IPv6 fragmentation weirdness

Steve Bertrand steve at ibctech.ca
Fri May 15 16:57:34 UTC 2009


Steve Bertrand wrote:
> Kevin Oberman wrote:
> 
>> Second, why the heck is the fragment going out first? This should be OK,
>> but I suspect many firewalls (which are often not happy with fragments)
>> are not likely to pass a fragment which precedes the initial frame.
> 
> I'll try to find some time today to see if I can replicate this issue.
> I've never noticed it, mind you, I haven't been looking.
> 
>> Can anyone fetch anything from ftp.funet.fi via IPv6? I suspect it is
>> something in the path that is blocking my traffic, so others may not see
>> this, but I think the root issues is the kernel fragmenting packets way
>> below MTU size.
> 
> 7.2-RELEASE .iso @ ~14 Mbps from Ontario, Canada:

...doh!

Given that fetch does v4, that 14Mb translates into ~500Kb when using v6 ;)

Steve
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3233 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.freebsd.org/pipermail/freebsd-net/attachments/20090515/fd2068b1/smime.bin


More information about the freebsd-net mailing list