North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: MTU path discovery and IPSec

  • From: Valdis.Kletnieks
  • Date: Thu Dec 04 18:52:21 2003 
On Thu, 04 Dec 2003 18:03:38 EST, Barney Wolff said:

> That's not how PMTUD works.  If DF is set, you discard the packet and
> report back with ICMP.  If DF is not set, you frag the packet - but
> that's not PMTUD, because no report ever goes back to the sender.

Oh, so we compute ONE number if DF is set, saying what number we think they
should use - but if DF *isn't* set, we use a different number.  Sounds like more
complicated code that's just there so it can sink its teeth into the rump of the
first banana-eating NOC dweller that has to figure out what's wrong....

Unless of course there's a *reason* we want it different? Though it escapes me what
it might be....

Attachment: pgp00012.pgp
Description: PGP signature