为什么默认情况下不启用 arp ignore/annouce [英] Why arp ignore/annouce are not enable by default

问题描述

我有一个具体的问题需要经验才能回答:

I have a specific question which need experience for an answer:

为什么arp_ignore/arp_announce 在linux安装(例如debian)上默认不启用，有什么特殊原因吗?

Why arp_ignore / arp_announce are not enable by default on linux installation (debian for example) is there a specific reason ?

从错误的网络接口接收 arp 应答有什么兴趣?

Which interest to receive arp answer from wrong network interfaces ?

感谢您的帮助.

问候，

推荐答案

这不是 Debian 特定的，默认来自 Linux.

That's not Debian specific, the default is from Linux.

检查 https://bugzilla.redhat.com/show_bug.cgi?id=168960 以及 David Miller 的回复:

Check https://bugzilla.redhat.com/show_bug.cgi?id=168960 and the response from David Miller:

此行为与 Linux IPV4 堆栈的遵守一致基于主机的 IPV4 地址模型，而不是基于接口的模型这几乎就是您所要求的模型.

This behavior is consistent with the Linux IPV4 stack's adherence to the host based model of IPV4 address instead of the interface based model which is pretty much what you are asking for.

这两种寻址模型都由 RFC 描述并且完全有效.

Both addressing models are described by the RFCs and are completely valid.

这不应该改变，也不是错误.如果你想要不同行为，可调参数在那里供您调整，但这并没有将它们设为适合所有人的默认设置.

This should not be changed and is not a bug. If you want different behavior, the tunables are there for you to tweak, but that does not make them right for everyone as a default.

请参阅 RFC 1122, 3.3.4.2 多宿主要求(强 ES 模型，弱 ES 模型).

See RFC 1122, 3.3.4.2 Multihoming Requirements (Strong ES model, Weak ES model).

这篇关于为什么默认情况下不启用 arp ignore/annouce的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！