Re: [OpenAFS] Re: mtu problem

2013-02-11 Thread Antony Mayi
2013, 15:46 Subject: RE: [OpenAFS] Re: mtu problem the original poster said he was seeing packets of 1488 bytes that were failing. it is a bit puzzling how you would get this since afs typically not generate a packet and a very tiny fraction of a packet. it makes me wonder if he has

Re: [OpenAFS] Re: mtu problem

2013-02-08 Thread Derek Atkins
Brandon Allbery ballb...@sinenomine.net writes: Subset of, yes. All? So many sites on the Internet can't be accessed reliably from the many OSes that do PMTUD? Somehow, I doubt. I didn't say all, I said many. And yes, there are many sites on the internet that cannot be accessed reliably

Re: [OpenAFS] Re: mtu problem

2013-02-08 Thread chas williams - CONTRACTOR
On Fri, 08 Feb 2013 09:56:16 -0500 Derek Atkins warl...@mit.edu wrote: I didn't say all, I said many. And yes, there are many sites on the internet that cannot be accessed reliably from many OSes that do PMTUD, particularly if you have some pipe between you and the site that is smaller than

RE: [OpenAFS] Re: mtu problem

2013-02-08 Thread David Boyes
the original poster said he was seeing packets of 1488 bytes that were failing. it is a bit puzzling how you would get this since afs typically not generate a packet and a very tiny fraction of a packet. it makes me wonder if he has a tagged vlan on his host and a switch that doesnt

[OpenAFS] Re: mtu problem

2013-02-07 Thread Andrew Deason
On Thu, 7 Feb 2013 11:09:28 + (GMT) Antony Mayi antonym...@yahoo.com wrote: I seem to have problem with one particular client that is unable to access AFS. When tcpdumping both sides I can see the server sends some packets that are 1488B long and non of these ever arrives to the client so

Re: [OpenAFS] Re: mtu problem

2013-02-07 Thread Antony Mayi
From: Andrew Deason adea...@sinenomine.net To: openafs-info@openafs.org Sent: Thursday, 7 February 2013, 15:16 Subject: [OpenAFS] Re: mtu problem On Thu, 7 Feb 2013 11:09:28 + (GMT) Antony Mayi antonym...@yahoo.com wrote: I seem to have problem

Re: [OpenAFS] Re: mtu problem

2013-02-07 Thread Carson Gaspar
On 2/7/13 8:36 AM, Antony Mayi wrote: modern tcp/ip stack is setting Don'tFragment flag by default so oversized packets are always dropped (relevant ICMP should be sent back for PMTU discovery to kick in though which is not happening in my case). ... yes, I meant adjusting client interface

Re: [OpenAFS] Re: mtu problem

2013-02-07 Thread chas williams - CONTRACTOR
On Thu, 7 Feb 2013 16:36:18 + (GMT) Antony Mayi antonym...@yahoo.com wrote: yes, I meant adjusting client interface MTU. I already tried the -rxmaxmtu without any success. you might want to try -rxmagfrags as well. just set this to 1 to keep afs from trying to send packets that are

RE: [OpenAFS] Re: mtu problem

2013-02-07 Thread Brandon Allbery
] Re: mtu problem (...) modern tcp/ip stack is setting Don'tFragment flag by default so oversized packets are always dropped (relevant ICMP should be sent back for PMTU discovery to kick in though which is not happening in my case). ___ OpenAFS-info

[OpenAFS] Re: mtu problem

2013-02-07 Thread Andrew Deason
On Thu, 7 Feb 2013 16:36:18 + (GMT) Antony Mayi antonym...@yahoo.com wrote: modern tcp/ip stack is setting Don'tFragment flag by default so oversized packets are always dropped (relevant ICMP should be sent back for PMTU discovery to kick in though which is not happening in my case).

Re: [OpenAFS] Re: mtu problem

2013-02-07 Thread Derrick Brashear
On Feb 7, 2013, at 12:37 PM, Andrew Deason adea...@sinenomine.net wrote: On Thu, 7 Feb 2013 16:36:18 + (GMT) Antony Mayi antonym...@yahoo.com wrote: modern tcp/ip stack is setting Don'tFragment flag by default so oversized packets are always dropped (relevant ICMP should be sent

Re: [OpenAFS] Re: mtu problem

2013-02-07 Thread Derek Atkins
Brandon Allbery ballb...@sinenomine.net writes: A host or network which drops all ICMP indiscriminately is fundamentally broken, and I could make an argument for not allowing it to communicate with other networks at all. If someone is demanding drop-all-ICMP as security best practice then

RE: [OpenAFS] Re: mtu problem

2013-02-07 Thread Brandon Allbery
, openafs, kerberos, infrastructure, xmonadhttp://sinenomine.net From: Derek Atkins [warl...@mit.edu] Sent: Thursday, February 07, 2013 13:36 To: Brandon Allbery Cc: Antony Mayi; Andrew Deason; openafs-info@openafs.org Subject: Re: [OpenAFS] Re: mtu

Re: [OpenAFS] Re: mtu problem

2013-02-07 Thread Gary Buhrmaster
On Thu, Feb 7, 2013 at 10:39 AM, Brandon Allbery ballb...@sinenomine.net wrote: Subset of, yes. All? So many sites on the Internet can't be accessed reliably from the many OSes that do PMTUD? Somehow, I doubt. If you want to be sure, use the RFC mandated minimum MTU of 576 for IPv4 (1280