Xen 主机上的以下 sysctl.conf 设置不起作用:
net.bridge.bridge-nf-call-arptables = 0
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 0
# sysctl -p
...
error: "net.bridge.bridge-nf-call-arptables" is an unknown key
error: "net.bridge.bridge-nf-call-ip6tables" is an unknown key
error: "net.bridge.bridge-nf-call-iptables" is an unknown key
但桥接模块已加载:
# lsmod | grep bridge
bridge 86778 0
stp 1613 1 bridge
llc 3721 2 bridge,stp
ipv6 342149 50 bridge,nf_reject_ipv6,nf_conntrack_ipv6,nf_defrag_ipv6,[permanent]
我缺少什么?
内核3.18.20-2.el6xen.x86_64
答案1
回退到 3.14.42-1.el6xen.x86_64 解决了问题...
# sysctl -a | grep net.bridge
net.bridge.bridge-nf-call-arptables = 0
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 0