Re: [22/*] [NETFILTER] Use correct IPsec MTU in TCPMSS

netdev

Re: [22/*] [NETFILTER] Use correct IPsec MTU in TCPMSS

To:	Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Subject:	Re: [22/*] [NETFILTER] Use correct IPsec MTU in TCPMSS
From:	"David S. Miller" <davem@xxxxxxxxxxxxx>
Date:	Fri, 18 Mar 2005 10:40:13 -0800
Cc:	kuznet@xxxxxxxxxxxxx, yoshfuji@xxxxxxxxxxxxxx, kaber@xxxxxxxxx, netdev@xxxxxxxxxxx
In-reply-to:	<20050318091129.GA28658@gondor.apana.org.au>
References:	<20050214221607.GC18465@gondor.apana.org.au> <20050306213214.7d8a143d.davem@davemloft.net> <20050307103536.GB7137@gondor.apana.org.au> <20050308102741.GA23468@gondor.apana.org.au> <20050314102614.GA9610@gondor.apana.org.au> <20050314105313.GA21001@gondor.apana.org.au> <20050314111002.GA29156@gondor.apana.org.au> <20050315091904.GA6256@gondor.apana.org.au> <20050315095837.GA7130@gondor.apana.org.au> <20050318090310.GA28443@gondor.apana.org.au> <20050318091129.GA28658@gondor.apana.org.au>
Sender:	netdev-bounce@xxxxxxxxxxx

On Fri, 18 Mar 2005 20:11:29 +1100
Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> wrote:

> This patch makes ipt_TCPMSS use the correct MTU value for clamping.
> This is a bit tricky actually since TCPMSS can be used in FORWARD,
> LOCAL_OUT as well as POST_ROUTING.
> 
> In the first two cases we haven't performed IPsec yet so dst_mtu
> obviously does the right thing.  As it is, POST_ROUTING is performed
> after xfrm_output so MSS clamping is useless there.
> 
> With Patrick's IPsec netfilter stuff, there will be a POST_ROUTING
> processing before IPsec processing, in which case dst_mtu also returns
> exactly what we want.
> 
> Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

Applied, thanks Herbert.

> BTW Patrick, how is the IPsec netfilter stuff going?

That boy is seriously backlogged, so I'm not sure how much time
he's gotten to work on that yet.

[More with this subject...]

<Prev in Thread]	Current Thread	[Next in Thread>
*[23/] [IPV4] Kill remaining unnecessary uses of dst_pmtu*, (continued)* *[23/] [IPV4] Kill remaining unnecessary uses of dst_pmtu*, Herbert Xu* *[24/] [IPSEC] Get ttl from child instead of path*, Herbert Xu* *[25/] [NET] Kill unnecessary uses of dst_path_metric*, Herbert Xu* *[26/] [NET] Kill dst_pmtu/dst_path_metric*, Herbert Xu* *[27/] [NET] Make dst_allfrag use dst instead of dst->path*, Herbert Xu* *Re: [27/] [NET] Make dst_allfrag use dst instead of dst->path*, David S. Miller* *Re: [26/] [NET] Kill dst_pmtu/dst_path_metric*, David S. Miller* *Re: [25/] [NET] Kill unnecessary uses of dst_path_metric*, David S. Miller* *Re: [24/] [IPSEC] Get ttl from child instead of path*, David S. Miller* *Re: [23/] [IPV4] Kill remaining unnecessary uses of dst_pmtu*, David S. Miller* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, David S. Miller* <= *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Patrick McHardy* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Ludo Stellingwerff* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Lennert Buytenhek* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Patrick McHardy* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Ludo Stellingwerff* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Patrick McHardy* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, jamal* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Patrick McHardy* *Extending xfrm_selector (Was: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS)*, Herbert Xu* *Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, David S. Miller*

Previous by Date:	*Re: [21/] [IPv4] Fix MTU check in ipmr_queue_xmit*, David S. Miller*
Next by Date:	*Re: [23/] [IPV4] Kill remaining unnecessary uses of dst_pmtu*, David S. Miller*
Previous by Thread:	*Re: [23/] [IPV4] Kill remaining unnecessary uses of dst_pmtu*, David S. Miller*
Next by Thread:	*Re: [22/] [NETFILTER] Use correct IPsec MTU in TCPMSS*, Patrick McHardy*
Indexes:	[Date] [Thread] [Top] [All Lists]