net.ipv4.conf.default.accept_source_route = 0
net.ipv4.conf.default.log_martians = 1
net.ipv6.conf.all.accept_redirects = 0
+# TODO forwarding required by k8s
+net.ipv6.conf.all.forwarding = 1
net.ipv6.conf.default.accept_redirects = 0
EOF
sysctl --system