On Fri, Mar 19, 2021 at 06:27:58PM +0800, Xin Long wrote: > BEET mode replaces the IP(6) Headers with new IP(6) Headers when sending > packets. However, when it's a fragment before the replacement, currently > kernel keeps the fragment flag and replace the address field then encaps > it with ESP. It would cause in RX side the fragments to get reassembled > before decapping with ESP, which is incorrect. > > In Xiumei's testing, these fragments went over an xfrm interface and got > encapped with ESP in the device driver, and the traffic was broken. > > I don't have a good way to fix it, but only to warn this out in dmesg.
Looks like a protocol bug. BEET mode never made it to a standard... > > Reported-by: Xiumei Mu <x...@redhat.com> > Signed-off-by: Xin Long <lucien....@gmail.com> Applied, thanks!
