karnaugh at karnaugh.za.net
Wed Aug 20 13:57:21 CDT 2008
On 2008/08/20 08:04 PM Valdis.Kletnieks at vt.edu wrote:
> On Wed, 20 Aug 2008 21:43:44 +0530, Glen Kent said:
>> Do transit routers in the wild actually get to do IP fragmentation
>> these days? I was wondering if routers actually do it or not, because
>> the source usually discovers the path MTU and sends its data with the
>> least supported MTU. Is this true?
> Hypothetically true. Unfortunately, enough places do bozo firewalling and drop
> the ICMP Frag Needed packets to severely limit the utility of PMTU Discovery.
Well obviously, ICMP is only used by hackers to DDoS you. Everyone
knows that, especially all the banks. It's even more important to
obliterate PMTU discovery when you're using HTTPS - for security, you
Sorry, I spent the better part of today bashing my head against the
wall trying to fix MSS and PMTU issues somewhere which was being
aggravated by the tragic programming of Linux l2tpns package...
More information about the NANOG