Guys, thanks heaps for this, much appreciated! Cheers.
Mike -----Original Message----- From: Philip Prindeville [mailto:phil...@redfish-solutions.com] Sent: Friday, 21 July 2017 10:35 AM To: Stephen Hemminger <step...@networkplumber.org> Cc: netdev@vger.kernel.org; Michele Lucini <mluc...@safearea.com.au> Subject: Re: [PATCH v3] iproute2: add support for GRE ignore-df knob > On Jul 20, 2017, at 6:26 PM, Stephen Hemminger <step...@networkplumber.org> > wrote: > > On Thu, 20 Jul 2017 13:06:10 -0600 > "Philip Prindeville" <phil...@redfish-solutions.com> wrote: > >> From: Philip Prindeville <phil...@redfish-solutions.com> >> >> In the presence of firewalls which improperly block ICMP Unreachable >> (including Fragmentation Required) messages, Path MTU Discovery is >> prevented from working. >> >> The workaround is to handle IPv4 payloads opaquely, ignoring the DF >> bit. >> >> Kernel commit 22a59be8b7693eb2d0897a9638f5991f2f8e4ddd ("net: ipv4: >> Add ability to have GRE ignore DF bit in IPv4 payloads") is >> complemented by this user-space changeset which exposes control of >> this setting. >> >> Reviewed-by: Stephen Hemminger <step...@networkplumber.org> >> Signed-off-by: Philip Prindeville <phil...@redfish-solutions.com> > > Applied, thanks Philip Thanks! Sorry I didn’t realize that the first submission a year ago hadn’t been applied and it took me this long to redux and resubmit it. Michele: hopefully this comes out in your distro-of-choice fairly soon. Like I said, I thought this had already been rolled in. -Philip
