netdev
[Top] [All Lists]

Re: IPsec and Path MTU

To: Alexey Kuznetsov <kuznet@xxxxxxxxxxxxx>
Subject: Re: IPsec and Path MTU
From: "David S. Miller" <davem@xxxxxxxxxx>
Date: Wed, 16 Jun 2004 13:49:04 -0700
Cc: herbert@xxxxxxxxxxxxxxxxxxx, jmorris@xxxxxxxxxx, netdev@xxxxxxxxxxx
In-reply-to: <20040616202341.GD29781@ms2.inr.ac.ru>
References: <20040615124334.GA25164@gondor.apana.org.au> <20040616121026.GA1169@gondor.apana.org.au> <20040616202341.GD29781@ms2.inr.ac.ru>
Sender: netdev-bounce@xxxxxxxxxxx
On Thu, 17 Jun 2004 00:23:41 +0400
Alexey Kuznetsov <kuznet@xxxxxxxxxxxxx> wrote:

> Actually, the last time when we discussed this we had only one
> but _damn_ ugly problem. We have to remember original packet content
> to reply with ICMP correctly, when encapsulating. Is it possible
> that you are confused with this? We do send invalid ICMP_FRAG_NEEDED
> from ip_fragment. PMTU discovery will work only if we reply to original,
> not transofrmed packet. See?

Yes, it seems we should finally implement this beast.

<Prev in Thread] Current Thread [Next in Thread>