lkml.org 
[lkml]   [1999]   [Aug]   [8]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: IPSEC transport mode w/2.2.x kernels and large packets
On Sat, Aug 07, 1999 at 12:29:20PM +0200, Alan Cox wrote:
> > > Typo - routes
> > Hmm, shifting state to people who shouldn't need to know.
>
> Shifting policy to userspace and the daemons involved. Which is where it should
> be. The whole point of the mss option originally was to allow users to drop
> the MSS of a path for better performance.

Hmm. mss routing table attribute is only used by local TCP connections.
With a tunnel the TCP connections are not local, they originate from some
other host (which has no idea about ipsec). How would this other host know
about the MSS you set in the routing table ?

(with shifting state I meant it would need to move to all the tunnel
using hosts, which is of course impossible. It has to be done dynamically.)


-Andi
--
This is like TV. I don't like TV.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:53    [W:0.061 / U:0.976 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site