FIN_WAIT with direct routing.

[Joseph Mack NA3T]

On Fri, 3 Nov 2006, Andreas Lundqvist wrote:

> We seem to have found a workaround.
> The problem is that our WAN only allows packets with maximum size of 1518 and
> with encryption headers we exceed that. Our other site's fix this in their
> switches before sending it out on our WAN but this is apparently not
> supported in the switches on my two problem site's.

thanks for the info.

the problem is more widespread than I thought

http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.LVS-Tun.html#MTU

we've only had problems with MTU in LVS-Tun so far.

How does encryption increase the packet size?

> So the fix was to lower MTU on my three Realservers to 1400.

OK

Joe

-- 
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!