net.ipv6.conf.eno2.force_tllao = 0
net.ipv6.conf.eno2.forwarding = 0
net.ipv6.conf.eno2.hop_limit = 64
net.ipv6.conf.eno2.ignore_routes_with_linkdown = 0
net.ipv6.conf.eno2.ioam6_enabled = 0
net.ipv6.conf.eno2.ioam6_id = 65535
net.ipv6.conf.eno2.ioam6_id_wide = 4294967295
net.ipv6.conf.eno2.keep_addr_on_down = 0
net.ipv6.conf.eno2.max_addresses = 16
net.ipv6.conf.eno2.max_desync_factor = 600
net.ipv6.conf.eno2.mc_forwarding = 0
net.ipv6.conf.eno2.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.eno2.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.eno2.mtu = 1500
net.ipv6.conf.eno2.ndisc_evict_nocarrier = 1
net.ipv6.conf.eno2.ndisc_notify = 0
net.ipv6.conf.eno2.ndisc_tclass = 0
net.ipv6.conf.eno2.optimistic_dad = 0
net.ipv6.conf.eno2.proxy_ndp = 0
net.ipv6.conf.eno2.ra_defrtr_metric = 1024
net.ipv6.conf.eno2.ra_honor_pio_life = 0
net.ipv6.conf.eno2.regen_max_retry = 3
net.ipv6.conf.eno2.regen_min_advance = 2
net.ipv6.conf.eno2.router_probe_interval = 60
net.ipv6.conf.eno2.router_solicitation_delay = 1
net.ipv6.conf.eno2.router_solicitation_interval = 4
net.ipv6.conf.eno2.router_solicitation_max_interval = 3600
net.ipv6.conf.eno2.router_solicitations = -1
net.ipv6.conf.eno2.rpl_seg_enabled = 0
net.ipv6.conf.eno2.seg6_enabled = 0
net.ipv6.conf.eno2.seg6_require_hmac = 0
net.ipv6.conf.eno2.suppress_frag_ndisc = 1
net.ipv6.conf.eno2.temp_prefered_lft = 86400
net.ipv6.conf.eno2.temp_valid_lft = 604800
net.ipv6.conf.eno2.use_oif_addrs_only = 0
net.ipv6.conf.eno2.use_optimistic = 0
net.ipv6.conf.eno2.use_tempaddr = 0
net.ipv6.conf.eno3.accept_dad = 1
net.ipv6.conf.eno3.accept_ra = 0
net.ipv6.conf.eno3.accept_ra_defrtr = 1
net.ipv6.conf.eno3.accept_ra_from_local = 0
net.ipv6.conf.eno3.accept_ra_min_hop_limit = 1
net.ipv6.conf.eno3.accept_ra_min_lft = 0
net.ipv6.conf.eno3.accept_ra_mtu = 1
net.ipv6.conf.eno3.accept_ra_pinfo = 1
net.ipv6.conf.eno3.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.eno3.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.eno3.accept_ra_rtr_pref = 1
net.ipv6.conf.eno3.accept_redirects = 1
net.ipv6.conf.eno3.accept_source_route = 0
net.ipv6.conf.eno3.accept_untracked_na = 0
net.ipv6.conf.eno3.addr_gen_mode = 0
net.ipv6.conf.eno3.autoconf = 1
net.ipv6.conf.eno3.dad_transmits = 1
net.ipv6.conf.eno3.disable_ipv6 = 0
net.ipv6.conf.eno3.disable_policy = 0
net.ipv6.conf.eno3.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.eno3.drop_unsolicited_na = 0
net.ipv6.conf.eno3.enhanced_dad = 1
net.ipv6.conf.eno3.force_mld_version = 0
net.ipv6.conf.eno3.force_tllao = 0
net.ipv6.conf.eno3.forwarding = 0
net.ipv6.conf.eno3.hop_limit = 64
net.ipv6.conf.eno3.ignore_routes_with_linkdown = 0
net.ipv6.conf.eno3.ioam6_enabled = 0
net.ipv6.conf.eno3.ioam6_id = 65535
net.ipv6.conf.eno3.ioam6_id_wide = 4294967295
net.ipv6.conf.eno3.keep_addr_on_down = 0
net.ipv6.conf.eno3.max_addresses = 16
net.ipv6.conf.eno3.max_desync_factor = 600
net.ipv6.conf.eno3.mc_forwarding = 0
net.ipv6.conf.eno3.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.eno3.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.eno3.mtu = 1500
net.ipv6.conf.eno3.ndisc_evict_nocarrier = 1
net.ipv6.conf.eno3.ndisc_notify = 0
net.ipv6.conf.eno3.ndisc_tclass = 0
net.ipv6.conf.eno3.optimistic_dad = 0
net.ipv6.conf.eno3.proxy_ndp = 0
net.ipv6.conf.eno3.ra_defrtr_metric = 1024
net.ipv6.conf.eno3.ra_honor_pio_life = 0
net.ipv6.conf.eno3.regen_max_retry = 3
net.ipv6.conf.eno3.regen_min_advance = 2
net.ipv6.conf.eno3.router_probe_interval = 60
net.ipv6.conf.eno3.router_solicitation_delay = 1
