Thread (7 messages) flat view 7 messages, 7 authors, 14h ago

Re: [PATCH net] tunnels: Drop stale dst when building an ICMP error for PMTUD

From: Yaroslav Dudkov <hidden>
Date: 2026-09-02 19:53:10
Also in: stable

On Wed, Sep 02, 2026 at 07:01:12PM +0000, Ido Schimmel wrote:
Fix this by making sure that the ICMP error packet does not have a valid
dst entry, thereby forcing the IP layer to perform a route lookup.
Tested on net with this patch applied:

- pmtu.sh: all 16 bridged and all 16 OVS subtests pass, both with and
  without br_netfilter loaded. Without the patch, loading br_netfilter
  makes all 16 bridged subtests fail (the reply gets delivered and exits
  with the old -w 1 failure).

- The forwarded-sender reproducer from my earlier mail goes from
  10 tx / 0 rx / no errors to 10 tx / 8 rx / +1 error, the error being
  "From 192.168.4.1 icmp_seq=1 Frag needed and DF set (mtu = 3950)" --
  the tunnel's PTB reaching the sender.

Tested-by: Yaroslav Dudkov <redacted>
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help