Le 16/01/2019 à 09:53, xiangxia.m....@gmail.com a écrit : > From: Tonghao Zhang <xiangxia.m....@gmail.com> > > The devconf setting on the init_net will affect other > namespace when them created. For example: > > $ cat /proc/sys/net/ipv4/conf/all/rp_filter > 0 > $ echo 2 > /proc/sys/net/ipv4/conf/all/rp_filter > $ cat /proc/sys/net/ipv4/conf/all/rp_filter > 2 > > $ ip netns add ns100 > $ ip netns exec ns100 bash > $ cat /proc/sys/net/ipv4/conf/all/rp_filter > 2 > > The value of rp_filter in the ns100, should be 0 as > default, but it is 2 same as _init_net_. This problem has already been discussed in the past. We cannot change anymore the current behavior, some users are relying on it.
Regards, Nicolas