On Fri, Aug 11, 2000 at 09:40:31AM -0700, James Griffiths wrote: > > Hello All, > > The info in Documentation/proc.txt for the > ip_always_defrag sysctl variable states that : > > "never ever say Y here for a normal router or host." > > For a router, the possibility of not all fragments > being routed through the same router(s) is a clear > reason for this statement. However, why is this option > > ruled out for a host which is a simple endpoint for > IP-traffic ? It is a slight bit more inefficient in 2.2 and 2.4, but you would probably not be even able to benchmark the difference. In future kernels always enabling ip_always_defrag may break local optimizations. > > My interest is mainly because enabling the option > would simplify the IPCHAINS rules required to > provide packet filtering of selected services on > a web server host. For a web server it really doesn't matter, because it normally never processes ip fragments. The main fragment user is NFS. -Andi - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.rutgers.edu
