From patchwork Thu Mar 16 12:43:15 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Simon Horman X-Patchwork-Id: 739808 X-Patchwork-Delegate: pablo@netfilter.org Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by ozlabs.org (Postfix) with ESMTP id 3vkSp11sZVz9rxm for ; Thu, 16 Mar 2017 23:43:53 +1100 (AEDT) Authentication-Results: ozlabs.org; dkim=fail reason="signature verification failed" (1024-bit key; unprotected) header.d=verge.net.au header.i=@verge.net.au header.b="Z3eCt2Mm"; dkim-atps=neutral Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752367AbdCPMnw (ORCPT ); Thu, 16 Mar 2017 08:43:52 -0400 Received: from kirsty.vergenet.net ([202.4.237.240]:60914 "EHLO kirsty.vergenet.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752247AbdCPMnh (ORCPT ); Thu, 16 Mar 2017 08:43:37 -0400 Received: from penelope.horms.nl (unknown [217.111.208.18]) by kirsty.vergenet.net (Postfix) with ESMTPSA id 8987425BED3; Thu, 16 Mar 2017 23:43:29 +1100 (AEDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=verge.net.au; s=mail; t=1489668209; bh=ItkqBzhwaeRxO3+rsZsZngjRG5KOuoW6wKFqi+JIL7Y=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=Z3eCt2MmBFIILy8Rgdem3s5iaIqYbvYqsNwQacu2Bc27n1IJ1bG7C1mbPbvK9xL0x DExD4pH5Hr2nL1xRo5Q/WTzAqO6NNPlXotK4/MrBrfNdt9KH7/BMmYxEybCd5TWGqM rghsIxYqNVi8DjcTsbnYk7cIlqRrK9zogAelv2jA= Received: by penelope.horms.nl (Postfix, from userid 7100) id 482CB636E3; Thu, 16 Mar 2017 13:43:21 +0100 (CET) From: Simon Horman To: Pablo Neira Ayuso Cc: lvs-devel@vger.kernel.org, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, Wensong Zhang , Julian Anastasov , Hangbin Liu , Simon Horman Subject: [PATCH 5/5] ipvs: Document sysctl pmtu_disc Date: Thu, 16 Mar 2017 13:43:15 +0100 Message-Id: <1489668195-15240-6-git-send-email-horms@verge.net.au> X-Mailer: git-send-email 2.7.0.rc3.207.g0ac5344 In-Reply-To: <1489668195-15240-1-git-send-email-horms@verge.net.au> References: <1489668195-15240-1-git-send-email-horms@verge.net.au> Sender: netfilter-devel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: netfilter-devel@vger.kernel.org From: Hangbin Liu Document sysctl pmtu_disc based on commit 3654e61137db ("ipvs: add pmtu_disc option to disable IP DF for TUN packets"). Signed-off-by: Hangbin Liu Signed-off-by: Simon Horman --- Documentation/networking/ipvs-sysctl.txt | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/Documentation/networking/ipvs-sysctl.txt b/Documentation/networking/ipvs-sysctl.txt index a6feecd467cd..056898685d40 100644 --- a/Documentation/networking/ipvs-sysctl.txt +++ b/Documentation/networking/ipvs-sysctl.txt @@ -175,6 +175,14 @@ nat_icmp_send - BOOLEAN for VS/NAT when the load balancer receives packets from real servers but the connection entries don't exist. +pmtu_disc - BOOLEAN + 0 - disabled + not 0 - enabled (default) + + By default, reject with FRAG_NEEDED all DF packets that exceed + the PMTU, irrespective of the forwarding method. For TUN method + the flag can be disabled to fragment such packets. + secure_tcp - INTEGER 0 - disabled (default)