Networking
The following features, enhancements, and changes related to networking are introduced in this Oracle Linux 9 release.
iproute
Packages Updated to Version 6.11.0
The iproute
packages are updated to version 6.11.0.
Notable changes include improvements to Multiple Spanning Tree (MST) states and Berkeley Packet Filter (BPF) socket-local storage.
NetworkManager Forward Error Correction
NetworkManager now allows users to configure forward error correction (FEC) encoding on network interface controllers (NICs), reducing network overhead and latency. By configuring FEC encoding, users can reduce the overhead of redundant data transmission and lower network latency, resulting in improved network performance and reliability.
NetworkManager Can Automatically Add Routes to DNS Servers
The ipv4.routed-dns
parameter in NetworkManager allows users to configure the system to automatically add routes to DNS servers through the correct network interface. This feature ensures that DNS queries are resolved correctly, even in complex network configurations.
NetworkManager Can Set ipv4.dhcp-send-hostname
to Default To
false
NetworkManager now allows users to set the ipv4.dhcp-send-hostname
option to false
for all IPv4 connections. This feature provides more
control over DHCP client behavior, enabling users to customize their network
configurations according to their needs. The option is also available on IPv6
connections.
NetworkManager Includes ip-ping-addresses
And
ip-ping-timeout
Properties
NetworkManager is enhanced to include the ip-ping-addresses
and
ip-ping-timeout
properties for connection settings. These
properties enable users to configure NetworkManager to wait for a specific IP address to
become reachable before activating a network connection, ensuring that dependent
services are started only when the network is ready.
NetworkManager DHCP Client IPv6-only Preferred Option for DHCPv4
The IPv6-only preferred option for DHCPv4 is now available for NetworkManager clients.
This feature allows users to prioritize IPv6 addresses over IPv4 addresses in dual-stack
networks, or to use IPv4 addresses assigned manually while still preferring IPv6. The
option can be disabled locally by setting the ipv6.method disabled
option.
nmstate
Includes the require-id-on-certificate
Setting
for Libreswan Configuration
The nmstate
API now includes the
require-id-on-certificate
setting for Libreswan VPN configurations.
This feature enables users to configure Subject Alternative Name (SAN) validation for
IPsec connections, enhancing the security of VPN connections.
xdp-tools
Updated to Version 1.5.1
The xdp-tools
package is updated to version 1.5.1, which includes various
enhancements and bug fixes.
Notable changes include the addition of the xdp-forward
utility for
XDP-accelerated packet forwarding and improved support for User Datagram Protocol (UDP) packet
sizes.
IPsec HW Offload With ESN Available on Bonding Devices
Bonding devices can be configured with IPsec Hardware (HW) offload with Extended Sequence Numbers (ESN). This feature enables users to configure IPsec connections with improved security and performance on bonding devices.
nmstate
Can Configure IPvLANs
The nmstate
API can configure an IPvLAN, a virtual network interface
that enhances network management and container networking. IPvLAN provides a flexible
and efficient way to manage network interfaces, making it easier to deploy and manage
complex network configurations.