RE: [PATCH v3] iproute2: add support for GRE ignore-df knob

2017-09-12 Thread Michele Lucini
support for GRE ignore-df knob > On Jul 20, 2017, at 6:26 PM, Stephen Hemminger > wrote: > > On Thu, 20 Jul 2017 13:06:10 -0600 > "Philip Prindeville" wrote: > >> From: Philip Prindeville >> >> In the presence of firewalls which improperly block

Re: [PATCH v3] iproute2: add support for GRE ignore-df knob

2017-07-20 Thread Philip Prindeville
> On Jul 20, 2017, at 6:26 PM, Stephen Hemminger > wrote: > > On Thu, 20 Jul 2017 13:06:10 -0600 > "Philip Prindeville" wrote: > >> From: Philip Prindeville >> >> In the presence of firewalls which improperly block ICMP Unreachable >> (including Fragmentation Required) messages, Path MTU Di

Re: [PATCH v3] iproute2: add support for GRE ignore-df knob

2017-07-20 Thread Stephen Hemminger
On Thu, 20 Jul 2017 13:06:10 -0600 "Philip Prindeville" wrote: > From: Philip Prindeville > > In the presence of firewalls which improperly block ICMP Unreachable > (including Fragmentation Required) messages, Path MTU Discovery is > prevented from working. > > The workaround is to handle IPv4

[PATCH v3] iproute2: add support for GRE ignore-df knob

2017-07-20 Thread Philip Prindeville
From: Philip Prindeville In the presence of firewalls which improperly block ICMP Unreachable (including Fragmentation Required) messages, Path MTU Discovery is prevented from working. The workaround is to handle IPv4 payloads opaquely, ignoring the DF bit. Kernel commit 22a59be8b7693eb2d0897a9