SOLVED VNET and iocage documented tunables

[kevanbrown]

In the latest version of TrueNAS (12.0-U5), are the following SYSCTL tunables still required for jail VNET operation per the iocage documentation? If so, are there any ill effects to TrueNAS operation caused by configuring them?

Networking — iocage 1.2 documentation

net.inet.ip.forwarding=1 # Enable IP forwarding between interfaces
net.link.bridge.pfil_onlyip=0 # Only pass IP packets when pfil is enabled
net.link.bridge.pfil_bridge=0 # Packet filter on the bridge interface
net.link.bridge.pfil_member=0 # Packet filter on the member interface

 

[Patrick M. Hausen]

This part of the iocage documentation is irrelevant. There is no pfilter in TrueNAS. And the TrueNAS host does not need to be a router. It's all layer 2.

 

[kevanbrown]

This part of the iocage documentation is irrelevant. There is no pfilter in TrueNAS. And the TrueNAS host does not need to be a router. It's all layer 2.

Thank you @Patrick M. Hausen for the quick and concise response. So no need to implement any of these based on your response.