net.ipv6.conf.eno3.router_solicitation_interval = 4
net.ipv6.conf.eno3.router_solicitation_max_interval = 3600
net.ipv6.conf.eno3.router_solicitations = -1
net.ipv6.conf.eno3.rpl_seg_enabled = 0
net.ipv6.conf.eno3.seg6_enabled = 0
net.ipv6.conf.eno3.seg6_require_hmac = 0
net.ipv6.conf.eno3.suppress_frag_ndisc = 1
net.ipv6.conf.eno3.temp_prefered_lft = 86400
net.ipv6.conf.eno3.temp_valid_lft = 604800
net.ipv6.conf.eno3.use_oif_addrs_only = 0
net.ipv6.conf.eno3.use_optimistic = 0
net.ipv6.conf.eno3.use_tempaddr = 0
net.ipv6.conf.eno4.accept_dad = 1
net.ipv6.conf.eno4.accept_ra = 1
net.ipv6.conf.eno4.accept_ra_defrtr = 1
net.ipv6.conf.eno4.accept_ra_from_local = 0
net.ipv6.conf.eno4.accept_ra_min_hop_limit = 1
net.ipv6.conf.eno4.accept_ra_min_lft = 0
net.ipv6.conf.eno4.accept_ra_mtu = 1
net.ipv6.conf.eno4.accept_ra_pinfo = 1
net.ipv6.conf.eno4.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.eno4.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.eno4.accept_ra_rtr_pref = 1
net.ipv6.conf.eno4.accept_redirects = 1
net.ipv6.conf.eno4.accept_source_route = 0
net.ipv6.conf.eno4.accept_untracked_na = 0
net.ipv6.conf.eno4.addr_gen_mode = 0
net.ipv6.conf.eno4.autoconf = 1
net.ipv6.conf.eno4.dad_transmits = 1
net.ipv6.conf.eno4.disable_ipv6 = 1
net.ipv6.conf.eno4.disable_policy = 0
net.ipv6.conf.eno4.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.eno4.drop_unsolicited_na = 0
net.ipv6.conf.eno4.enhanced_dad = 1
net.ipv6.conf.eno4.force_mld_version = 0
net.ipv6.conf.eno4.force_tllao = 0
net.ipv6.conf.eno4.forwarding = 0
net.ipv6.conf.eno4.hop_limit = 64
net.ipv6.conf.eno4.ignore_routes_with_linkdown = 0
net.ipv6.conf.eno4.ioam6_enabled = 0
net.ipv6.conf.eno4.ioam6_id = 65535
net.ipv6.conf.eno4.ioam6_id_wide = 4294967295
net.ipv6.conf.eno4.keep_addr_on_down = 0
net.ipv6.conf.eno4.max_addresses = 16
net.ipv6.conf.eno4.max_desync_factor = 600
net.ipv6.conf.eno4.mc_forwarding = 0
net.ipv6.conf.eno4.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.eno4.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.eno4.mtu = 1500
net.ipv6.conf.eno4.ndisc_evict_nocarrier = 1
net.ipv6.conf.eno4.ndisc_notify = 0
net.ipv6.conf.eno4.ndisc_tclass = 0
net.ipv6.conf.eno4.optimistic_dad = 0
net.ipv6.conf.eno4.proxy_ndp = 0
net.ipv6.conf.eno4.ra_defrtr_metric = 1024
net.ipv6.conf.eno4.ra_honor_pio_life = 0
net.ipv6.conf.eno4.regen_max_retry = 3
net.ipv6.conf.eno4.regen_min_advance = 2
net.ipv6.conf.eno4.router_probe_interval = 60
net.ipv6.conf.eno4.router_solicitation_delay = 1
net.ipv6.conf.eno4.router_solicitation_interval = 4
net.ipv6.conf.eno4.router_solicitation_max_interval = 3600
net.ipv6.conf.eno4.router_solicitations = -1
net.ipv6.conf.eno4.rpl_seg_enabled = 0
net.ipv6.conf.eno4.seg6_enabled = 0
net.ipv6.conf.eno4.seg6_require_hmac = 0
net.ipv6.conf.eno4.suppress_frag_ndisc = 1
net.ipv6.conf.eno4.temp_prefered_lft = 86400
net.ipv6.conf.eno4.temp_valid_lft = 604800
net.ipv6.conf.eno4.use_oif_addrs_only = 0
net.ipv6.conf.eno4.use_optimistic = 0
net.ipv6.conf.eno4.use_tempaddr = 0
net.ipv6.conf.lo.accept_dad = -1
net.ipv6.conf.lo.accept_ra = 1
net.ipv6.conf.lo.accept_ra_defrtr = 1
net.ipv6.conf.lo.accept_ra_from_local = 0
net.ipv6.conf.lo.accept_ra_min_hop_limit = 1
net.ipv6.conf.lo.accept_ra_min_lft = 0
net.ipv6.conf.lo.accept_ra_mtu = 1
net.ipv6.conf.lo.accept_ra_pinfo = 1
net.ipv6.conf.lo.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.lo.accept_ra_rt_info_min_plen = 0
net.ipv6.conf.lo.accept_ra_rtr_pref = 1
net.ipv6.conf.lo.accept_redirects = 1
