Hi, On Mon, Aug 08, 2022 at 01:27:38PM +0200, Gert Doering wrote: > If the inside packet is fragmented already, Linux kernel hands us > packets with skb->ignore_df=0. Since this is applied to the encapsulated > packet, the kernel will then refuse to fragment the resulting UDP/IPv6 > packet (for IPv4, it seems to look at the actual DF bit, which does > not exist for IPv6). > > Always set ignore_df=1 in the udp6 output path. > > Fixes t_client tests with "ping -s 3000" across UDP6 tunnels.
For the sake of the archives, this made it in into the ovpn-dco repo
in slightly modified form, as
commit 3ba6c07ababd4d491c77f5327f8105bead6ddccc (HEAD -> master, origin/master,
origin/HEAD)
Author: Gert Doering <g...@greenie.muc.de>
Date: Mon Aug 8 13:27:38 2022 +0200
ovpn-dco: ensure outer IPv6 (proto udp6) packets can be fragmitted on
sending
so, closing on patchwork.
Thanks, Antonio.
gert
--
"If was one thing all people took for granted, was conviction that if you
feed honest figures into a computer, honest figures come out. Never doubted
it myself till I met a computer with a sense of humor."
Robert A. Heinlein, The Moon is a Harsh Mistress
Gert Doering - Munich, Germany g...@greenie.muc.de
signature.asc
Description: PGP signature
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
