Make the example bgpd.conf work with 4byte ASN out of the box.
Use local-as in community and large-community stanzas since that will
be expanded at runtime. For communities that only work with 2byte

Make the example bgpd.conf work with 4byte ASN out of the box.
Use local-as in community and large-community stanzas since that will
be expanded at runtime. For communities that only work with 2byte ASN
the filter will never match (or nothing will be set / deleted) since
a 4byte ASN can never match.

We want an bgpd.conf example ruleset that is sensible, works and is a
good starting point for beginners. In other words we should not add
traps to the config.

OK deraadt@ job@

show more ...

use kmem(4) instead of "all memory" which has more information about
what exactly is allowed, and specifically refers to allowkmem (and that
it permits both /dev/mem and /dev/kmem). discussed with de

use kmem(4) instead of "all memory" which has more information about
what exactly is allowed, and specifically refers to allowkmem (and that
it permits both /dev/mem and /dev/kmem). discussed with deraadt

show more ...

Mention kern.allowdt and kern.allowkmem in examples/sysctl.conf.
From espie, ok claudio mpi

draft-ietf-v6ops-rfc3849-update turned into RFC9637, adjust comment

Add 5f00::/16 segment routing SRv6 SIDs prefix to example bogon list

"In SRv6, SR source nodes initiate packets with a segment identifier in
the Destination Address of the IPv6 header, and SR segmen

Add 5f00::/16 segment routing SRv6 SIDs prefix to example bogon list

"In SRv6, SR source nodes initiate packets with a segment identifier in
the Destination Address of the IPv6 header, and SR segment endpoint
nodes process a local segment present in the Destination Address of an
IPv6 header."

https://www.iana.org/assignments/iana-ipv6-special-registry/
https://datatracker.ietf.org/doc/html/draft-ietf-6man-sids

OK phessler@

show more ...

3fff::/20 has been set aside as an additional documentation prefix

Per https://www.iana.org/assignments/iana-ipv6-special-registry/
and https://datatracker.ietf.org/doc/html/draft-ietf-v6ops-rfc3849

3fff::/20 has been set aside as an additional documentation prefix

Per https://www.iana.org/assignments/iana-ipv6-special-registry/
and https://datatracker.ietf.org/doc/html/draft-ietf-v6ops-rfc3849-update

OK phessler@ claudio@

show more ...

Recommend veb(4) instead of bridge(4).

bridge(4) has weird interactions with traffic crossing the bridge.

Missing change after updating the faq pointed out by ajacoutot
OK dv