RADIUS/UDP and the DF bit

[Alan DeKok]

Stefan Winter wrote:
> One workaround is to disable Path MTU discovery on the IP layer of the
> host (/proc/sys/net/ipv4/ip_no_pmtu_disc), but obviously, that's a bad
> workaround since it will ruin Path MTU discovery for every TCP service
> on the same host. Luckily, IPv6 doesn't seem to be affected since MTU
> discovery works differently there (AFAIK).

  OK.

> The BIND sources have a small workaround in their socket code to get
> around that:

  That seems reasonable (which is a surprising thing to say about
something that Bind does...)

> May I suggest to do a similar thing in FreeRADIUS?

  Done && committed to git.  Please test. :)

  Alan DeKok.