search

dentproject / dentOS

dentOS SwitchDev based NOS
Other
200 stars 58 forks source link

arm64: kernel 5.15: enable TCP_MD5SIG #233

Open KanjiMonster opened 12 months ago

KanjiMonster commented 12 months ago

For BGP TCP MD5 authentication to work, the appropriate support needs to be enabled in the kernel, so enable it.

Fixes errors from FRR's bgpd like:

Jul 19 12:29:43 localhost bgpd[954]: [KTTWK-0CPJ7][EC 100663303] sockopt_tcp_signature: setsockopt(22): Protocol not available
Jul 19 12:29:43 localhost bgpd[954]: [NWGVJ-FEW9F][EC 33554495] Unable to set TCP MD5 option on socket for peer 10.0.1.2 (sock=22): Protocol not available
Jul 19 12:29:43 localhost bgpd[954]: [KTTWK-0CPJ7][EC 100663303] sockopt_tcp_signature: setsockopt(22): Protocol not available
Jul 19 12:29:43 localhost bgpd[954]: [NWGVJ-FEW9F][EC 33554495] Unable to set TCP MD5 option on socket for peer 10.0.0.2 (sock=22): Protocol not available
taraschornyiplv commented 12 months ago

reverify