IPSec transport mode, mtu, fragmentation...

[Eugene Grosbein]

16.01.2020 22:53, Victor Sudakov wrote:

> What beats me is that I cannot reproduce this problem in bhyve. In this
> packet dump: http://admin.sibptus.ru/~vas/ipsec1.pcap.gz I'm scp-ing a
> 50M file from 192.168.246.10 (bhyve guest) to 192.168.246.1 (bhyve
> host), and I see no fragments, and the largets packet is 1466 bytes, and
> the scp never stalls nor fails.
> 
> Why is it NOT broken this time?
> 
> Both hosts are 12.1-RELEASE-p1.

I could not reproduce the problem with unpatched recent stable/11, either :-)