[PATCH] xfrm:ignore big packets when tunnel mode

2020-10-08 Thread mtk81216
From: Lina Wang In tunnel mode, when inner interface is ipv4,outer interface is ipv6, flags of tunnel mode's xfrm state is af-unspec, if a larger packet who is bigger than mtu goes through tunnel interface, it enters ip6_fragment, goes to fail_toobig, and ICMPV6(ICMPV6_PKT_TOOBIG) will be sent.

[PATCH] xfrm:ignore big packets when tunnel mode

2020-09-17 Thread mtk81216
. This patch has handled three above scenaries, if it is tunnel mode,just ignore skb_len or frag_max_size, keep going. Signed-off-by: mtk81216 --- net/ipv6/ip6_output.c | 23 ++- 1 file changed, 14 insertions(+), 9 deletions(-) diff --git a/net/ipv6/ip6_output.c b/net/ipv6

[PATCH] xfrm:fragmented ipv4 tunnel packets in inner interface

2020-09-09 Thread mtk81216
suitable mtu value which considering innner/outer interface's mtu and dst path, the other is if packet is too big, calling ip_fragment first,then tunnelling fragmented packets in outer interface and transmitting finally. Signed-off-by: mtk81216 --- include/net/ip.h| 3 +++ net/ipv4