IssueRaiser

I find it mildly embarrassing that people still manage to screw up PMTUD, a big CDN, no less ...

I find it mildly embarrassing that people still manage to screw up PMTUD, a big CDN, no less ... but then again, I guess I appreciate that they did actually care to fix it once they noticed, which is not something to take for granted, and at least it was not the idiotic idea of filtering ICMP (has Amazon ever managed to fix EC2?), but an actual oversight. However, that blog article seems somewhat misinformed: In addition to tunnels, one major reason for PMTUs smaller than the standard Ethernet MTU of 1500 are DSL connections based on PPPoE, both for IPv4 and for IPv6. The only reason most people don't notice the breakage caused by incompetent admins (in the let's filter ICMP case) is because home routers tend to mess with the TCP options in SYN packets, adding an MSS matching the MTU of the DSL connection. Of course, that's a braindead fix, as it doesn't work for anything other than TCP. BTW: I doubt it was that small a number of users that noticed, a customer of mine also noticed (native IPv6 over ADSL), but given that this usually is caused by intentionally clueless admins, I just told them that the server admin probably was incompetent rather than reporting the problem to cloudflare ...

Posted by zAy0LfpBZLC8mAC on Feb 5, 2015, 12:47 AM

Tags

Related issues

Raise real-world problems, find people facing the same issue, and discuss solutions.8,000 issues0 comments

hackernews (EdTech)

I find it mildly embarrassing that people still manage to screw up PMTUD, a big CDN, no less ...

zAy0LfpBZLC8mACFeb 5, 2015, 12:47 AM

I find it mildly embarrassing that people still manage to screw up PMTUD, a big CDN, no less ... but then again, I guess I appreciate that they did actually care to fix it once they noticed, which is not something to take for granted, and at least it was not the idiotic idea of filtering ICMP (has Amazon ever managed to fix EC2?), but an actual oversight. However, that blog article seems somewhat misinformed: In addition to tunnels, one major reason for PMTUs smaller than the standard Ethernet MTU of 1500 are DSL connections based on PPPoE, both for IPv4 and for IPv6. The only reason most people don't notice the breakage caused by incompetent admins (in the let's filter ICMP case) is because home routers tend to mess with the TCP options in SYN packets, adding an MSS matching the MTU of the DSL connection. Of course, that's a braindead fix, as it doesn't work for anything other than TCP. BTW: I doubt it was that small a number of users that noticed, a customer of mine also noticed (native IPv6 over ADSL), but given that this usually is caused by intentionally clueless admins, I just told them that the server admin probably was incompetent rather than reporting the problem to cloudflare ...

Comments (0)

No comments yet. Start the discussion.

Comment on this issue