Re: [Ntp] Is the real MTU still 576?

Watson Ladd <watsonbladd@gmail.com> Mon, 15 June 2020 16:04 UTC

Return-Path: <watsonbladd@gmail.com>
X-Original-To: ntp@ietfa.amsl.com
Delivered-To: ntp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 249DB3A0D35 for <ntp@ietfa.amsl.com>; Mon, 15 Jun 2020 09:04:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vBYWQRNGJ-0t for <ntp@ietfa.amsl.com>; Mon, 15 Jun 2020 09:04:24 -0700 (PDT)
Received: from mail-lf1-x130.google.com (mail-lf1-x130.google.com [IPv6:2a00:1450:4864:20::130]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7964F3A07B6 for <ntp@ietf.org>; Mon, 15 Jun 2020 09:04:24 -0700 (PDT)
Received: by mail-lf1-x130.google.com with SMTP id t74so2285115lff.2 for <ntp@ietf.org>; Mon, 15 Jun 2020 09:04:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=6/hHgT5pg93tkPz/Jj57tx7XFJ8JHPT4w7cq/oqFdsA=; b=NVnk+M1BFZsKtBcWNqKN7GZrXIcULyy7LXfJC34F8eQcbecYVeew8yAca3W9JsDEOW ZguXq5Na1iEGT2l9VGoPScaNUFLgAFo0UoNWl8veZ1eYT+7yL3C69p9ZX2KdfkUVPOnP TUHg6nreMHBVz09Fb8XUu0JH1DcuiUD19up46u+S7dKCbFP63gdbV+x0D0CwFz+zghX0 xkXwvHHePiyMoglIJR50KlpmD0YjtSTKJySEbal9a3ApKFU11GgfmwhosvakFpFzlDBu uv5KV8tQAUmAl64aRWYCO4RdKYcpMsOJTXRhBP1sINhji9Wf6jjmvew6tnFeA2yUdoy1 HRng==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=6/hHgT5pg93tkPz/Jj57tx7XFJ8JHPT4w7cq/oqFdsA=; b=AZeHil2mFOPjGqxG1H+ZZb5Jzw7xBbXfrgER84pfNvOAEvr9I0mzWyPwbchYqU/GUk Lq18wXGdA2+3yyH2hoJ7aionP5SaNst6LQtvuvKq2VRvdvdyPlTaHTJYB+8iWze1Etoa 1JE8ZJ5o6q2lLW3jvzyh9fT4j1xonH5EfwBjGVDeHClUgHHT8/gP2LLoTD7l35+SXCKK iPjrk8ImU2KTGRe1X1Bhy0N5FUd2DEwG6jBsPzFhDPaZFMXkdL9c8v+We+MCZFbTp2E8 WYScyB9uenEX63kOpxUlSuaEhItMysE6s33Tw2oQJp5RGQZWkY/E7EA+U8utwp6qbx/f sMEQ==
X-Gm-Message-State: AOAM531HoPYl6WmEB4Bxf2mmD++8EKuILyxP2nfWHYYc9+38ULTMo1zd mObahPH30I948shXEi6YJfOYCS1IhcMBMogCSg4=
X-Google-Smtp-Source: ABdhPJw2Mmb5E422qszYpqifyNsUR61noeY9nh3Aee3+z/fZT3ZwI/Xsc74FDy8o7SBSDWvDcTFVPOYAxsUQrbWdb8o=
X-Received: by 2002:a19:fc0a:: with SMTP id a10mr14229029lfi.176.1592237062508; Mon, 15 Jun 2020 09:04:22 -0700 (PDT)
MIME-Version: 1.0
References: <20200615005222.0D6A040605C@ip-64-139-1-69.sjc.megapath.net> <CAJm83bApAiULep7wXpE9e5EVZr8b93sN_1orRyOXCWM_BgLVWA@mail.gmail.com>
In-Reply-To: <CAJm83bApAiULep7wXpE9e5EVZr8b93sN_1orRyOXCWM_BgLVWA@mail.gmail.com>
From: Watson Ladd <watsonbladd@gmail.com>
Date: Mon, 15 Jun 2020 12:04:11 -0400
Message-ID: <CACsn0cn640V3eB1mtfBtAASnyxc=xM5tDFbBjyYXeHtxUnpuQg@mail.gmail.com>
To: Daniel Franke <dfoxfranke@gmail.com>
Cc: Hal Murray <hmurray@megapathdsl.net>, NTP WG <ntp@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/ntp/Z6tLe6Aot5y0qayTc6baX6QHv5Y>
Subject: Re: [Ntp] Is the real MTU still 576?
X-BeenThere: ntp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: <ntp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ntp>, <mailto:ntp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ntp/>
List-Post: <mailto:ntp@ietf.org>
List-Help: <mailto:ntp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ntp>, <mailto:ntp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jun 2020 16:04:26 -0000

On Mon, Jun 15, 2020 at 10:42 AM Daniel Franke <dfoxfranke@gmail.com> wrote:
>
> Support for 1500 bytes or more at the link layer is pretty much universal, but that includes IP and UDP headers so for the application you have less than that. Those headers may contain options so you can't assume they'll be some particular size, and you may have multiple layers of them due to VPN tunneling, leaving an MTU of less than 1500 bytes for the innermost layer. What's ultimately left over for the application payload is the "segment size", rather than the "transmission unit".
>
> The only "correct" option if you want to go beyond the minimum MTU is to use path MTU discovery, but for a stateless protocol like NTP that's not really practical, at least not for servers. IPv6 mandates a minimum MTU of 1280 bytes. Again that's an MTU, not an MSS, but nonetheless it's very rare that a 1280-byte segment would get fragmented, no matter whether it's going over IPv4 or IPv6. I think "MSS is probably at least 1280" makes a good rule of thumb whenever PMTUD isn't practical.

We have some data backing this up:
https://blog.cloudflare.com/increasing-ipv6-mtu/. 98% of IPv4 and
93.23% of IPv6 hosts advertised 1340 MSS in SYN. 1280 is likely to be
much closer to 99% of IPv6, but sadly we didn't get that measurement.

Sincerely,
Watson Ladd



--
"Man is born free, but everywhere he is in chains".
--Rousseau.