• Herbert Xu's avatar
    [IPSEC]: Add XFRM_STATE_NOPMTUDISC flag · dd87147e
    Herbert Xu authored
    This patch adds the flag XFRM_STATE_NOPMTUDISC for xfrm states.  It is
    similar to the nopmtudisc on IPIP/GRE tunnels.  It only has an effect
    on IPv4 tunnel mode states.  For these states, it will ensure that the
    DF flag is always cleared.
    
    This is primarily useful to work around ICMP blackholes.
    
    In future this flag could also allow a larger MTU to be set within the
    tunnel just like IPIP/GRE tunnels.  This could be useful for short haul
    tunnels where temporary fragmentation outside the tunnel is desired over
    smaller fragments inside the tunnel.
    Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
    Acked-by: default avatarJames Morris <jmorris@redhat.com>
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    dd87147e
xfrm4_state.c 3.21 KB