Searched hist:"299 b0767642a65f0c5446ab6d35e6df0daf43d33" (Results 1 – 2 of 2) sorted by relevance
/openbmc/linux/net/ipv6/ |
H A D | raw.c | diff 299b0767642a65f0c5446ab6d35e6df0daf43d33 Mon Oct 10 20:43:33 CDT 2011 Steffen Klassert <steffen.klassert@secunet.com> ipv6: Fix IPsec slowpath fragmentation problem
ip6_append_data() builds packets based on the mtu from dst_mtu(rt->dst.path). On IPsec the effective mtu is lower because we need to add the protocol headers and trailers later when we do the IPsec transformations. So after the IPsec transformations the packet might be too big, which leads to a slowpath fragmentation then. This patch fixes this by building the packets based on the lower IPsec mtu from dst_mtu(&rt->dst) and adapts the exthdr handling to this.
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: David S. Miller <davem@davemloft.net>
|
H A D | ip6_output.c | diff 299b0767642a65f0c5446ab6d35e6df0daf43d33 Mon Oct 10 20:43:33 CDT 2011 Steffen Klassert <steffen.klassert@secunet.com> ipv6: Fix IPsec slowpath fragmentation problem
ip6_append_data() builds packets based on the mtu from dst_mtu(rt->dst.path). On IPsec the effective mtu is lower because we need to add the protocol headers and trailers later when we do the IPsec transformations. So after the IPsec transformations the packet might be too big, which leads to a slowpath fragmentation then. This patch fixes this by building the packets based on the lower IPsec mtu from dst_mtu(&rt->dst) and adapts the exthdr handling to this.
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: David S. Miller <davem@davemloft.net>
|