RADIUS/UDP and the DF bit

Alan DeKok aland at deployingradius.com
Tue Aug 18 10:33:29 CEST 2009

Stefan Winter wrote:
> One workaround is to disable Path MTU discovery on the IP layer of the
> host (/proc/sys/net/ipv4/ip_no_pmtu_disc), but obviously, that's a bad
> workaround since it will ruin Path MTU discovery for every TCP service
> on the same host. Luckily, IPv6 doesn't seem to be affected since MTU
> discovery works differently there (AFAIK).


> The BIND sources have a small workaround in their socket code to get
> around that:

  That seems reasonable (which is a surprising thing to say about
something that Bind does...)

> May I suggest to do a similar thing in FreeRADIUS?

  Done && committed to git.  Please test. :)

  Alan DeKok.

More information about the Freeradius-Devel mailing list