Guys, thanks heaps for this, much appreciated! Cheers.
Mike -----Original Message----- From: Philip Prindeville [mailto:[email protected]] Sent: Friday, 21 July 2017 10:35 AM To: Stephen Hemminger <[email protected]> Cc: [email protected]; Michele Lucini <[email protected]> Subject: Re: [PATCH v3] iproute2: add support for GRE ignore-df knob > On Jul 20, 2017, at 6:26 PM, Stephen Hemminger <[email protected]> > wrote: > > On Thu, 20 Jul 2017 13:06:10 -0600 > "Philip Prindeville" <[email protected]> wrote: > >> From: Philip Prindeville <[email protected]> >> >> In the presence of firewalls which improperly block ICMP Unreachable >> (including Fragmentation Required) messages, Path MTU Discovery is >> prevented from working. >> >> The workaround is to handle IPv4 payloads opaquely, ignoring the DF >> bit. >> >> Kernel commit 22a59be8b7693eb2d0897a9638f5991f2f8e4ddd ("net: ipv4: >> Add ability to have GRE ignore DF bit in IPv4 payloads") is >> complemented by this user-space changeset which exposes control of >> this setting. >> >> Reviewed-by: Stephen Hemminger <[email protected]> >> Signed-off-by: Philip Prindeville <[email protected]> > > Applied, thanks Philip Thanks! Sorry I didn’t realize that the first submission a year ago hadn’t been applied and it took me this long to redux and resubmit it. Michele: hopefully this comes out in your distro-of-choice fairly soon. Like I said, I thought this had already been rolled in. -Philip
