On 2017-2-9, at 8:39, otroan(_at_)employees(_dot_)org wrote:
"Many network security devices block all ICMP messages for perceived
security benefits, including the errors that are necessary for the proper
operation of PMTUD. This can result in connections that complete the
TCP three-way handshake correctly, but then hang when data is transferred.
This state is referred to as a black hole connection. This is one significant
example of how PMTUD is broken on the Internet."
Like it.
Might be worthwhile to point at PLPMTUD as something that works, if the
app/service meets its requirements.
Lars
signature.asc
Description: Message signed with OpenPGP