MTU path discovery and IPSec

Valdis.Kletnieks at vt.edu Valdis.Kletnieks at vt.edu
Thu Dec 4 22:54:42 UTC 2003


On Thu, 04 Dec 2003 16:40:45 EST, Joe Maimon <jmaimon at ttec.com>  said:

> I agree with all I have snipped.
> I was wondering would it not be wiser for fraggers to frag in half 
> instead of just the overflow?

There's 2 cases here:

1) This is the final frag on the path - if PMTUD is in use, we want to frag
right at the overflow so the connection can use the max (so if we're fragging
from 1500 down to 1410, they end up with 1410 rather than 750).

2) There's an even more restrictive frag further downstream.  We frag from 1500
to 1460, and somebody else frags from 1460 down to 1410.  If you frag at overflow,
you end up with a PMTU of 1410.  If you fragged it in half, you avoid the second
frag but end up with a PMTU of 750.

After several dozen packets, the difference between 750 and 1410 will start to become
noticable.....
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20031204/b9442736/attachment.sig>


More information about the NANOG mailing list