On Fri, Aug 11, 2000 at 09:40:31AM -0700, James Griffiths wrote:
>
> Hello All,
>
> The info in Documentation/proc.txt for the
> ip_always_defrag sysctl variable states that :
>
> "never ever say Y here for a normal router or host."
>
> For a router, the possibility of not all fragments
> being routed through the same router(s) is a clear
> reason for this statement. However, why is this option
>
> ruled out for a host which is a simple endpoint for
> IP-traffic ?
It is a slight bit more inefficient in 2.2 and 2.4, but you
would probably not be even able to benchmark the difference.
In future kernels always enabling ip_always_defrag may break
local optimizations.
>
> My interest is mainly because enabling the option
> would simplify the IPCHAINS rules required to
> provide packet filtering of selected services on
> a web server host.
For a web server it really doesn't matter, because it
normally never processes ip fragments. The main fragment
user is NFS.
-Andi
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]
