summaryrefslogtreecommitdiffstats
path: root/upstream/fedora-rawhide/man5/systemd.netdev.5
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-06-17 10:51:52 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-06-17 10:51:52 +0000
commit4ad94864781f48b1a4b77f9cfb934622bf756ba1 (patch)
tree3900955c1886e6d2570fea7125ee1f01bafe876d /upstream/fedora-rawhide/man5/systemd.netdev.5
parentAdding upstream version 4.22.0. (diff)
downloadmanpages-l10n-4ad94864781f48b1a4b77f9cfb934622bf756ba1.tar.xz
manpages-l10n-4ad94864781f48b1a4b77f9cfb934622bf756ba1.zip
Adding upstream version 4.23.0.upstream/4.23.0
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'upstream/fedora-rawhide/man5/systemd.netdev.5')
-rw-r--r--upstream/fedora-rawhide/man5/systemd.netdev.575
1 files changed, 64 insertions, 11 deletions
diff --git a/upstream/fedora-rawhide/man5/systemd.netdev.5 b/upstream/fedora-rawhide/man5/systemd.netdev.5
index 4cbedb2f..6343ec31 100644
--- a/upstream/fedora-rawhide/man5/systemd.netdev.5
+++ b/upstream/fedora-rawhide/man5/systemd.netdev.5
@@ -1,5 +1,5 @@
'\" t
-.TH "SYSTEMD\&.NETDEV" "5" "" "systemd 255" "systemd.network"
+.TH "SYSTEMD\&.NETDEV" "5" "" "systemd 256~rc3" "systemd.network"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
@@ -670,6 +670,16 @@ Specifies the length of the receive queue for broadcast/multicast packets\&. An
.sp
Added in version 248\&.
.RE
+.PP
+\fIBroadcastQueueThreshold=\fR
+.RS 4
+Controls the threshold for broadcast queueing of the macvlan device\&. Takes the special value
+"no", or an integer in the range 0\&...2147483647\&. When
+"no"
+is specified, the broadcast queueing is disabled altogether\&. When an integer is specified, a multicast address will be queued as broadcast if the number of devices using it is greater than the given value\&. Defaults to unset, and the kernel default will be used\&.
+.sp
+Added in version 256\&.
+.RE
.SH "[MACVTAP] SECTION OPTIONS"
.PP
The [MACVTAP] section applies for netdevs of kind
@@ -1734,9 +1744,19 @@ The [WireGuard] section accepts the following keys:
The Base64 encoded private key for the interface\&. It can be generated using the
\fBwg genkey\fR
command (see
-\fBwg\fR(8))\&. This option or
-\fIPrivateKeyFile=\fR
-is mandatory to use WireGuard\&. Note that because this information is secret, you may want to set the permissions of the \&.netdev file to be owned by
+\fBwg\fR(8))\&. Specially, if the specified key is prefixed with
+"@", it is interpreted as the name of the credential from which the actual key shall be read\&.
+\fBsystemd\-networkd\&.service\fR
+automatically imports credentials matching
+"network\&.wireguard\&.*"\&. For more details on credentials, refer to
+\fBsystemd.exec\fR(5)\&. A private key is mandatory to use WireGuard\&. If not set, the credential
+"network\&.wireguard\&.private\&.\fInetdev\fR"
+is used if exists\&. I\&.e\&. for
+50\-foobar\&.netdev,
+"network\&.wireguard\&.private\&.50\-foobar"
+is tried\&.
+.sp
+Note that because this information is secret, it\*(Aqs strongly recommended to use an (encrypted) credential\&. Alternatively, you may want to set the permissions of the \&.netdev file to be owned by
"root:systemd\-network"
with a
"0640"
@@ -1813,7 +1833,13 @@ The [WireGuardPeer] section accepts the following keys:
Sets a Base64 encoded public key calculated by
\fBwg pubkey\fR
(see
-\fBwg\fR(8)) from a private key, and usually transmitted out of band to the author of the configuration file\&. This option is mandatory for this section\&.
