Difference between revisions of "Using the hidden interface to disable ARP"
From LVSKB
| Line 4: | Line 4: | ||
The "hidden" device flag is available in the Linux 2.2 kernel series starting from 2.2.14. For the "hidden" device flag on the Linux kernel 2.4 and 2.6, you need to apply the hidden patch against the Linux kernel 2.4 and 2.6 respectively. Please go to [http://www.ssi.bg/~ja/#hidden Julian's Software Patches and Docs] to download the hidden patches. | The "hidden" device flag is available in the Linux 2.2 kernel series starting from 2.2.14. For the "hidden" device flag on the Linux kernel 2.4 and 2.6, you need to apply the hidden patch against the Linux kernel 2.4 and 2.6 respectively. Please go to [http://www.ssi.bg/~ja/#hidden Julian's Software Patches and Docs] to download the hidden patches. | ||
| + | |||
| + | Note that for the Linux kernel 2.4 and 2.6, you may use the arp_announce/arp_ignore flag on interface (see [[Using arp_announce/arp_ignore to disable ARP]]), then you will not need to patch and rebuild the kernel. | ||
== Disable ARP for VIP == | == Disable ARP for VIP == | ||
| Line 10: | Line 12: | ||
== References == | == References == | ||
| + | * http://www.ssi.bg/~ja/hidden.txt | ||
* http://www.linuxvirtualserver.org/docs/arp.html | * http://www.linuxvirtualserver.org/docs/arp.html | ||
[[Category:ARP Issue]] | [[Category:ARP Issue]] | ||
Revision as of 13:30, 28 October 2006
Introduction
The "hidden" flag on interface is to hide an interface from the ARP protocol. When the "hidden" flag is enabled at an interface, any IP address configured at the hidden interface will not participate ARP.
The "hidden" device flag is available in the Linux 2.2 kernel series starting from 2.2.14. For the "hidden" device flag on the Linux kernel 2.4 and 2.6, you need to apply the hidden patch against the Linux kernel 2.4 and 2.6 respectively. Please go to Julian's Software Patches and Docs to download the hidden patches.
Note that for the Linux kernel 2.4 and 2.6, you may use the arp_announce/arp_ignore flag on interface (see Using arp_announce/arp_ignore to disable ARP), then you will not need to patch and rebuild the kernel.
