在 2020/11/18 15:00, Cong Wang 写道: > On Tue, Nov 17, 2020 at 5:37 PM <we...@ucloud.cn> wrote: >> From: wenxu <we...@ucloud.cn> >> >> Currently kernel tc subsystem can do conntrack in cat_ct. But when several >> fragment packets go through the act_ct, function tcf_ct_handle_fragments >> will defrag the packets to a big one. But the last action will redirect >> mirred to a device which maybe lead the reassembly big packet over the mtu >> of target device. >> >> This patch add support for a xmit hook to mirred, that gets executed before >> xmiting the packet. Then, when act_ct gets loaded, it configs that hook. >> The frag xmit hook maybe reused by other modules. >> >> Signed-off-by: wenxu <we...@ucloud.cn> >> --- >> v2: make act_frag just buildin for tc core but not a module >> return an error code from tcf_fragment >> depends on INET for ip_do_fragment > Much better now. > > >> +#ifdef CONFIG_INET >> + ret = ip_do_fragment(net, skb->sk, skb, sch_frag_xmit); >> +#endif > > Doesn't the whole sch_frag need to be put under CONFIG_INET? > I don't think fragmentation could work without CONFIG_INET.
I have already test with this. Without CONFIG_INET it is work. And only the ip_do_fragment depends on CONFIG_INET > > Thanks. >