ipv6: add documentation for stable_secret, idgen_delay and idgen_retries knobs

Cc: Erik Kline <ek@google.com>
Cc: Fernando Gont <fgont@si6networks.com>
Cc: Lorenzo Colitti <lorenzo@google.com>
Cc: YOSHIFUJI Hideaki/吉藤英明 <hideaki.yoshifuji@miraclelinux.com>
Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

diff --git a/Documentation/networking/ip-sysctl.txt b/Documentation/networking/ip-sysctl.txt
index 6c07c2b369092b35f9d3f61bab683f592b0ca010..071fb18dc57c868e99367f9d3872bc0e91401414 100644 (file)
--- a/Documentation/networking/ip-sysctl.txt
+++ b/Documentation/networking/ip-sysctl.txt
@@ -1220,6 +1220,17 @@ anycast_src_echo_reply - BOOLEAN
        FALSE: disabled
        Default: FALSE
 
+idgen_delay - INTEGER
+       Controls the delay in seconds after which time to retry
+       privacy stable address generation if a DAD conflict is
+       detected.
+       Default: 1 (as specified in RFC7217)
+
+idgen_retries - INTEGER
+       Controls the number of retries to generate a stable privacy
+       address if a DAD conflict is detected.
+       Default: 3 (as specified in RFC7217)
+
 mld_qrv - INTEGER
        Controls the MLD query robustness variable (see RFC3810 9.1).
        Default: 2 (as specified by RFC3810 9.1)
@@ -1540,6 +1551,20 @@ use_optimistic - BOOLEAN
                0: disabled (default)
                1: enabled
 
+stable_secret - IPv6 address
+       This IPv6 address will be used as a secret to generate IPv6
+       addresses for link-local addresses and autoconfigured
+       ones. All addresses generated after setting this secret will
+       be stable privacy ones by default. This can be changed via the
+       addrgenmode ip-link. conf/default/stable_secret is used as the
+       secret for the namespace, the interface specific ones can
+       overwrite that. Writes to conf/all/stable_secret are refused.
+
+       It is recommended to generate this secret during installation
+       of a system and keep it stable after that.
+
+       By default the stable secret is unset.
+
 icmp/*:
 ratelimit - INTEGER
        Limit the maximal rates for sending ICMPv6 packets.