Re: [ipsec/xfrm] IPv6 fragmentation/path-mtu

2019-03-20 Thread Bram Yvahk
> > What I would've expected to happen is that 'Gateway A' would send out > two fragmented IPv6 packets containing the encrypted data. 'Gateway A' > is the originator of the IPv6 ESP packet so it can fragment these. > This similar to how it's done for IPv4. When the ESP is fragmented > then the IPv

Re: [ipsec/xfrm] IPv6 fragmentation/path-mtu

2019-03-19 Thread Bram Yvahk
Bram Yvahk wrote: > (What I think should happen in this particular case: do not send a > PKT_TOOBIG to the client but instead transmit fragmented IPv6 ESP > packets to accommodate the path-mtu) A follow-up to clarify my thinking (since my original mail might not be clear enough). Let me first st

[ipsec/xfrm] IPv6 fragmentation/path-mtu

2019-03-17 Thread Bram Yvahk
When playing a bit with IPv6 and XFRM I ran into a possible issue/edge case. In my testing I used linux 4.14.95, I was planning on testing this with latest kernel and investigating this a bit more deeply but so far I've not yet been able to do so... Only reason why I'm already submitting this mess