> On Jul 20, 2017, at 6:26 PM, Stephen Hemminger <step...@networkplumber.org>
> wrote:
>
> On Thu, 20 Jul 2017 13:06:10 -0600
> "Philip Prindeville" <phil...@redfish-solutions.com> wrote:
>
>> From: Philip Prindeville <phil...@redfish-solutions.com>
>>
>> In the presence of firewalls which improperly block ICMP Unreachable
>> (including Fragmentation Required) messages, Path MTU Discovery is
>> prevented from working.
>>
>> The workaround is to handle IPv4 payloads opaquely, ignoring the DF
>> bit.
>>
>> Kernel commit 22a59be8b7693eb2d0897a9638f5991f2f8e4ddd ("net: ipv4:
>> Add ability to have GRE ignore DF bit in IPv4 payloads") is
>> complemented by this user-space changeset which exposes control of
>> this setting.
>>
>> Reviewed-by: Stephen Hemminger <step...@networkplumber.org>
>> Signed-off-by: Philip Prindeville <phil...@redfish-solutions.com>
>
> Applied, thanks Philip
Thanks! Sorry I didn’t realize that the first submission a year ago hadn’t
been applied and it took me this long to redux and resubmit it.
Michele: hopefully this comes out in your distro-of-choice fairly soon. Like I
said, I thought this had already been rolled in.
-Philip
