On Thu, Mar 17, 2016 at 11:24:59AM +0100, Steffen Klassert wrote: > > > On Wed, Mar 16, 2016 at 05:00:26PM +0100, Jiri Bohac wrote: > > Fixes my broken case. > > Is this IPv4 or IPv6? IPv4 should not create a GSO skb > if IPsec is done. It checks for rt->dst.header_len > in __ip_append_data() and does a fallback to the > standard case if rt->dst.header_len is non zero.
It's IPv6. > In IPv6 this check is missing, so this could be the > problem if this is IPv6. Doesn't the check do exactly the opposite of what the RFC says? The RFC wants ESP to be performed first and fragmentation after that. UDPv4 currently seems to be doing the opposite. Well at least it works, unlike in the IPv6 case, where the packet is fragmented, but not enough space is reserved, so after adding the ESP headers, it is fragmented once more. (Details can be found in my first e-mail in this thread, I now replied into the old thread after >1 month, sorry for that: http://thread.gmane.org/gmane.linux.network/396952 ) -- Jiri Bohac <jbo...@suse.cz> SUSE Labs, SUSE CZ