net.ipv6.conf.lo.accept_source_route = 0
net.ipv6.conf.lo.accept_untracked_na = 0
net.ipv6.conf.lo.addr_gen_mode = 0
net.ipv6.conf.lo.autoconf = 1
net.ipv6.conf.lo.dad_transmits = 1
net.ipv6.conf.lo.disable_ipv6 = 1
net.ipv6.conf.lo.disable_policy = 0
net.ipv6.conf.lo.drop_unicast_in_l2_multicast = 0
net.ipv6.conf.lo.drop_unsolicited_na = 0
net.ipv6.conf.lo.enhanced_dad = 1
net.ipv6.conf.lo.force_mld_version = 0
net.ipv6.conf.lo.force_tllao = 0
net.ipv6.conf.lo.forwarding = 0
net.ipv6.conf.lo.hop_limit = 64
net.ipv6.conf.lo.ignore_routes_with_linkdown = 0
net.ipv6.conf.lo.ioam6_enabled = 0
net.ipv6.conf.lo.ioam6_id = 65535
net.ipv6.conf.lo.ioam6_id_wide = 4294967295
net.ipv6.conf.lo.keep_addr_on_down = 0
net.ipv6.conf.lo.max_addresses = 16
net.ipv6.conf.lo.max_desync_factor = 600
net.ipv6.conf.lo.mc_forwarding = 0
net.ipv6.conf.lo.mldv1_unsolicited_report_interval = 10000
net.ipv6.conf.lo.mldv2_unsolicited_report_interval = 1000
net.ipv6.conf.lo.mtu = 65536
net.ipv6.conf.lo.ndisc_evict_nocarrier = 1
net.ipv6.conf.lo.ndisc_notify = 0
net.ipv6.conf.lo.ndisc_tclass = 0
net.ipv6.conf.lo.optimistic_dad = 0
net.ipv6.conf.lo.proxy_ndp = 0
net.ipv6.conf.lo.ra_defrtr_metric = 1024
net.ipv6.conf.lo.ra_honor_pio_life = 0
net.ipv6.conf.lo.regen_max_retry = 3
net.ipv6.conf.lo.regen_min_advance = 2
net.ipv6.conf.lo.router_probe_interval = 60
net.ipv6.conf.lo.router_solicitation_delay = 1
net.ipv6.conf.lo.router_solicitation_interval = 4
net.ipv6.conf.lo.router_solicitation_max_interval = 3600
net.ipv6.conf.lo.router_solicitations = -1
net.ipv6.conf.lo.rpl_seg_enabled = 0
net.ipv6.conf.lo.seg6_enabled = 0
net.ipv6.conf.lo.seg6_require_hmac = 0
net.ipv6.conf.lo.suppress_frag_ndisc = 1
net.ipv6.conf.lo.temp_prefered_lft = 86400
net.ipv6.conf.lo.temp_valid_lft = 604800
net.ipv6.conf.lo.use_oif_addrs_only = 0
net.ipv6.conf.lo.use_optimistic = 0
net.ipv6.conf.lo.use_tempaddr = -1
net.ipv6.fib_multipath_hash_fields = 7
net.ipv6.fib_multipath_hash_policy = 0
net.ipv6.fib_notify_on_flag_change = 0
net.ipv6.flowlabel_consistency = 1
net.ipv6.flowlabel_reflect = 0
net.ipv6.flowlabel_state_ranges = 0
net.ipv6.fwmark_reflect = 0
net.ipv6.icmp.echo_ignore_all = 0
net.ipv6.icmp.echo_ignore_anycast = 0
net.ipv6.icmp.echo_ignore_multicast = 0
net.ipv6.icmp.error_anycast_as_unicast = 0
net.ipv6.icmp.ratelimit = 1000
net.ipv6.icmp.ratemask = 0-1,3-127
net.ipv6.idgen_delay = 1
net.ipv6.idgen_retries = 3
net.ipv6.ioam6_id = 16777215
net.ipv6.ioam6_id_wide = 72057594037927935
net.ipv6.ip6frag_high_thresh = 4194304
net.ipv6.ip6frag_low_thresh = 3145728
net.ipv6.ip6frag_secret_interval = 0
net.ipv6.ip6frag_time = 60
net.ipv6.ip_nonlocal_bind = 0
net.ipv6.max_dst_opts_length = 2147483647
net.ipv6.max_dst_opts_number = 8
net.ipv6.max_hbh_length = 2147483647
net.ipv6.max_hbh_opts_number = 8
net.ipv6.mld_max_msf = 64
net.ipv6.mld_qrv = 2
net.ipv6.neigh.default.anycast_delay = 99
net.ipv6.neigh.default.app_solicit = 0
net.ipv6.neigh.default.base_reachable_time_ms = 30000
net.ipv6.neigh.default.delay_first_probe_time = 5
net.ipv6.neigh.default.gc_interval = 30
net.ipv6.neigh.default.gc_stale_time = 60
net.ipv6.neigh.default.gc_thresh1 = 128
net.ipv6.neigh.default.gc_thresh2 = 512
net.ipv6.neigh.default.gc_thresh3 = 1024
net.ipv6.neigh.default.interval_probe_time_ms = 5000
net.ipv6.neigh.default.locktime = 0
net.ipv6.neigh.default.mcast_resolicit = 0
net.ipv6.neigh.default.mcast_solicit = 3
net.ipv6.neigh.default.proxy_delay = 79
net.ipv6.neigh.default.proxy_qlen = 64
net.ipv6.neigh.default.retrans_time_ms = 1000
