Enable ipv6 privacy extensions and build ipfw for dummynet.

2024-07-04 01:31:07 -04:00
parent fb90c63d84
commit fb679924bc
5 changed files with 52 additions and 22 deletions
--- a/ansible/roles/network/tasks/linux.yaml
+++ b/ansible/roles/network/tasks/linux.yaml
@@ -29,6 +29,26 @@
    - src: 10-wired.network
      dest: /etc/systemd/network/10-wired.network

+- name: Configure sysctls
+  sysctl:
+    name: "{{ item.name }}"
+    value: "{{ item.value }}"
+    state: present
+    sysctl_file: /etc/sysctl.d/{{ item.file }}
+  loop:
+    # Enable IPv6 Privacy Extensions
+    - name: net.ipv6.conf.all.use_tempaddr
+      value: 2
+      file: 40-ipv6.conf
+    # Enable IPv6 Privacy Extensions
+    - name: net.ipv6.conf.default.use_tempaddr
+      value: 2
+      file: 40-ipv6.conf
+    # Enable IPv6 Privacy Extensions
+    # - name: net.ipv6.conf.nic.use_tempaddr
+    #   value: 2
+    #   file: 40-ipv6.conf
+
 - name: Enable services
  systemd:
    enabled: yes