第 18 章 Networking

Network team driver was removed

The teamd service and the libteam library were removed in Red Hat Enterprise Linux 10. As a replacement, configure a bond instead of a network team.

Removed support for network configuration files in the ifcfg format

Starting with RHEL 9.0, RHEL stored newly created network configurations in a key file format in the /etc/NetworkManager/system-connections/ directory. The connections, for which the configurations had already been stored from previous times in the /etc/sysconfig/network-scripts/ directory in the old ifcfg format still worked uninterrupted. However, with the RHEL 10 release, the support for the ifcfg format based network configuration files was removed.

The dhclient utility was removed

The dhclient utility is a client program used to obtain IP addresses, network configuration, and other information from a DHCP server. Since dhclient is no longer developed as of early 2022, the utility was removed in Red Hat Enterprise Linux 10. As a consequence of the removal, you can no longer set dhcp=dhclient in /etc/NetworkManager.conf. As a replacement, use the dhcp=internal (default) in your NetworkManager configuration.

Removed NIC device drivers related to iPXE

Internet Preboot eXecution Environment (iPXE) firmware provides a range of boot options over a network often used in environments, where machines need to boot remotely. Among others, it contains a large number of device drivers. With the RHEL 10 release, the following will be removed:

NetworkManager-initscripts-updown is not available

The NetworkManager-initscripts-updown sub-package is removed in RHEL 10 because the related network-scripts package had already been removed in RHEL 9.

Moving some kernel modules to kernel-modules-extra

All kernel modules related to the following utilities have been moved to the kernel-modules-extra package:

ATM encapsulation has been removed

Asynchronous Transfer Mode (ATM) encapsulation enables Layer-2 (Point-to-Point Protocol, Ethernet) or Layer-3 (IP) connectivity for the ATM Adaptation Layer 5 (AAL-5). In RHEL 9, the ATM implementation was unsupported and deprecated. In RHEL 10, the kernel feature has been disabled in the kernel, and ATM is no longer available.

The PF_KEYv2 kernel API has been removed

In earlier RHEL versions, applications could configure the kernel’s IPsec implementation by using the deprecated PV_KEYv2 and the newer netlink API. PV_KEYv2 has not been actively maintained upstream and is missing important security features, such as modern ciphers, offload, and extended sequence number support. As a result, the PV_KEYv2 API has been removed in RHEL 10. If you used this kernel API in applications, migrate your applications to use the modern netlink API as an alternative.

The firewalld lockdown feature has been removed

The firewalld lockdown feature could not prevent processes that are running as root from adding themselves to the allow list. In RHEL 10, this feature has been removed.