+\fBwg\fR(8)) from a private key, and usually transmitted out of band to the author of the configuration file\&. This option honors the
+"@"
+prefix in the same way as the
+\fBPrivateKey=\fR
+setting of the
+\fB[WireGuard]\fR
+section\&. This option is mandatory for this section\&.
.sp
Added in version 237\&.
.RE
@@ -1822,7 +1848,15 @@ Added in version 237\&.
.RS 4
Optional preshared key for the interface\&. It can be generated by the
\fBwg genpsk\fR
-command\&. This option adds an additional layer of symmetric\-key cryptography to be mixed into the already existing public\-key cryptography, for post\-quantum resistance\&. Note that because this information is secret, you may want to set the permissions of the \&.netdev file to be owned by
+command\&. This option adds an additional layer of symmetric\-key cryptography to be mixed into the already existing public\-key cryptography, for post\-quantum resistance\&. This option honors the
+"@"
+prefix in the same way as the
+\fBPrivateKey=\fR
+setting of the
+\fB[WireGuard]\fR
+section\&.
+.sp
+Note that because this information is secret, it\*(Aqs strongly recommended to use an (encrypted) credential\&. Alternatively, you may want to set the permissions of the \&.netdev file to be owned by
"root:systemd\-network"
with a
"0640"
@@ -1872,6 +1906,14 @@ for IPv4 and
"[1111:2222::3333]:51820"
for IPv6 address\&. This endpoint will be updated automatically once to the most recent source IP address and port of correctly authenticated packets from the peer at configuration time\&.
.sp
+This option honors the
+"@"
+prefix in the same way as the
+\fBPrivateKey=\fR
+setting of the
+\fB[WireGuard]\fR
+section\&.
+.sp
Added in version 237\&.
.RE
.PP
@@ -1952,6 +1994,14 @@ Specifies the frequency that Media Independent Interface link monitoring will oc
Added in version 216\&.
.RE
.PP
+\fIPeerNotifyDelaySec=\fR
+.RS 4
+Specifies the number of seconds the delay between each peer notification (gratuitous ARP and unsolicited IPv6 Neighbor Advertisement) when they are issued after a failover event\&. This delay should be a multiple of the MII link monitor interval (miimon)\&. The valid range is 0\&.\&.\&.300s\&. The default value is 0, which means to match the value of the
+\fIMIIMonitorSec=\fR\&.
+.sp
+Added in version 256\&.
+.RE
+.PP
\fIUpDelaySec=\fR
.RS 4
Specifies the delay before a link is enabled after a link up status has been detected\&. This value is rounded down to a multiple of
@@ -2111,6 +2161,13 @@ Specifies the minimum number of links that must be active before asserting carri
Added in version 220\&.
.RE
.PP
+\fIARPMissedMax=\fR
+.RS 4
+Specify the maximum number of arp interval monitor cycle for missed ARP replies\&. If this number is exceeded, link is reported as down\&. Defaults to unset\&.
+.sp
+Added in version 256\&.
+.RE
+.PP
For more detail information see
\m[blue]\fBLinux Ethernet Bonding Driver HOWTO\fR\m[]\&\s-2\u[1]\d\s+2
.SH "[XFRM] SECTION OPTIONS"
@@ -2648,11 +2705,7 @@ Independent=yes
.\}
.SH "SEE ALSO"
.PP
-\fBsystemd\fR(1),
-\fBsystemd-networkd\fR(8),
-\fBsystemd.link\fR(5),
-\fBsystemd.network\fR(5),
-\fBsystemd-network-generator.service\fR(8)
+\fBsystemd\fR(1), \fBsystemd-networkd\fR(8), \fBsystemd.link\fR(5), \fBsystemd.network\fR(5), \fBsystemd-network-generator.service\fR(8)
.SH "NOTES"
.IP " 1." 4
Linux Ethernet Bonding Driver HOWTO