Re: [IPSec]A problem with xfrm_check_output()

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Zhao, Forrest <forrest.zhao@intel.com> wrote:
>
> As you have pointed out in the last mail, if we check against
> precaluclated 
> dst->pmtu before doing transformation, it will result in underestimation
> of mtu 
> for esp due to alignment paddings and for IPCOMP it will be totally
> unfair.

I disagree with the part about IPCOMP SAs.  We should always calculate
the MTUs for IPCOMP based on the worst-case scenario, that is, as if
the packet is not compressible.

This might seem unfair to the packet that has just arrived, but sooner
or later we're going to get an uncompressible packet forcing the MTU
down.
-- 
Debian GNU/Linux 3.0 is out! ( http://www.debian.org/ )
Email:  Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
-
: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux 802.1Q VLAN]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Git]     [Bugtraq]     [Yosemite News and Information]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux PCI]     [Linux Admin]     [Samba]

  Powered by Linux