Historical context: Though we are a leaf device, we do end up connected to multiple networks at the same time.  rp_filter was requested by our security team to prevent spoofed packets arriving on one network interface to be accepted as if coming from another interface.  

i assumed we just copied it from Gentoo which has been setting it this way for a while (longer than CrOS has existed).  the history of the file shows that much as well.  if there's any bugs/docs to link to, that'd be great.

mike - thanks for the heads up!

I'm inclined to believe jetstream will want rp_filter on for both whirlwind and arkham builds. Gale is still using it's own config (but I'll get to that soon).

But I'm not the TL here and don't understand the guts of networking stack well enough. Adding some folks who do.

Note that rp_filter is actively manipulated by shill during the connection and portal detection process to enable / disable simultaneous probing using multiple default routes.

So should this bug be closed WontFix?

Grant is correct that Jetstream devices does still want to use rp_filter.  I would either support closing as WontFix or separating it into a config which does not apply to Jetstream devices.

OK, let's close it.