[Bug 207087] kernel: r295285 in 10.2-STABLE breaks OpenVPN functionality

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207087

--- Comment #23 from g_amanakis at yahoo.com ---
Created attachment 167004
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=167004&action=edit
ffoff.pcapng

I did another dump on a client on the local network (directly connected to
gateway, no OpenVPN involved). The gateway ran 10.2-STABLE r295264 GENERIC. The
symptoms when fastforwarding was enabled were the same as with r295285.

I did 2 dumps on the client: 
net.inet.fastforwarding=0 on the gateway ===> ffoff.pcapng ===> HTTP/GET
happens at packet 10
net.inet.fastforwarding=1 on the gateway ===> ffon.pcapng ===> HTTP/GET happens
at packet 36

The only significant difference I see is that when fastforwarding is turned off
the gateway sends an ICMP Fragmentation needed to the client whereas when
fastforwarding is on this doesn't happen, and the client keeps retransmitting
the HTTP/GET packet. Could it be that the ip_fastfwd.c doesn't correctly send
ICMP when the destination is unreachable and fragmentation is required?

-- 
You are receiving this mail because:
You are on the CC list for the bug.