6.2 mtu now limits size of incomming packet
Stephen Clark
Stephen.Clark at seclark.us
Sat Jul 21 16:24:49 UTC 2007
Eli Dart wrote:
>see below...
>
>Julian Elischer wrote:
>
>
>>Eli Dart wrote:
>>
>>
>>>Stephen Clark wrote:
>>>
>>>
>>>
>>>>So was any decision reached on this issue - will FreeBSD changed
>>>>to accept a packet on an interface that is larger than the mtu on
>>>>that interface?
>>>>
>>>>
>>>If possible, I'd like to see the ability to enforce interface MTU
>>>for received packets preserved in a sysctl if it is removed for the
>>> default config... In other words, something like:
>>>
>>>net.link.mtu_limits_received_pktsize = 0|1
>>>
>>>Then, default it to 0 to preserve 4.x behavior.
>>>
>>>
>>what would this achieve?
>>
>>Answering himself.. it MAY allow a driver to optimise a bit by not
>>needing to cope with the posibility of receiving jubo packets? I can
>>not think of any other reason.. (except to break networks that are
>>apparently working fine).
>>
>>
>
>The networks that are apparently working fine are most likely
>misconfigured, IMHO.
>
>Others have made a case for permitting an interface to accept as large a
>packet as it can, regardless of configured MTU. That's fine for theory.
>
>My operational experience leads me to a different place. If an
>interface receives a packet that is larger than its configured MTU, I
>would prefer that the packet be dropped as a giant and a giants counter
> incremented, regardless of whether the hardware can theoretically
>receive the packet. In modern networks, an MTU mismatch within a
>broadcast domain indicates a broken network, IMHO. If the devices in
>the network are configured to enforce MTU for both tx and rx, more
>problems get spotted during turnup, rather than surfacing later on as
>difficult-to-diagnose problems that users only call about after they are
>truly frustrated. And, if you have a giants counter (or input error
>counter) you can look at, it makes it straightforward to spot the problem.
>
>(one could also stretch a bit and say that enforcing MTU on rx might
>provide less surprise to code that consumes packets and has knowledge of
>the MTU setting of an interface.....unfortunately I don't know enough
>about the details of the network stack to know if this is a real concern)
>
>Many thanks,
>
> --eli
>
>
>
>
Hi Eli,
You make some good points, however it is a change from previous FreeBSD
behavior
and is not required by any RFC's, plus it causes problems for some users.
My $.02
Steve
--
"They that give up essential liberty to obtain temporary safety,
deserve neither liberty nor safety." (Ben Franklin)
"The course of history shows that as a government grows, liberty
decreases." (Thomas Jefferson)
More information about the freebsd-net
mailing list