Re: PMTUD and MTU < 1280

Mark Andrews <marka@isc.org> Thu, 21 July 2011 07:13 UTC

Return-Path: <marka@isc.org>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63A1D21F85EA for <ipv6@ietfa.amsl.com>; Thu, 21 Jul 2011 00:13:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.564
X-Spam-Level:
X-Spam-Status: No, score=-3.564 tagged_above=-999 required=5 tests=[AWL=1.035, BAYES_00=-2.599, GB_I_LETTER=-2]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nRmRor1EJZzh for <ipv6@ietfa.amsl.com>; Thu, 21 Jul 2011 00:13:05 -0700 (PDT)
Received: from mx.pao1.isc.org (mx.pao1.isc.org [IPv6:2001:4f8:0:2::2b]) by ietfa.amsl.com (Postfix) with ESMTP id 8719621F8B58 for <ipv6@ietf.org>; Thu, 21 Jul 2011 00:13:05 -0700 (PDT)
Received: from bikeshed.isc.org (bikeshed.isc.org [IPv6:2001:4f8:3:d::19]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (Client CN "bikeshed.isc.org", Issuer "ISC CA" (verified OK)) by mx.pao1.isc.org (Postfix) with ESMTPS id A09B1C9484; Thu, 21 Jul 2011 07:12:52 +0000 (UTC) (envelope-from marka@isc.org)
Received: from drugs.dv.isc.org (unknown [IPv6:2001:470:1f00:820:6233:4bff:fe01:7585]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by bikeshed.isc.org (Postfix) with ESMTPSA id 12AEE216C7B; Thu, 21 Jul 2011 07:12:52 +0000 (UTC) (envelope-from marka@isc.org)
Received: from drugs.dv.isc.org (localhost [127.0.0.1]) by drugs.dv.isc.org (Postfix) with ESMTP id 0BF22120CFF1; Thu, 21 Jul 2011 17:12:48 +1000 (EST)
To: Philip Homburg <pch-6man@u-1.phicoh.com>
From: Mark Andrews <marka@isc.org>
References: <m1Qjmmi-0001ibC@stereo.hq.phicoh.net>
Subject: Re: PMTUD and MTU < 1280
In-reply-to: Your message of "Thu, 21 Jul 2011 08:30:51 +0200." <m1Qjmmi-0001ibC@stereo.hq.phicoh.net>
Date: Thu, 21 Jul 2011 17:12:48 +1000
Message-Id: <20110721071248.0BF22120CFF1@drugs.dv.isc.org>
Cc: ipv6@ietf.org, RJ Atkinson <rja.lists@gmail.com>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipv6>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Jul 2011 07:13:08 -0000

In message <m1Qjmmi-0001ibC@stereo.hq.phicoh.net>, Philip Homburg writes:
> In your letter dated Wed, 20 Jul 2011 17:35:31 -0400 you wrote:
> >I am not sure the specs insist that an IPv6 implementation 
> >must treat an ICMPv6 Packet-Too-Big for less than 1280 bytes 
> >as "unrecoverable". (I haven't re-read the IPv6 specs recently.)
> 
> Some services, like big DNS server cannot afford to do PMTU. It requires them
> to store the original DNS reply just in case an ICMP comes back.

This was originally noted in draft-ietf-ipngwg-bsd-frag-00 (January
1998) and became IPV6_USE_MIN_MTU (RFC 3542, May 2003).  Now if we
can just get it into POSIX ....

And, yes, nameservers do set this option.  FreeBSD's implementation
however is partially broken.  See:
http://www.freebsd.org/cgi/query-pr.cgi?pr=158307.

> Without that, the host will see that its first request fails and has to retry
> .
> Over time, this will happen again and again because big servers cannot
> maintain all PMTU state forever.

It takes multiple requests usually and yes the state does get lost
within minutes on busy nameservers.

What should have been specified is that hosts need to fragment
packets into roughly equal sizes fragments.  This reduces the
probabilty of having to deal with multiple PTB packets.

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka@isc.org