docs: admin-guide: move sysctl directory to it

[linux-2.6-microblaze.git] / Documentation / networking / ip-sysctl.txt

diff --git a/Documentation/networking/ip-sysctl.txt b/Documentation/networking/ip-sysctl.txt
index 22f6b8b..df33674 100644 (file)
--- a/Documentation/networking/ip-sysctl.txt
+++ b/Documentation/networking/ip-sysctl.txt
@@ -80,6 +80,7 @@ fib_multipath_hash_policy - INTEGER
        Possible values:
        0 - Layer 3
        1 - Layer 4
+       2 - Layer 3 or inner Layer 3 if present
 
 fib_sync_mem - UNSIGNED INTEGER
        Amount of dirty memory from fib entries that can be backlogged before
@@ -656,6 +657,26 @@ tcp_fastopen_blackhole_timeout_sec - INTEGER
        0 to disable the blackhole detection.
        By default, it is set to 1hr.
 
+tcp_fastopen_key - list of comma separated 32-digit hexadecimal INTEGERs
+       The list consists of a primary key and an optional backup key. The
+       primary key is used for both creating and validating cookies, while the
+       optional backup key is only used for validating cookies. The purpose of
+       the backup key is to maximize TFO validation when keys are rotated.
+
+       A randomly chosen primary key may be configured by the kernel if
+       the tcp_fastopen sysctl is set to 0x400 (see above), or if the
+       TCP_FASTOPEN setsockopt() optname is set and a key has not been
+       previously configured via sysctl. If keys are configured via
+       setsockopt() by using the TCP_FASTOPEN_KEY optname, then those
+       per-socket keys will be used instead of any keys that are specified via
+       sysctl.
+
+       A key is specified as 4 8-digit hexadecimal integers which are separated
+       by a '-' as: xxxxxxxx-xxxxxxxx-xxxxxxxx-xxxxxxxx. Leading zeros may be
+       omitted. A primary and a backup key may be specified by separating them
+       by a comma. If only one key is specified, it becomes the primary key and
+       any previously configured backup keys are removed.
+
 tcp_syn_retries - INTEGER
        Number of times initial SYNs for an active TCP connection attempt
        will be retransmitted. Should not be higher than 127. Default value
@@ -1425,14 +1446,26 @@ flowlabel_state_ranges - BOOLEAN
        FALSE: disabled
        Default: true
 
-flowlabel_reflect - BOOLEAN
-       Automatically reflect the flow label. Needed for Path MTU
+flowlabel_reflect - INTEGER
+       Control flow label reflection. Needed for Path MTU
        Discovery to work with Equal Cost Multipath Routing in anycast
        environments. See RFC 7690 and:
        https://tools.ietf.org/html/draft-wang-6man-flow-label-reflection-01
-       TRUE: enabled
-       FALSE: disabled
-       Default: FALSE
+
+       This is a bitmask.
+       1: enabled for established flows
+
+       Note that this prevents automatic flowlabel changes, as done
+       in "tcp: change IPv6 flow-label upon receiving spurious retransmission"
+       and "tcp: Change txhash on every SYN and RTO retransmit"
+
+       2: enabled for TCP RESET packets (no active listener)
+       If set, a RST packet sent in response to a SYN packet on a closed
+       port will reflect the incoming flow label.
+
+       4: enabled for ICMPv6 echo reply messages.
+
+       Default: 0
 
 fib_multipath_hash_policy - INTEGER
        Controls which hash policy to use for multipath routes.
@@ -1440,6 +1473,7 @@ fib_multipath_hash_policy - INTEGER
        Possible values:
        0 - Layer 3 (source and destination addresses plus flow label)
        1 - Layer 4 (standard 5-tuple)
+       2 - Layer 3 or inner Layer 3 if present
 
 anycast_src_echo_reply - BOOLEAN
        Controls the use of anycast addresses as source addresses for ICMPv6
@@ -2253,7 +2287,7 @@ addr_scope_policy - INTEGER
 
 
 /proc/sys/net/core/*
-       Please see: Documentation/sysctl/net.txt for descriptions of these entries.
+       Please see: Documentation/admin-guide/sysctl/net.rst for descriptions of these entries.
 
 
 /proc/sys/net/unix/*