Re: RFC 8201 Packet Too Big Processing
Timothy Carlin <tjcarlin@iol.unh.edu> Fri, 10 April 2020 20:16 UTC
Return-Path: <tjcarlin@iol.unh.edu>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 268FE3A0C88 for <ipv6@ietfa.amsl.com>; Fri, 10 Apr 2020 13:16:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=iol.unh.edu
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zgQ9BWO3Apip for <ipv6@ietfa.amsl.com>; Fri, 10 Apr 2020 13:16:49 -0700 (PDT)
Received: from mail-wm1-x330.google.com (mail-wm1-x330.google.com [IPv6:2a00:1450:4864:20::330]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5BBAD3A0C87 for <6man@ietf.org>; Fri, 10 Apr 2020 13:16:49 -0700 (PDT)
Received: by mail-wm1-x330.google.com with SMTP id a201so3498579wme.1 for <6man@ietf.org>; Fri, 10 Apr 2020 13:16:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iol.unh.edu; s=unh-iol; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=sGssd6wPLCoX9NYNAYiYoVb6TPDjuTOTl6nDthdKYeE=; b=EG04LPGbZL6I2frkgg5qajYPF6LoxjAtol/rbZmmaiquvFbmaeF8rWrnhCAZ204EUg NZPPakx2GjQRPrk6prsuWL9lV+qbgXAPnabD5x4kEYJ0ZQPB/tSk6QmWniEBh5WFEuaX pERTAz0+TtSNQKziPfH/WzaF5mmZLUS5RfZ0A=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=sGssd6wPLCoX9NYNAYiYoVb6TPDjuTOTl6nDthdKYeE=; b=eNEWtLmd3VsrPrxpNvcpchmCdkJi1g10xjyzv3WG9166sc2GZeuhrRMplyeuchgvzH 1wby1nqIxn5qTA9o/tQI7sHeVcNJ9Jh4x/MkuGPvZuBID+/mY9DA2wxu98XFi4QRBWcL FAIRvk6W5bpzDtEPrAE+eEAb6Ko9zYqE6B5tK10fKWk+DvvUiZ/Nfctd9QCL0VHOehpd OoSnspQ4WtoD53DL41dFvBPjoPGeEfpncvTfoDbsi8NV8vOM7eDQysv/089ZMhGJioXK cp73oDxtRnnzsCwzbehwHc9dozIg8Lf/gDQAEjAAw/MNZuw05lNlQJpP2eETLCtkVUn8 cxjA==
X-Gm-Message-State: AGi0Puax17XkmF3dKdWptqmOTgSkFn2Tv0SMz1zD8Pj4rn1vtEELZ3Xn SfnblfEyByzEDtNLKBfanPRdBPJH7L/6ZX68m+YZg/6Mp8M4kQ==
X-Google-Smtp-Source: APiQypK4YlIqmXkAeK1hSV5gZ00E7xbzcToOVkxu4Rw7Cmk2QIyoKMs+xxnQGoSGX+KU0Vy127KnUa4IxqDVWg7GIoc=
X-Received: by 2002:a1c:96cf:: with SMTP id y198mr6635591wmd.186.1586549807763; Fri, 10 Apr 2020 13:16:47 -0700 (PDT)
MIME-Version: 1.0
References: <CAB-aFv8wVjcXB73wLrBupbq3XLdmdMWE9i-8+TwHfYQE6V52_w@mail.gmail.com> <a878bb68-38a9-0c0e-0006-c7830122cdee@si6networks.com> <CAB-aFv_h=f7t7cSro+GWttzK_cWm8H0-cN0CFt_KC74rqK_SUw@mail.gmail.com> <9bbd5fa4-c00f-3be1-9e09-a7299ce2b9dc@si6networks.com> <CAB-aFv8LPw+wEBaDYSB60Fgc=8kjAyu+wV66Ps0qV9CzG2j=rA@mail.gmail.com> <8b68f065-ff5f-9444-85fe-792045eb6529@si6networks.com> <CAB-aFv9nvP_EJJvKkRPFNZ6OAQ8YHr+oz6wbph+vp4092-VoeA@mail.gmail.com>
In-Reply-To: <CAB-aFv9nvP_EJJvKkRPFNZ6OAQ8YHr+oz6wbph+vp4092-VoeA@mail.gmail.com>
From: Timothy Carlin <tjcarlin@iol.unh.edu>
Date: Fri, 10 Apr 2020 16:16:11 -0400
Message-ID: <CAB-aFv_x3TXk-H-LH3+KY-vxYuGyjQWX5RxqWOM7c=vbTs96VA@mail.gmail.com>
Subject: Re: RFC 8201 Packet Too Big Processing
To: Fernando Gont <fgont@si6networks.com>
Cc: 6man@ietf.org
Content-Type: multipart/alternative; boundary="000000000000b5f23705a2f5692c"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/sg2upssrSj5Ekpq95y3McIsfyT0>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Apr 2020 20:16:51 -0000