net.ipv6.neigh.default.ucast_solicit = 3
net.ipv6.neigh.default.unres_qlen = 101
net.ipv6.neigh.default.unres_qlen_bytes = 212992
net.ipv6.neigh.eno1.anycast_delay = 99
net.ipv6.neigh.eno1.app_solicit = 0
net.ipv6.neigh.eno1.base_reachable_time_ms = 30000
net.ipv6.neigh.eno1.delay_first_probe_time = 5
net.ipv6.neigh.eno1.gc_stale_time = 60
net.ipv6.neigh.eno1.interval_probe_time_ms = 5000
net.ipv6.neigh.eno1.locktime = 0
net.ipv6.neigh.eno1.mcast_resolicit = 0
net.ipv6.neigh.eno1.mcast_solicit = 3
net.ipv6.neigh.eno1.proxy_delay = 79
net.ipv6.neigh.eno1.proxy_qlen = 64
net.ipv6.neigh.eno1.retrans_time_ms = 1000
net.ipv6.neigh.eno1.ucast_solicit = 3
net.ipv6.neigh.eno1.unres_qlen = 101
net.ipv6.neigh.eno1.unres_qlen_bytes = 212992
net.ipv6.neigh.eno2.anycast_delay = 99
net.ipv6.neigh.eno2.app_solicit = 0
net.ipv6.neigh.eno2.base_reachable_time_ms = 30000
net.ipv6.neigh.eno2.delay_first_probe_time = 5
net.ipv6.neigh.eno2.gc_stale_time = 60
net.ipv6.neigh.eno2.interval_probe_time_ms = 5000
net.ipv6.neigh.eno2.locktime = 0
net.ipv6.neigh.eno2.mcast_resolicit = 0
net.ipv6.neigh.eno2.mcast_solicit = 3
net.ipv6.neigh.eno2.proxy_delay = 79
net.ipv6.neigh.eno2.proxy_qlen = 64
net.ipv6.neigh.eno2.retrans_time_ms = 1000
net.ipv6.neigh.eno2.ucast_solicit = 3
net.ipv6.neigh.eno2.unres_qlen = 101
net.ipv6.neigh.eno2.unres_qlen_bytes = 212992
net.ipv6.neigh.eno3.anycast_delay = 99
net.ipv6.neigh.eno3.app_solicit = 0
net.ipv6.neigh.eno3.base_reachable_time_ms = 30000
net.ipv6.neigh.eno3.delay_first_probe_time = 5
net.ipv6.neigh.eno3.gc_stale_time = 60
net.ipv6.neigh.eno3.interval_probe_time_ms = 5000
net.ipv6.neigh.eno3.locktime = 0
net.ipv6.neigh.eno3.mcast_resolicit = 0
net.ipv6.neigh.eno3.mcast_solicit = 3
net.ipv6.neigh.eno3.proxy_delay = 79
net.ipv6.neigh.eno3.proxy_qlen = 64
net.ipv6.neigh.eno3.retrans_time_ms = 1000
net.ipv6.neigh.eno3.ucast_solicit = 3
net.ipv6.neigh.eno3.unres_qlen = 101
net.ipv6.neigh.eno3.unres_qlen_bytes = 212992
net.ipv6.neigh.eno4.anycast_delay = 99
net.ipv6.neigh.eno4.app_solicit = 0
net.ipv6.neigh.eno4.base_reachable_time_ms = 30000
net.ipv6.neigh.eno4.delay_first_probe_time = 5
net.ipv6.neigh.eno4.gc_stale_time = 60
net.ipv6.neigh.eno4.interval_probe_time_ms = 5000
net.ipv6.neigh.eno4.locktime = 0
net.ipv6.neigh.eno4.mcast_resolicit = 0
net.ipv6.neigh.eno4.mcast_solicit = 3
net.ipv6.neigh.eno4.proxy_delay = 79
net.ipv6.neigh.eno4.proxy_qlen = 64
net.ipv6.neigh.eno4.retrans_time_ms = 1000
net.ipv6.neigh.eno4.ucast_solicit = 3
net.ipv6.neigh.eno4.unres_qlen = 101
net.ipv6.neigh.eno4.unres_qlen_bytes = 212992
net.ipv6.neigh.lo.anycast_delay = 99
net.ipv6.neigh.lo.app_solicit = 0
net.ipv6.neigh.lo.base_reachable_time_ms = 30000
net.ipv6.neigh.lo.delay_first_probe_time = 5
net.ipv6.neigh.lo.gc_stale_time = 60
net.ipv6.neigh.lo.interval_probe_time_ms = 5000
net.ipv6.neigh.lo.locktime = 0
net.ipv6.neigh.lo.mcast_resolicit = 0
net.ipv6.neigh.lo.mcast_solicit = 3
net.ipv6.neigh.lo.proxy_delay = 79
net.ipv6.neigh.lo.proxy_qlen = 64
net.ipv6.neigh.lo.retrans_time_ms = 1000
net.ipv6.neigh.lo.ucast_solicit = 3
net.ipv6.neigh.lo.unres_qlen = 101
net.ipv6.neigh.lo.unres_qlen_bytes = 212992
net.ipv6.route.gc_elasticity = 9
net.ipv6.route.gc_interval = 30
net.ipv6.route.gc_min_interval = 0
net.ipv6.route.gc_min_interval_ms = 500
net.ipv6.route.gc_thresh = 1024
net.ipv6.route.gc_timeout = 60
net.ipv6.route.max_size = 2147483647
net.ipv6.route.min_adv_mss = 1220
net.ipv6.route.mtu_expires = 600
net.ipv6.route.skip_notify_on_dev_down = 0
net.ipv6.seg6_flowlabel = 0
