ipv6: remove min MTU check for ipsec tunnels
Subsystems (3)
PATCH v2 1/1 ipv6: remove min MTU check for ipsec tunnels
With 749439bfac "fix udpv6 sendmsg crash caused by too small MTU" ipsec tunnels that report a MTU less than IPV6_MIN_MTU are broken even for packets that are smaller than IPV6_MIN_MTU.
According to rfc2473#section-7.1
if the original IPv6 packet is equal or smaller than the IPv6 minimum link MTU, the tunnel entry-point node encapsulates the original packet, and subsequently fragments the resulting IPv6 tunnel packet into IPv6 fragments that do not exceed the Path MTU to the tunnel exit-point.
Dropping the MTU check for ipsec tunnel destinations.
--- net/ipv6/ip6_output.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
net/ipv6/ip6_output.c +1 -1
@@ -1235,7 +1235,7 @@ static int ip6_setup_cork(struct sock *sk, struct inet_cork_full *cork,if (np->frag_size) mtu = np->frag_size; } -if (mtu <IPV6_MIN_MTU ) +if (!(rt->dst.flags &DST_XFRM_TUNNEL ) && mtu <IPV6_MIN_MTU )return -EINVAL ; cork->base.fragsize = mtu;if (dst_allfrag (xfrm_dst_path (&rt->dst)))
Signature · 1 line
1.9.1
Hello!
Quoted 1 line · Ashwanth Goli
With
749439bfac"fix udpv6 sendmsg crash caused by too small MTU"
When you cite a comnmit, you must specify at least 12-digit SHA1 and
enclose the summary in (""), not just "".
Quoted 12 lines
ipsec tunnels that report a MTU less than
IPV6_MIN_MTUare broken even for packets that are smaller thanIPV6_MIN_MTU.According to rfc2473#section-7.1
if the original IPv6 packet is equal or smaller than the IPv6 minimum link MTU, the tunnel entry-point node encapsulates the original packet, and subsequently fragments the resulting IPv6 tunnel packet into IPv6 fragments that do not exceed the Path MTU to the tunnel exit-point.
Quoted 3 lines
Dropping the MTU check for ipsec tunnel destinations.
Signed-off-by Ashwanth Goli <[email protected]>
[...]
MBR, Sergei
Quoted 17 lines · Sergei Shtylyov
Quoted 1 line
With
749439bfac"fix udpv6 sendmsg crash caused by too small MTU"When you cite a comnmit, you must specify at least 12-digit SHA1 and
enclose the summary in (""), not just "".Quoted 12 lines
ipsec tunnels that report a MTU less than
IPV6_MIN_MTUare broken even for packets that are smaller thanIPV6_MIN_MTU.According to rfc2473#section-7.1
if the original IPv6 packet is equal or smaller than the IPv6 minimum link MTU, the tunnel entry-point node encapsulates the original packet, and subsequently fragments the resulting IPv6 tunnel packet into IPv6 fragments that do not exceed the Path MTU to the tunnel exit-point.
Quoted 4 lines
Quoted 3 lines
Dropping the MTU check for ipsec tunnel destinations.
Signed-off-by Ashwanth Goli <[email protected]>[...]
And you need to specify the patch version change log after the --- tear line.
MBR, Sergei