Doubt regarding ICMP_UNREACH_NEEDFRAG processing for IPSec

Reji Thomas rejithomas.d at gmail.com
Tue Jan 24 05:40:55 UTC 2012


Hi,

I dont see the freebsd ip stack processing ICMP_UNREACH_NEEDFRAG  where
protocol is ESP/AH. ( The ipsec4_common_ctlinput is not implemented). If
this is right, how is the  PMTU discovery done for ipsec traffic or is it
that freebsd is not doing that?.

Thanks
Reji


More information about the freebsd-net mailing list