net.ipv6.xfrm6_gc_thresh = 32768
net.iw_cm.default_backlog = 256
net.mptcp.add_addr_timeout = 120
net.mptcp.allow_join_initial_addr_port = 1
net.mptcp.available_schedulers = default
net.mptcp.checksum_enabled = 0
net.mptcp.close_timeout = 60
net.mptcp.enabled = 1
net.mptcp.pm_type = 0
net.mptcp.scheduler = default
net.mptcp.stale_loss_cnt = 4
net.netfilter.nf_hooks_lwtunnel = 0
net.netfilter.nf_log.0 = NONE
net.netfilter.nf_log.1 = NONE
net.netfilter.nf_log.10 = NONE
net.netfilter.nf_log.2 = NONE
net.netfilter.nf_log.3 = NONE
net.netfilter.nf_log.4 = NONE
net.netfilter.nf_log.5 = NONE
net.netfilter.nf_log.6 = NONE
net.netfilter.nf_log.7 = NONE
net.netfilter.nf_log.8 = NONE
net.netfilter.nf_log.9 = NONE
net.netfilter.nf_log_all_netns = 0
net.unix.max_dgram_qlen = 512
sunrpc.max_resvport = 1023
sunrpc.min_resvport = 665
sunrpc.nfs_debug = 0x0000
sunrpc.nfsd_debug = 0x0000
sunrpc.nlm_debug = 0x0000
sunrpc.rdma_inline_write_padding = 0
sunrpc.rdma_max_inline_read = 4096
sunrpc.rdma_max_inline_write = 4096
sunrpc.rdma_memreg_strategy = 5
sunrpc.rdma_pad_optimize = 0
sunrpc.rdma_slot_table_entries = 128
sunrpc.rpc_debug = 0x0000
sunrpc.svc_rdma.max_outbound_read_requests = 16
sunrpc.svc_rdma.max_req_size = 4096
sunrpc.svc_rdma.max_requests = 64
sunrpc.svc_rdma.rdma_stat_read = 0
sunrpc.svc_rdma.rdma_stat_recv = 0
sunrpc.svc_rdma.rdma_stat_rq_poll = 0
sunrpc.svc_rdma.rdma_stat_rq_prod = 0
sunrpc.svc_rdma.rdma_stat_rq_starve = 0
sunrpc.svc_rdma.rdma_stat_sq_poll = 0
sunrpc.svc_rdma.rdma_stat_sq_prod = 0
sunrpc.svc_rdma.rdma_stat_sq_starve = 0
sunrpc.svc_rdma.rdma_stat_write = 0
sunrpc.tcp_fin_timeout = 15
sunrpc.tcp_max_slot_table_entries = 65536
sunrpc.tcp_slot_table_entries = 2
sunrpc.transports = tcp 1048576
sunrpc.transports = udp 32768
sunrpc.transports = rdma 1048576
sunrpc.udp_slot_table_entries = 16
user.max_cgroup_namespaces = 63592
user.max_fanotify_groups = 128
user.max_fanotify_marks = 130236
user.max_inotify_instances = 1024
user.max_inotify_watches = 524288
user.max_ipc_namespaces = 63592
user.max_mnt_namespaces = 63592
user.max_net_namespaces = 63592
user.max_pid_namespaces = 63592
user.max_time_namespaces = 63592
user.max_user_namespaces = 63592
user.max_uts_namespaces = 63592
vm.admin_reserve_kbytes = 8192
vm.compact_unevictable_allowed = 1
vm.compaction_proactiveness = 20
vm.dirty_background_bytes = 0
vm.dirty_background_ratio = 10
vm.dirty_bytes = 0
vm.dirty_expire_centisecs = 3000
vm.dirty_ratio = 20
vm.dirty_writeback_centisecs = 500
vm.dirtytime_expire_seconds = 43200
vm.extfrag_threshold = 500
vm.hugetlb_optimize_vmemmap = 0
vm.hugetlb_shm_group = 0
vm.laptop_mode = 0
vm.legacy_va_layout = 0
vm.lowmem_reserve_ratio = 256	256	32	0	0
vm.max_map_count = 1048576
vm.memfd_noexec = 0
vm.memory_failure_early_kill = 0
vm.memory_failure_recovery = 1
vm.min_free_kbytes = 90112
vm.min_slab_ratio = 5
vm.min_unmapped_ratio = 1
vm.mmap_min_addr = 65536
vm.mmap_rnd_bits = 32
vm.mmap_rnd_compat_bits = 16
vm.nr_hugepages = 0
vm.nr_hugepages_mempolicy = 0
vm.nr_overcommit_hugepages = 0
vm.numa_stat = 1
vm.numa_zonelist_order = Node
vm.oom_dump_tasks = 1
vm.oom_kill_allocating_task = 0
vm.overcommit_kbytes = 0
vm.overcommit_memory = 0
vm.overcommit_ratio = 50
vm.page-cluster = 3
vm.page_lock_unfairness = 5
vm.panic_on_oom = 0
vm.percpu_pagelist_high_fraction = 0
vm.stat_interval = 1
vm.swappiness = 60
vm.unprivileged_userfaultfd = 0
vm.user_reserve_kbytes = 131072
vm.vfs_cache_pressure = 100
vm.watermark_boost_factor = 15000
vm.watermark_scale_factor = 10
vm.zone_reclaim_mode = 0

