anchor.diff:  # ----------
   
   # Only enable IP traffic forwarding, if required.
  -net.ipv4.ip_forward = <%= ((@node['network']['forwarding']) ? "1" : "0") %>
  -net.ipv6.conf.all.forwarding = <%= ((@node['network']['forwarding']) ? "1" : "0") %>
  +net.ipv4.ip_forward = <%= ((@node['network']['forwarding']) ? 1 : 0) %>
  +net.ipv6.conf.all.forwarding = <%= ((@node['network']['forwarding']) ? 1 : 0) %>
   
   # Enable RFC-recommended source validation feature. It should not be used for
   # routers on complex networks, but is helpful for end hosts and routers serving
  
positive.code: #           resolutions for global and link addresses are replied
  # * **4-7** - reserved
  # * **8** - do not reply for all local addresses
  net.ipv4.conf.eth0.arp_announce = <%= ((@node['network']['arp']['restricted']) ? "2" : "0") %>
  
  # RFC 1337 fix F1
  net.ipv4.tcp_rfc1337 = 1
  
negative.code: net.ipv4.icmp_ratemask = 88089
  
  # Disable or Enable IPv6 as it is needed.
  net.ipv6.conf.all.disable_ipv6 = <%= ((@node['network']['ipv6']['enable']) ? 0 : 1) %>
  
  # Protect against wrapping sequence numbers at gigabit speeds:
  net.ipv4.tcp_timestamps = 0
  