On Tue, Nov 17, 2020 at 5:37 PM <we...@ucloud.cn> wrote: > > From: wenxu <we...@ucloud.cn> > > Currently kernel tc subsystem can do conntrack in cat_ct. But when several > fragment packets go through the act_ct, function tcf_ct_handle_fragments > will defrag the packets to a big one. But the last action will redirect > mirred to a device which maybe lead the reassembly big packet over the mtu > of target device. > > This patch add support for a xmit hook to mirred, that gets executed before > xmiting the packet. Then, when act_ct gets loaded, it configs that hook. > The frag xmit hook maybe reused by other modules. > > Signed-off-by: wenxu <we...@ucloud.cn> > --- > v2: make act_frag just buildin for tc core but not a module > return an error code from tcf_fragment > depends on INET for ip_do_fragment
Much better now. > +#ifdef CONFIG_INET > + ret = ip_do_fragment(net, skb->sk, skb, sch_frag_xmit); > +#endif Doesn't the whole sch_frag need to be put under CONFIG_INET? I don't think fragmentation could work without CONFIG_INET. Thanks.