The relevant IPv4 interface is enp88s0 on the router, and eno3 on the client.  Both systems are connected to my UniFi network (enp87s0 on the router, and eno2 on the client), so I can manage them remotely from my laptop.

Offline

#5 2024-07-27 20:05:19

seth
Member
Registered: 2012-09-03
Posts: 59,193

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

firewalld isn't the only netfilter frontend in town
Please post the output of

find /etc/systemd -type l -exec test -f {} \; -print | awk -F'/' '{ printf ("%-40s | %s\n", $(NF-0), $(NF-1)) }' | sort -f

And of course check iptables -nvL and the nftables rules, https://wiki.archlinux.org/title/Nftabl … in_a_table though

Also, I can assign the 10.20.30.117 IP address manually on the client using the ip addr add... command, and it can then communicate just fine with the router over that interface.

That'd be  a rather specific rule.

What does the routing table looke like?
You're defining the interface for arping, what if you  don't? Do the packages take the correct route?


And, just to also get that out of the way: https://wiki.archlinux.org/title/Networ … face_names
Edit: the corresponding theory might be a race condition, similar to what iwd is prone to.
Since altering the NIC names everywhere probably sucks: just make sure to start kea only after the system has settled down.

Last edited by seth (2024-07-27 20:13:17)

Offline

#6 2024-07-28 02:49:53

ectospasm
Member
Registered: 2015-08-28
Posts: 292

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

seth wrote:

firewalld isn't the only netfilter frontend in town
Please post the output of

find /etc/systemd -type l -exec test -f {} \; -print | awk -F'/' '{ printf ("%-40s | %s\n", $(NF-0), $(NF-1)) }' | sort -f
# find /etc/systemd -type l -exec test -f {} \; -print | awk -F'/' '{ printf ("%-40s | %s\n", $(NF-0), $(NF-1)) }' | sort -f
apcupsd.service                          | multi-user.target.wants
dbus-org.freedesktop.network1.service    | system
dbus-org.freedesktop.resolve1.service    | system
dbus-org.freedesktop.timesync1.service   | system
ddclient.service                         | multi-user.target.wants
ddclient.timer                           | timers.target.wants
getty@tty1.service                       | getty.target.wants
kea-dhcp4.service                        | multi-user.target.wants
kea-dhcp-ddns.service                    | multi-user.target.wants
mollyguard.service                       | multi-user.target.wants
named.service                            | multi-user.target.wants
p11-kit-server.socket                    | sockets.target.wants
remote-fs.target                         | multi-user.target.wants
sipstation.timer                         | timers.target.wants
sshd.service                             | multi-user.target.wants
systemd-networkd.service                 | multi-user.target.wants
systemd-networkd.socket                  | sockets.target.wants
systemd-networkd-wait-online.service     | network-online.target.wants
systemd-network-generator.service        | sysinit.target.wants
systemd-resolved.service                 | sysinit.target.wants
systemd-timesyncd.service                | sysinit.target.wants
systemd-userdbd.socket                   | sockets.target.wants
seth wrote:

And of course check iptables -nvL and the nftables rules, https://wiki.archlinux.org/title/Nftabl … in_a_table

# iptables -nvL
Chain INPUT (policy ACCEPT 113K packets, 23M bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 98696 packets, 11M bytes)
 pkts bytes target     prot opt in     out     source               destination

nft list ruleset has no output.  I even ran nft flush ruleset to ensure no firewall rules are blocking this.


seth wrote:

What does the routing table looke like?


Here is the output of ip route:

# ip route
default via 192.168.1.1 dev enp87s0 proto dhcp src 192.168.1.18 metric 1024
10.20.30.0/24 dev enp88s0 proto kernel scope link src 10.20.30.254
192.168.1.0/24 dev enp87s0 proto kernel scope link src 192.168.1.18 metric 1024
192.168.1.1 dev enp87s0 proto dhcp scope link src 192.168.1.18 metric 1024

Here is the output of ip a s, for completeness:

 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
2: enp87s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 58:47:ca:77:31:20 brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.18/24 metric 1024 brd 192.168.1.255 scope global dynamic enp87s0
       valid_lft 59130sec preferred_lft 59130sec
    inet6 fe80::5a47:caff:fe77:3120/64 scope link proto kernel_ll
       valid_lft forever preferred_lft forever
3: enp88s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 58:47:ca:77:31:21 brd ff:ff:ff:ff:ff:ff
    inet 10.20.30.254/24 brd 10.20.30.255 scope global enp88s0
       valid_lft forever preferred_lft forever
    inet6 fe80::5a47:caff:fe77:3121/64 scope link proto kernel_ll
       valid_lft forever preferred_lft forever
4: enp2s0f0np0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
    link/ether 58:47:ca:77:31:1e brd ff:ff:ff:ff:ff:ff
5: enp2s0f1np1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
    link/ether 58:47:ca:77:31:1f brd ff:ff:ff:ff:ff:ff
6: wlp89s0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
    link/ether 4c:50:dd:9b:b5:1e brd ff:ff:ff:ff:ff:ff
seth wrote:

You're defining the interface for arping, what if you  don't? Do the packages take the correct route?

They do, if I run arping -b 10.20.30.117, I see the ARP requests in tcpdump on the client.


seth wrote:

And, just to also get that out of the way: https://wiki.archlinux.org/title/Networ … face_names
Edit: the corresponding theory might be a race condition, similar to what iwd is prone to.
Since altering the NIC names everywhere probably sucks: just make sure to start kea only after the system has settled down.

Hmmm, I'm not averse to revert to traditional interface names, there aren't that many places I'd have to update.  kea-dhcp4.service has network-online.target for both Wants= and After=.  I did restart kea-dhcp4.service, but that didn't change anything.  The behavior (client not receiving DHCPOFFER) still exists.

Offline

#7 2024-07-28 07:17:15

-thc
Member
Registered: 2017-03-15
Posts: 717

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

I finally found a small (but maybe important) omission in your kea configuration. Insert

"dhcp-socket-type": "raw"

directly below the "interfaces" bracket.

Offline

#8 2024-07-28 14:08:25

ectospasm
Member
Registered: 2015-08-28
Posts: 292

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

-thc wrote:

I finally found a small (but maybe important) omission in your kea configuration. Insert

"dhcp-socket-type": "raw"

directly below the "interfaces" bracket.

After reading the kea documentation, setting the dhcp-socket-type to raw is the default, so shouldn't need to be explicitly set.  But I'm setting it just to be sure.

Setting that option made no difference, the client still doesn't receive the DHCPOFFER.  Setting it to "udp" causes it to stop responding with DHCPOFFER (which is expected, as it only expects to send responses to a relay agent).

Offline

#9 2024-07-28 14:18:29

-thc
Member
Registered: 2017-03-15
Posts: 717

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

Here's what I would do: Boot the NUC from an ArchISO, configure the interfaces, install & configure kea with a barebone/minimal configuration and try if it works.

