From: Ian Jackson Date: Wed, 9 Apr 2014 17:27:13 +0000 (+0100) Subject: test-example: USE mtu of 1400 not 500 (!) X-Git-Tag: wip.frag.v1~16 X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ian/git?p=secnet.git;a=commitdiff_plain;h=4531c0a5aef9d8dc028d6f61390bc00c4a4adf86 test-example: USE mtu of 1400 not 500 (!) 500 is less than the IPv4 minimum MTU. 1400 is the conventional value on the SGO VPN and is a plausible choice for vpns running mostly over reasonably sane ethernets. Signed-off-by: Ian Jackson --- diff --git a/debian/changelog b/debian/changelog index f979239..e3e5798 100644 --- a/debian/changelog +++ b/debian/changelog @@ -6,6 +6,7 @@ secnet (0.3.1~~unstable) unstable; urgency=low * Fix netlink SEGV on clientless netlinks (i.e. configuration error). * Fix formatting error in p-t-p startup message. * Additions to the test-example suite. + * Fixes to MTU and fragmentation handling. -- diff --git a/test-example/inside.conf b/test-example/inside.conf index a64f125..32d1081 100644 --- a/test-example/inside.conf +++ b/test-example/inside.conf @@ -3,7 +3,7 @@ netlink tun { local-address "172.18.232.9"; secnet-address "172.18.232.10"; remote-networks "172.18.232.0/28"; - mtu 500; + mtu 1400; buffer sysbuffer(2048); interface "secnet-test-i"; }; diff --git a/test-example/outside-unshare.conf b/test-example/outside-unshare.conf index c6c3b6f..2811962 100644 --- a/test-example/outside-unshare.conf +++ b/test-example/outside-unshare.conf @@ -3,7 +3,7 @@ netlink userv-ipif { local-address "172.18.232.1"; secnet-address "172.18.232.2"; remote-networks "172.18.232.0/28"; - mtu 1000; + mtu 1400; buffer sysbuffer(2048); userv-path "test-example/fake-userv"; }; diff --git a/test-example/outside.conf b/test-example/outside.conf index db78b7b..8944130 100644 --- a/test-example/outside.conf +++ b/test-example/outside.conf @@ -3,7 +3,7 @@ netlink tun { local-address "172.18.232.1"; secnet-address "172.18.232.2"; remote-networks "172.18.232.0/28"; - mtu 500; + mtu 1400; buffer sysbuffer(2048); interface "secnet-test-o"; };