On Thu, 20 Jul 2017 13:06:10 -0600
"Philip Prindeville" <phil...@redfish-solutions.com> wrote:
> From: Philip Prindeville <phil...@redfish-solutions.com>
>
> In the presence of firewalls which improperly block ICMP Unreachable
> (including Fragmentation Required) messages, Path MTU Discovery is
> prevented from working.
>
> The workaround is to handle IPv4 payloads opaquely, ignoring the DF
> bit.
>
> Kernel commit 22a59be8b7693eb2d0897a9638f5991f2f8e4ddd ("net: ipv4:
> Add ability to have GRE ignore DF bit in IPv4 payloads") is
> complemented by this user-space changeset which exposes control of
> this setting.
>
> Reviewed-by: Stephen Hemminger <step...@networkplumber.org>
> Signed-off-by: Philip Prindeville <phil...@redfish-solutions.com>
Applied, thanks Philip