Offline

#10 2024-07-28 17:14:44

ectospasm
Member
Registered: 2015-08-28
Posts: 292

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

I think I mentioned this earlier, but it was brief.  It looks like kea (and dhcpd4 before it) on this host at least is sending the DHCPOFFER to 10.20.30.117, which the client doesn't know is meant for them at this point.  Since that IP address isn't in the ARP table, it's not sending to the 24:6e:96:af:31:0c MAC address. 

So, I confirmed tcpdump on the client puts the interface into promiscuous mode.  So, if the router/server were putting the packet on the wire, the client should see it (even if it didn't respond with a DHCPREQUEST).

The router has an Intel 2.5GbE adapter, using the igc driver.  Here's the output of lspci -k:

58:00.0 Ethernet controller: Intel Corporation Ethernet Controller I226-LM (rev 04)
        Subsystem: Intel Corporation Device 0000
        Kernel driver in use: igc
        Kernel modules: igc

It feels awfully like DHCP snooping is enabled on the router itself at a really low level, so it's not actually sending the DHCPOFFER.  kea-dhcp4 is not aware of this, I observe this in its journal:

Jul 28 13:09:11 bastion kea-dhcp4[740]: INFO  DHCP4_LEASE_OFFER [hwtype=1 24:6e:96:af:31:0c], cid=[ff:d3:d8:65:35:00:02:00:00:ab:11:14:40:02:d7:1e:99:42:9b], tid=0x5100988e: lease 10.20.30.117 will be offered
Jul 28 13:09:11 bastion kea-dhcp4[740]: INFO  DHCP4_PACKET_SEND [hwtype=1 24:6e:96:af:31:0c], cid=[ff:d3:d8:65:35:00:02:00:00:ab:11:14:40:02:d7:1e:99:42:9b], tid=0x5100988e: trying to send packet DHCPOFFER (type 2) from 10.20.30.254:67 to 10.20.30.117:68 on interface enp88s0
Jul 28 13:10:16 bastion kea-dhcp4[740]: INFO  DHCP4_LEASE_OFFER [hwtype=1 24:6e:96:af:31:0c], cid=[ff:d3:d8:65:35:00:02:00:00:ab:11:14:40:02:d7:1e:99:42:9b], tid=0x5100988e: lease 10.20.30.117 will be offered
Jul 28 13:10:16 bastion kea-dhcp4[740]: INFO  DHCP4_PACKET_SEND [hwtype=1 24:6e:96:af:31:0c], cid=[ff:d3:d8:65:35:00:02:00:00:ab:11:14:40:02:d7:1e:99:42:9b], tid=0x5100988e: trying to send packet DHCPOFFER (type 2) from 10.20.30.254:67 to 10.20.30.117:68 on interface enp88s0

We see the DHCPOFFER in the packet capture/tcpdump, but it doesn't appear to be going on the wire.

Right now there's no switch between my router and client.  Capable switches (like my UniFi switches) do have DHCP snooping capability, but that shouldn't be applying right now.

Offline

#11 2024-07-28 17:18:01

ectospasm
Member
Registered: 2015-08-28
Posts: 292

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

-thc wrote:

Here's what I would do: Boot the NUC from an ArchISO, configure the interfaces, install & configure kea with a barebone/minimal configuration and try if it works.

Not a bad idea;  I'll have to try that.  It looks like Wednesday evening EDT (UTC -04:00) will be my first chance to do that.  I may also poke around the AMI UEFI BIOS menu, there may be some NIC option that is preventing this (my best guess at this point).

Offline

#12 2024-08-03 03:15:15

ectospasm
Member
Registered: 2015-08-28
Posts: 292

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

Work got in the way Wednesday, and I may not have time to look into this until next Wednesday.

Some things I will try:

  • Boot from the latest Arch ISO, see if I can reproduce the problem.  I won't use systemd-networkd there, just assign an IP address with ip addr add 10.20.30.254/24 dev enp88s0, and install kea to use the same /etc/kea/kea-dhcp4.conf.  If that works, that will lead me to believe it's something with systemd-networkd on the installed system.

  • If that doesn't work, I can swap the WAN (enp87s0) and LAN (enp88s0) interfaces in all the configuration, and swap the cables accordingly.  If that works, then I'll need to compare the differences between the two using ethtool.  To my knowledge they're handled by the same driver (though they are different PCIe devices)

  • If neither of the above work, try a live image of some other distro, see if I can reproduce the problem using something different.  Any suggestions on what distro to try would be helpful, as I've never been much of a distro hopper.  I'm not sure which one would be best suited for something like this.  Maybe a rescue disk of some sort, like grml?

I'll also look into increasing the log level (for dmesg/journalctl -k).  It's possible something on the server is eating the DHCPOFFER before it goes on the wire, without logging it as a dropped packet (as seen by ip -s link).

Last edited by ectospasm (2024-08-03 03:15:59)

Offline

#13 2024-08-03 18:49:22

ectospasm
Member
Registered: 2015-08-28
Posts: 292

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

I actually found some time to work on it this afternoon.  I can't find my USB flash drive at the moment, so I tried the second option, swapping my LAN and WAN interfaces.  So now, enp87s0 is my LAN where it was WAN before, enp88s0 is now the WAN (it had been the nonworking LAN interface before).

My client got the DHCP lease right away, I saw a flurry of traffic once the client got an address.  I'd like to look into why the other interface wasn't working, but I don't have time right now. 

Any ideas of how to compare the two interfaces?  They should be using the same driver.

Offline

#14 2024-08-03 19:32:59

ectospasm
Member
Registered: 2015-08-28
Posts: 292

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

I've also been chatting with Gemini on this.  While it kept running me in circles and didn't seem to follow along the conversation very well, it has helped me in troubleshooting.

