netdev
[Top] [All Lists]

Re: IPsec and Path MTU

To: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Subject: Re: IPsec and Path MTU
From: "David S. Miller" <davem@xxxxxxxxxx>
Date: Thu, 17 Jun 2004 15:22:16 -0700
Cc: kuznet@xxxxxxxxxxxxx, jmorris@xxxxxxxxxx, netdev@xxxxxxxxxxx
In-reply-to: <20040617213130.GB14089@xxxxxxxxxxxxxxxxxxx>
References: <20040616202341.GD29781@xxxxxxxxxxxxx> <E1BajZO-0001UK-00@xxxxxxxxxxxxxxxxxxxxxxxx> <20040617105843.314dfe30.davem@xxxxxxxxxx> <20040617213130.GB14089@xxxxxxxxxxxxxxxxxxx>
Sender: netdev-bounce@xxxxxxxxxxx
On Fri, 18 Jun 2004 07:31:30 +1000
Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> wrote:

> On Thu, Jun 17, 2004 at 10:58:43AM -0700, David S. Miller wrote:
> >
> > Do you see what xfrm_get_mss() does?  It calls into x->type->get_max_size()
> > and this is where ESP reports this kind of thing (re: block padding).
> 
> Yes I know.  But this is only used in TCP currently.

Right.  I'm sorry, is someone trying to do NFS/UDP over IPSEC?
My condolences.  :-)

More seriously, it is a fringe case.  We do need to handle it,
but it is no accident that there haven't been very
many folks complaining about it.

<Prev in Thread] Current Thread [Next in Thread>