Rob Murray

Results 35 issues of Rob Murray

### Description https://github.com/moby/moby/pull/47771 added env var `DOCKER_BRIDGE_PRESERVE_KERNEL_LL=1`, an option to not-delete kernel-assigned link-local addresses. This should probably be the default behaviour, and the env-var should be removed - needs review...

status/1-design-review
kind/enhancement
area/networking
area/networking/ipv6

**- What I did** - Closes https://github.com/moby/moby/issues/47639 Until now it's been possible to set per-interface sysctls using, for example, `--sysctl net.ipv6.conf.eth0.accept_ra=2`. But, the index in the interface name is allocated...

kind/enhancement
area/networking
impact/changelog

### Description Once it's easy to enable IPv6 on a network, without needing to configure IPAM (and just end up with kernel-assigned addresses) ... remove the env-var escape hatch that...

kind/enhancement
area/networking
area/networking/ipv6

**- What I did** Allow forwarding from any firewalld zone to the 'docker' zone. This makes it possible to use routable IPv6 addresses on a bridge network, with masquerading disabled,...

status/2-code-review
kind/enhancement
area/networking
impact/changelog
impact/documentation
area/networking/firewalld

**- What I did** Make it safe to supply the internal DNS server's own address as an external DNS server. Fix https://github.com/moby/moby/issues/47716 **- How I did it** The internal resolver...

status/2-code-review
area/networking
kind/bugfix
area/networking/dns

**- What I did** **_Internal resolver for default bridge network_** Until now, containers on the default bridge network have been configured to talk directly to external DNS servers - their...

kind/enhancement
area/networking
impact/changelog
impact/documentation
area/networking/dns

**- What I did** In 26.1, https://github.com/moby/moby/pull/47584, we added daemon feature flag `windows-dns-proxy` which could be set to `true` to make `nslookup` work in Windows containers, by forwarding requests from...

platform/windows
status/2-code-review
kind/feature
area/networking
area/networking/dns

**- What I did** When running WSL2 with mirrored mode networking, add an iptables rule to skip DNAT for packets arriving on interface loopback0 that are addressed to a localhost...

status/1-design-review
kind/feature
area/networking
process/cherry-pick
area/lcow
area/networking/firewalling
area/networking/d/bridge

### Description @akerouanton noted in https://github.com/moby/moby/pull/47871#discussion_r1628468329 that this code for SCTP checksum fixup can now be removed ... https://github.com/moby/moby/blob/8c2e4ca6d63f7d2e8564bee79965c426755748f2/libnetwork/drivers/bridge/port_mapping_linux.go#L542-L560

status/0-triage
kind/enhancement
area/networking
area/networking/d/bridge

### Description Related to: - https://github.com/moby/moby/pull/47602 - https://github.com/moby/moby/pull/48020 https://github.com/moby/moby/pull/47602 set up the internal resolver for the default bridge, removing the need for checking whether systemd's resolver is running (to find...

kind/feature
area/networking
area/networking/d/bridge
area/networking/dns