dotfiles/root/etc/sysctl.d/40-ipv6-privacy.conf
2026-03-11 14:10:12 +01:00

27 lines
1.1 KiB
Text

# Enable IPv6 temporary addresses (RFC 4941).
#
# On IPv6 networks using SLAAC (Stateless Address Autoconfiguration),
# hosts automatically generate their own addresses from the advertised
# network prefix. Normally this results in a single stable address that
# remains constant for the duration of the connection.
#
# Temporary addresses add additional short-lived IPv6 addresses that are
# periodically regenerated by the kernel. These addresses are preferred
# for outgoing connections (for example web browsing) so that remote
# services cannot reliably track a device by its stable IPv6 address.
#
# The stable address still exists and is used for:
# - inbound connections
# - local services
# - neighbor discovery
#
# Values:
# 0 = disable temporary addresses
# 1 = enable temporary addresses but prefer the stable address
# 2 = enable temporary addresses and prefer them for outbound traffic
#
# "default" applies to interfaces created after boot, while "all"
# applies the setting to existing interfaces as well.
net.ipv6.conf.default.use_tempaddr = 2
net.ipv6.conf.all.use_tempaddr = 2