On Fri, Apr 10, 2020 at 2:33 PM Timothy Carlin <tjcarlin@iol.unh.edu> wrote: > On Fri, Apr 10, 2020 at 2:20 PM Fernando Gont <fgont@si6networks.com> > wrote: > >> On 10/4/20 14:36, Timothy Carlin wrote: >> > On Fri, Apr 10, 2020 at 1:27 PM Fernando Gont <fgont@si6networks.com >> > <mailto:fgont@si6networks.com>> wrote: >> > >> > On 10/4/20 14:19, Timothy Carlin wrote: >> > > Hi Fernando, >> > > >> > > On Fri, Apr 10, 2020 at 1:14 PM Fernando Gont >> > <fgont@si6networks.com <mailto:fgont@si6networks.com> >> > > <mailto:fgont@si6networks.com <mailto:fgont@si6networks.com>>> >> wrote: >> > > >> > > Hello, Tim, >> > > >> > > On 10/4/20 14:07, Timothy Carlin wrote: >> > > > Hello, >> > > > >> > > > We've noticed during testing for RFC 8200 and 8201 that, >> > for packets >> > > > larger than 1280, the Linux kernel is processing invalid >> > Packet >> > > Too Big >> > > > messages that indicate an MTU less than 1280, and >> subsequently >> > > > fragmenting packets to a size of 1280. We've seen this >> > with 4.15 >> > > and 4.18. >> > > > >> > > > This is from Section 4 of RFC 8201: >> > > > >> > > > > If a node receives a Packet Too Big message >> reporting a >> > > next-hop MTU >> > > > > that is less than the IPv6 minimum link MTU, it must >> > discard it. >> > > > >> > > > Have others noticed this issue with Linux or other >> OSes? I'll >> > > also note >> > > > that it correctly does not generate an atomic fragment if >> the >> > > packet is >> > > > less than 1280 bytes. >> > > >> > > I'm trying to understand the scenario... >> > > >> > > Host sends a packet of size > 1280 >> > > It receives an ICMPv6 PTB < 1280 >> > > And it retransmit the packet as a fragmented packet, where >> > none of the >> > > fragments is larger than 1280 bytes? >> > > >> > > >> > > This is correct. Since the ICMPv6 PTB < 1280, and invalid, we >> would >> > > expect the PTB to be discarded, and subsequent packets (for that >> > > destination) to remain unfragmented. >> > >> > Agreed. Unless I'm missing something, there's no point in doing that >> > (at >> > the end of the day, if the offending MTU was < 1280, fragmenting >> > packets >> > at 1280 will be of no use). >> > >> > Can you provide the exact kernel version, so I may try to take a >> > look at >> > the kernel code and figure out what's going on? >> > >> > >> > 4.15.0-96-generic and 4.18.0-147 both seem to have this issue. >> >> Have you tried with newer kernels? e.g., I'm running 5.3.0-42-generic >> here. > > > I have not. These were from two relatively new distributions, but > apparently are lagging on the kernel version. I'll try something newer. > Indications are that this remains broken as of 5.3.0-050300-generic. Let me know if you want me to try another version.
- RFC 8201 Packet Too Big Processing Timothy Carlin
- Re: RFC 8201 Packet Too Big Processing Fernando Gont
- Re: RFC 8201 Packet Too Big Processing Timothy Carlin
- Re: RFC 8201 Packet Too Big Processing Fernando Gont
- Re: RFC 8201 Packet Too Big Processing Timothy Carlin
- Re: RFC 8201 Packet Too Big Processing Fernando Gont
- Re: RFC 8201 Packet Too Big Processing Timothy Carlin
- Re: RFC 8201 Packet Too Big Processing Timothy Carlin
- Re: RFC 8201 Packet Too Big Processing Erik Kline
- Re: RFC 8201 Packet Too Big Processing Timothy Winters
- Re: RFC 8201 Packet Too Big Processing Bob Hinden
- Re: RFC 8201 Packet Too Big Processing Timothy Winters
- Re: RFC 8201 Packet Too Big Processing Tom Herbert