]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
ipsec: Check PMTU before sending a frame.
authorKornel Duleba <mindal@semihalf.com>
Fri, 13 Aug 2021 07:20:46 +0000 (09:20 +0200)
committerWojciech Macek <wma@FreeBSD.org>
Fri, 13 Aug 2021 07:22:24 +0000 (09:22 +0200)
commit6b66194bcb7e43ef40b11005618544081c6e30ea
tree601b69c35dcd112a4f20309ed0d995f92ac2a1de
parent06afb53bcd7b6a928bc90acb820383302ea8be9e
ipsec: Check PMTU before sending a frame.

If an encapsulated frame is going to have DF bit set check its desitnitions'
PMTU and if it won't fit drop it and:

Generate ICMP 3/4 message if the packet was to be forwarded.
Return EMSGSIZE error otherwise.

Obtained from: Semihalf
Sponsored by: Stormshield
Differential revision: https://reviews.freebsd.org/D30993
sys/netipsec/ipsec.c
sys/netipsec/ipsec.h
sys/netipsec/ipsec_output.c