Re: [v6ops] proposed TCP MSS text for rfc6204bis

Mark Andrews <marka@isc.org> Sun, 20 May 2012 14:04 UTC

Return-Path: <marka@isc.org>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0963E21F84CD for <v6ops@ietfa.amsl.com>; Sun, 20 May 2012 07:04:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_13=0.6]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fxBB1Fne1gAO for <v6ops@ietfa.amsl.com>; Sun, 20 May 2012 07:04:58 -0700 (PDT)
Received: from mx.ams1.isc.org (mx.ams1.isc.org [IPv6:2001:500:60::65]) by ietfa.amsl.com (Postfix) with ESMTP id 30A5221F8496 for <v6ops@ietf.org>; Sun, 20 May 2012 07:04:58 -0700 (PDT)
Received: from bikeshed.isc.org (bikeshed.isc.org [IPv6:2001:4f8:3:d::19]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (Client CN "mail.isc.org", Issuer "RapidSSL CA" (not verified)) by mx.ams1.isc.org (Postfix) with ESMTPS id AAE505F9899; Sun, 20 May 2012 14:04:40 +0000 (UTC) (envelope-from marka@isc.org)
Received: from drugs.dv.isc.org (unknown [IPv6:2001:470:1f00:820:79e9:7881:f98f:57e7]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by bikeshed.isc.org (Postfix) with ESMTPSA id ADD99216C33; Sun, 20 May 2012 14:04:38 +0000 (UTC) (envelope-from marka@isc.org)
Received: from drugs.dv.isc.org (localhost [127.0.0.1]) by drugs.dv.isc.org (Postfix) with ESMTP id 9E5A520C611B; Mon, 21 May 2012 00:04:21 +1000 (EST)
To: Brian E Carpenter <brian.e.carpenter@gmail.com>
From: Mark Andrews <marka@isc.org>
References: <4FB74456.2090009@gmail.com> <20120519080006.GZ84425@Space.Net> <4FB775A3.1030900@gmail.com> <20120519.141906.74656347.sthaug@nethelp.no> <4FB7A7CC.6060503@gmail.com> <m27gw7eub0.wl%randy@psg.com> <4FB89733.2080106@gmail.com>
In-reply-to: Your message of "Sun, 20 May 2012 08:03:15 +0100." <4FB89733.2080106@gmail.com>
Date: Mon, 21 May 2012 00:04:20 +1000
Message-Id: <20120520140421.9E5A520C611B@drugs.dv.isc.org>
Cc: v6ops@ietf.org
Subject: Re: [v6ops] proposed TCP MSS text for rfc6204bis
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 20 May 2012 14:04:59 -0000

In message <4FB89733.2080106@gmail.com>, Brian E Carpenter writes:
> On 2012-05-19 22:26, Randy Bush wrote:
> >> If you want to send packets of arbitrary size, in any environment
> >> where PMTUD is impossible or fails, won't you need to always include
> >> a fragmentation header in every packet greater than 1280?
> > 
> > see discussion of jumbo frames, commonly 4k or 9k, between consenting
> > adults on known links
> 
> Yes indeed, but that isn't the general case. Across the open Internet,
> I think we have the situation I described.
> 
> On 2012-05-19 21:16, Gert Doering wrote:
> 
> >>> UDP packets larger than 1280 bytes
> >> > Don't do that!
> > 
> > Tell that to the DNS people.  They seem to really like not-using-TCP.
> 
> Yes, but I understand that DNSSEC more or less dooms that plan anyway.
> 
> However, I thinks it's true that the only fail-safe solution is to
> include a frag header if you need to send UDP >1280.
> 
>    Brian

For DNS we just fragment at 1280 using IPV6_USE_MIN_MTU.   We were
thinking about this back in 1998 (draft-ietf-ipngwg-bsd-frag-00.txt)
which was rolled into the advanced socket api.  It took a few more
years than I would have liked to become RFC and for implementations
to be available.  EDNS was already being developed back then and
it was obvious that PMTUD wouldn't work for large nameservers even
if they got the ICMPv6 PTBs.

For DNS there is little to be gained by trying to send any bigger
packets.

YMMV for other UDP based protocols.

Mark

>     Brian
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka@isc.org