[Bug 282535] if_ipsec mtu seems to be 1422 for ipv6

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 04 Nov 2024 11:43:50 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=282535

            Bug ID: 282535
           Summary: if_ipsec mtu seems to be 1422 for ipv6
           Product: Base System
           Version: 14.1-RELEASE
          Hardware: i386
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: bugs.freebsd.org@mx.zzux.com

I have two FreeBSD connected via the 'if_ipsec' interfaces named 'vpn1' and
mtu=1500 on the both sides.


Before update:

ping6 -D -s 1452 ff02::1%vpn1
PING6(1500=40+8+1452 bytes) fe80::9b26:3731:f02d:4768%vpn1 --> ff02::1%vpn1
1460 bytes from fe80::9b26:3731:f02d:4768%vpn1, icmp_seq=0 hlim=64 time=0.178
ms
1460 bytes from fe80::bfc0:65e8:dd5a:8d3c%vpn1, icmp_seq=0 hlim=64 time=4.706
ms(DUP!)
...


After update from 11.2-RELEASE to 14.1-RELEASE:

ping6 -D -s 1374 ff02::1%vpn1
PING(1422=40+8+1374 bytes) fe80::7842:9f3d:a7df:4ae5%vpn1 --> ff02::1%vpn1
1382 bytes from fe80::7842:9f3d:a7df:4ae5%vpn1, icmp_seq=0 hlim=64 time=0.208
ms
1382 bytes from fe80::bfc0:65e8:dd5a:8d3c%vpn1, icmp_seq=0 hlim=64 time=4.854
ms(DUP!)
...

ping6 -D -s 1375 ff02::1%vpn1
PING(1423=40+8+1375 bytes) fe80::7842:9f3d:a7df:4ae5%vpn1 --> ff02::1%vpn1
1383 bytes from fe80::7842:9f3d:a7df:4ae5%vpn1, icmp_seq=0 hlim=64 time=0.147
ms
1383 bytes from fe80::7842:9f3d:a7df:4ae5%vpn1, icmp_seq=1 hlim=64 time=0.080
ms
1383 bytes from fe80::7842:9f3d:a7df:4ae5%vpn1, icmp_seq=2 hlim=64 time=0.095
ms
...
there is no answer or ICMP error message.
This issue affects any protocols and addresses also as link-local.

-- 
You are receiving this mail because:
You are the assignee for the bug.