Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 28 May 2008 13:19:07 +0300
From:      Stefan Lambrev <stefan.lambrev@moneybookers.com>
To:        =?UTF-8?B?RXJtYWwgTHXDp2k=?= <ermal.luci@gmail.com>
Cc:        freebsd-net@freebsd.org
Subject:   Re: Adjust Maximum Segment Size?
Message-ID:  <483D319B.7030303@moneybookers.com>
In-Reply-To: <9a542da30805271114w6ad82569m43d89c4cd03a76fc@mail.gmail.com>
References:  <1211891010.00075594.1211880013@10.7.7.3>	<1211894613.00075634.1211884201@10.7.7.3>	<1211901827.00075710.1211890802@10.7.7.3>	<483C4636.7080608@mavhome.dp.ua> <483C4D48.6020106@moneybookers.com> <9a542da30805271114w6ad82569m43d89c4cd03a76fc@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Ermal Lu=C3=A7i wrote:
> On Tue, May 27, 2008 at 8:04 PM, Stefan Lambrev
> <stefan.lambrev@moneybookers.com> wrote:
>  =20
>> Greetings,
>>
>> Alexander Motin wrote:
>>    =20
>>> Stefan Lambrev wrote:
>>>      =20
>>>>> Yes, You can with ng_tcpmss
>>>>>          =20
>>>> Isn't it doable only with ipfw/divert when using ng_tcpmss?
>>>> I have and some concerns about performance too ..
>>>>        =20
>>> There are several ways to inject packet to ng_tcpmss:
>>>  - ipfw + divert + ng_ksocket. It should be faster then usual user-le=
vel
>>> implementation
>>>  - ipfw + netgraph as described in ng_tcpmss(4)
>>>  - use ng_tcpmss directly in some complicated netgraph setup. For exa=
mple,
>>> mpd is able to use it. This is probably the fastest and easiest way, =
but
>>> only for some setups.
>>>      =20
>> Thanks for all ideas.
>> I think I'll try the route -mtu feature.
>> Looks like easier for implementation and testing. :)
>> Anyway it will be good if we have such feature in the base system.
>> It shouldn't be very difficult? :)
>>
>> --
>>    =20
>
> Actually converting ng_tcpmss to pfil(9) should be easy.
>  =20
I'm thinking about adding additional checks in tcp_mss() and=20
tcp_mssopt() - both in sys/netinet/tcp_input.c
plus two sysctl entries for max mss and max mss IPv6.
Does it sound like a reasonable solution or I'm missing something?

P.S. One of the things that bothers me is that pf uses it's own=20
pf_get_mss() and pf_calc_mss()
and they should be fixed accordingly?

--=20

Best Wishes,
Stefan Lambrev
ICQ# 24134177





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?483D319B.7030303>