Re: [16/*] [INET] Take IPsec overhead into account in tunnels

To:	Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Subject:	Re: [16/*] [INET] Take IPsec overhead into account in tunnels
From:	Lennert Buytenhek <buytenh@xxxxxxxxxxxxxx>
Date:	Tue, 15 Mar 2005 11:20:52 +0100
Cc:	"David S. Miller" <davem@xxxxxxxxxxxxx>, Alexey Kuznetsov <kuznet@xxxxxxxxxxxxx>, YOSHIFUJI Hideaki <yoshfuji@xxxxxxxxxxxxxx>, Patrick McHardy <kaber@xxxxxxxxx>, netdev@xxxxxxxxxxx
In-reply-to:	<20050315095837.GA7130@gondor.apana.org.au>
References:	<20050214221433.GB18465@gondor.apana.org.au> <20050214221607.GC18465@gondor.apana.org.au> <20050306213214.7d8a143d.davem@davemloft.net> <20050307103536.GB7137@gondor.apana.org.au> <20050308102741.GA23468@gondor.apana.org.au> <20050314102614.GA9610@gondor.apana.org.au> <20050314105313.GA21001@gondor.apana.org.au> <20050314111002.GA29156@gondor.apana.org.au> <20050315091904.GA6256@gondor.apana.org.au> <20050315095837.GA7130@gondor.apana.org.au>
Sender:	netdev-bounce@xxxxxxxxxxx
User-agent:	Mutt/1.4.1i

On Tue, Mar 15, 2005 at 08:58:37PM +1100, Herbert Xu wrote:

> This patch uses dst_mtu instead of dst_pmtu in the various tunnel
> implementations.  As it is they simply ignore the IPsec overhead.
> This leads to bogus MTU values inside the tunnels.

I've not been able to get ipsec-encapsulated ipip/gre tunneling to
work properly (without MTU issues) so far, and never had the time to
properly dig into it.  If this is going to be fixed, that would be
great.

--L

<Prev in Thread]	Current Thread	[Next in Thread>
*Re: [17/] [NET] Replace dst_pmtu with dst_mtu*, (continued)* *Re: [17/] [NET] Replace dst_pmtu with dst_mtu*, David S. Miller* *Re: [17/] [NET] Replace dst_pmtu with dst_mtu*, Patrick McHardy* Replace send_unreach with icmp_send, Herbert Xu Re: Replace send_unreach with icmp_send, Patrick McHardy [IPV4] Make ipt_REJECT use icmp_send again, Herbert Xu Re: [IPV4] Make ipt_REJECT use icmp_send again, Patrick McHardy Re: [IPV4] Make ipt_REJECT use icmp_send again, David S. Miller [IPV4] Send TCP reset through dst_output in ipt_REJECT, Herbert Xu Re: [IPV4] Send TCP reset through dst_output in ipt_REJECT, David S. Miller *Re: [17/] [NET] Replace dst_pmtu with dst_mtu*, Herbert Xu* *Re: [16/] [INET] Take IPsec overhead into account in tunnels*, Lennert Buytenhek* <= *Re: [16/] [INET] Take IPsec overhead into account in tunnels*, Herbert Xu* *Re: [16/] [INET] Take IPsec overhead into account in tunnels*, David S. Miller* *[21/] [IPv4] Fix MTU check in ipmr_queue_xmit*, Herbert Xu* *[22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Herbert Xu* *[23/] [IPV4] Kill remaining unnecessary uses of dst_pmtu*, Herbert Xu* *[24/] [IPSEC] Get ttl from child instead of path*, Herbert Xu* *[25/] [NET] Kill unnecessary uses of dst_path_metric*, Herbert Xu* *[26/] [NET] Kill dst_pmtu/dst_path_metric*, Herbert Xu* *[27/] [NET] Make dst_allfrag use dst instead of dst->path*, Herbert Xu* *Re: [27/] [NET] Make dst_allfrag use dst instead of dst->path*, David S. Miller*

Previous by Date:	*[17/] [NET] Replace dst_pmtu with dst_mtu*, Herbert Xu*
Next by Date:	*Re: [16/] [INET] Take IPsec overhead into account in tunnels*, Herbert Xu*
Previous by Thread:	*Re: [17/] [NET] Replace dst_pmtu with dst_mtu*, Herbert Xu*
Next by Thread:	*Re: [16/] [INET] Take IPsec overhead into account in tunnels*, Herbert Xu*
Indexes:	[Date] [Thread] [Top] [All Lists]