Re: [PATCH net-next] net: ipv4: Add ability to have GRE ignore DF bit in IPv4 payloads

From
David Miller <davem@davemloft.net>
Date
2016-06-11 06:02:04
Reply to
Philip Prindeville, 2016-06-07
From: "Philip Prindeville" <redacted>
Date: Tue,  7 Jun 2016 13:48:46 -0600
From: Philip Prindeville <redacted>

In the presence of firewalls which improperly block ICMP Unreachable
(including Fragmentation Required) messages, Path MTU Discovery is
prevented from working.

A workaround is to handle IPv4 payloads opaquely, ignoring the DF bit--as
is done for other payloads like AppleTalk--and doing transparent
fragmentation and reassembly.

Reviewed-by: Stephen Hemminger <stephen@networkplumber.org>
Signed-off-by: Philip Prindeville <redacted>
I think the feedback that this feature should be mutually exclusive
to pmtudisc is valid and you should address that.
Thread (9 messages) 9 messages, 5 authors, last reply 2016-06-13
Keyboard shortcuts
hback out one level
jnext message in thread / next series-diff position
kprevious message in thread / previous series-diff position
ldrill in
Escclose help / fold thread tree
?toggle this help