The main thing I discovered, is that the two interfaces are actually slightly different models of the Intel I226 2.5GbE chipset:

57:00.0 Ethernet controller: Intel Corporation Ethernet Controller I226-V (rev 04)
        Subsystem: Intel Corporation Device 0000
        Kernel driver in use: igc
--
58:00.0 Ethernet controller: Intel Corporation Ethernet Controller I226-LM (rev 04)
        Subsystem: Intel Corporation Device 0000
        Kernel driver in use: igc

Gemini told me the I226-LM is geared towards lower end desktop and embedded units, and is not as performant as the I226-V.  So, this seems specific to the model.  I'm not sure if I should report this, or where to report.  I need to try on the latest hardened kernel, since that was my original goal for this device.

It looks like Intel has a community site, I can ask on there when I get time.  But I'm marking this as SOLVED* with the caveat that it was a hardware issue.  If I can address it in BIOS, firmware, or software, I'll update my original post to include how I fixed it for the I226-LM.

Offline

#15 2024-08-03 21:40:58

seth
Member
Registered: 2012-09-03
Posts: 59,193

Offline

#16 2024-08-04 02:52:24

ectospasm
Member
Registered: 2015-08-28
Posts: 292

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

I did some more digging, this appears to be a function of vPro on the I226-LM device, it looks like it may be quite common for the two 2.5GbE ports to have different submodel NICs like this.  It's like I226-LM really doesn't want to be a DHCP server.  Those links are for Proxmox and pfSense, but it's the same behavior.  I will still engage with the Intel Community, but I may need to reach out to my OEM to see if there's anything that can be done.

I do have a solution that works for me, but hopefully this topic will lead others in the right direction.

Offline

#17 2024-08-04 07:13:52

-thc
Member
Registered: 2017-03-15
Posts: 717

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

Reading through the proxmox thread I had a wild idea: If the ethernet interface with vPro in it's unconfigured/default state acts (via OS) as a DHCP server the vPro logic (which may act as a DHCP client) can swallow up the DHCPOFFER claiming it for itself. If the vPro (or vPro Essentials) network configuration can be changed via EFI BIOS - I would recommend to set it to a static IP.

Offline

#18 2024-08-04 19:43:36

ectospasm
Member
Registered: 2015-08-28
Posts: 292

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

-thc wrote:

Reading through the proxmox thread I had a wild idea: If the ethernet interface with vPro in it's unconfigured/default state acts (via OS) as a DHCP server the vPro logic (which may act as a DHCP client) can swallow up the DHCPOFFER claiming it for itself. If the vPro (or vPro Essentials) network configuration can be changed via EFI BIOS - I would recommend to set it to a static IP.

I asked on the Intel Community forum, in their Ethernet section.  I haven't seen a response yet, so I'm hopeful they'll say it's a known issue and they'll provide a workaround, if not an outright fix.

Offline

#19 2024-08-09 23:29:33

ectospasm
Member
Registered: 2015-08-28
Posts: 292

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

I finally got around to it, and I didn't see anything referring to vPro or AMT anywhere in the UEFI BIOS menu, nor anywhere to set a static IP for the BCM/out-of-band management controller which seems to be built-into the I226-LM NIC, and the source of my original problem.  I might need to run it by my OEM.  Still no response to my post on the Intel Community forums.

Anyhow, I'm finally at a point where I think I can use this machine for the purpose I got it for:  my DIY Arch router.  I don't have time tonight, but I'll be revamping my UniFi Network controller when it's time to put this in action.

Offline

#20 2024-10-21 12:35:12

irridia
Member
Registered: 2024-10-21
Posts: 1

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

@ectospasm, I created an account here just to thank you for this. How a packet could leave the literal end of the kernel-earth and not make it across a wire to another computer was a stumper. The BIOS on my Asrock 1215U board doesn't allow any controls (other than boot from lan or power-on from lan) so it didn't occur to me that the management crap would be on *and* Intel would do packet inspection on the chipset. I also flipped the interfaces to the less "intuitive" order and all is good. Until I want to be a DHCP server on Comcast's network, but then again this feature is actually nice in that regard...

Offline

#21 2024-10-25 01:07:13

ectospasm
Member
Registered: 2015-08-28
Posts: 292

Re: [SOLVED]DHCP4 clients not receiving DHCPOFFER packets

irridia wrote:

@ectospasm, I created an account here just to thank you for this. How a packet could leave the literal end of the kernel-earth and not make it across a wire to another computer was a stumper. The BIOS on my Asrock 1215U board doesn't allow any controls (other than boot from lan or power-on from lan) so it didn't occur to me that the management crap would be on *and* Intel would do packet inspection on the chipset. I also flipped the interfaces to the less "intuitive" order and all is good. Until I want to be a DHCP server on Comcast's network, but then again this feature is actually nice in that regard...

I'm glad it helped!  My OEM (SimplyNUC) confirmed this is a firmware bug Intel will have to fix.  Once that fix is available, SimplyNUC hasn't told me how they're going to release the updated firmware.  I've encouraged them to contribute to LVFS, but I might be one of the few SimplyNUC customers using any kind of Linux distro (at least they did let me buy the NUC without an operating system).  I'm just hoping their firmware update tool doesn't require Windows.

But if this is your first experience with the Arch community, I say,"Welcome!"  Or,"Come to the dark side!"  I was a Linux die-hard before I started using Arch in earnest;  I kept landing on the excellent Arch Wiki looking for fixes for stuff on my Debian machines.  About ten years ago, I decided to make the plunge, and haven't been happier using Linux!

Now I contribute here on the forums, I have a few AUR packages I maintain, and I used to be quite active on IRC.

Offline

Board footer

Powered by FluxBB