Networking

The following features, enhancements, and changes related to networking are introduced in this Oracle Linux 9 release.

iproute Packages Updated to Version 6.11.0

The iproute packages are updated to version 6.11.0.

Notable changes include improvements to Multiple Spanning Tree (MST) states and Berkeley Packet Filter (BPF) socket-local storage.

NetworkManager Forward Error Correction

NetworkManager now allows users to configure forward error correction (FEC) encoding on network interface controllers (NICs), reducing network overhead and latency. By configuring FEC encoding, users can reduce the overhead of redundant data transmission and lower network latency, resulting in improved network performance and reliability.

NetworkManager Can Automatically Add Routes to DNS Servers

The ipv4.routed-dns parameter in NetworkManager allows users to configure the system to automatically add routes to DNS servers through the correct network interface. This feature ensures that DNS queries are resolved correctly, even in complex network configurations.

NetworkManager Can Set ipv4.dhcp-send-hostname to Default To false

NetworkManager now allows users to set the ipv4.dhcp-send-hostname option to false for all IPv4 connections. This feature provides more control over DHCP client behavior, enabling users to customize their network configurations according to their needs. The option is also available on IPv6 connections.

NetworkManager Includes ip-ping-addresses And ip-ping-timeout Properties

NetworkManager is enhanced to include the ip-ping-addresses and ip-ping-timeout properties for connection settings. These properties enable users to configure NetworkManager to wait for a specific IP address to become reachable before activating a network connection, ensuring that dependent services are started only when the network is ready.

NetworkManager DHCP Client IPv6-only Preferred Option for DHCPv4

The IPv6-only preferred option for DHCPv4 is now available for NetworkManager clients. This feature allows users to prioritize IPv6 addresses over IPv4 addresses in dual-stack networks, or to use IPv4 addresses assigned manually while still preferring IPv6. The option can be disabled locally by setting the ipv6.method disabled option.

nmstate Includes the require-id-on-certificate Setting for Libreswan Configuration

The nmstate API now includes the require-id-on-certificate setting for Libreswan VPN configurations. This feature enables users to configure Subject Alternative Name (SAN) validation for IPsec connections, enhancing the security of VPN connections.

xdp-tools Updated to Version 1.5.1

The xdp-tools package is updated to version 1.5.1, which includes various enhancements and bug fixes.

Notable changes include the addition of the xdp-forward utility for XDP-accelerated packet forwarding and improved support for User Datagram Protocol (UDP) packet sizes.

IPsec HW Offload With ESN Available on Bonding Devices

Bonding devices can be configured with IPsec Hardware (HW) offload with Extended Sequence Numbers (ESN). This feature enables users to configure IPsec connections with improved security and performance on bonding devices.

nmstate Can Configure IPvLANs

The nmstate API can configure an IPvLAN, a virtual network interface that enhances network management and container networking. IPvLAN provides a flexible and efficient way to manage network interfaces, making it easier to deploy and manage complex network configurations.