networkd: add minimal IP forwarding and masquerading support to .network files

This adds two new settings to networkd's .network files:
IPForwarding=yes and IPMasquerade=yes. The former controls the
"forwarding" sysctl setting of the interface, thus controlling whether
IP forwarding shall be enabled on the specific interface. The latter
controls whether a firewall rule shall be installed that exposes traffic
coming from the interface as coming from the local host to all other
interfaces.

This also enables both options by default for container network
interfaces, thus making "systemd-nspawn --network-veth" have network
connectivity out of the box.

This commit is contained in:

Lennart Poettering

2015-01-13 13:55:15 +01:00

parent 76917807eb

commit 5a8bcb674f

10 changed files with 232 additions and 70 deletions

									
										network/80-container-ve.network
									
		+2
		
												View File
												
				@@ -13,3 +13,5 @@ Driver=veth

				Address=0.0.0.0/28

				IPv4LL=yes

				DHCPServer=yes

				IPForward=yes

				IPMasquerade=yes