[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: TO COMPRESS OR NOT TO CMPRS (please reply)
In message <199702191805.AA011615518@relay.hp.com>, Bill Sommerfeld writes:
>
> Hmm. Wouldn't correct handling of MTU discovery/DF through the ipsec
> `tunnel' also handle this problem?
Yes, but isn't that a Hard Problem (tm) unless you keep state (either
"virtual interfaces" or individual packets) at the tunnel endpoints? How
else do you convert an ICMP Fragmentation Required message for a tunneled
(and auth'd and 'crypted) packet back into an ICMP Fragmentation Required
for the original, untunnelled packet?
--
Harald Koch <chk@utcc.utoronto.ca>
Follow-Ups:
References: