Re: IPsec PMTU and reject route

2020-12-20 Thread Claudio Jeker
On Sun, Dec 20, 2020 at 01:01:58AM +0100, Alexander Bluhm wrote: > Hi, > > In revision 1.87 of ip_icmp.c claudio@ added ignoring reject routes > to icmp_mtudisc_clone(). Otherwise TCP would clone these routes > for PMTU discovery. They will not work, even after dynamic routing > has found a

IPsec PMTU and reject route

2020-12-19 Thread Alexander Bluhm
Hi, In revision 1.87 of ip_icmp.c claudio@ added ignoring reject routes to icmp_mtudisc_clone(). Otherwise TCP would clone these routes for PMTU discovery. They will not work, even after dynamic routing has found a better route than the reject route. With IPsec the use case is different.