Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
improved MTU calculation for GlobalProtect ESP
On Wed, Aug 16, 2017 at 8:03 PM, Daniel Lenski wrote: > I believe the correct [ESP padding] algorithm is actually as follows: > > * From payload MTU, add 2 footer bytes, round *up* to a multiple of > the blocksize. Add the size of the MAC, IV, and other headers. That's > the size of the packet on the wire. > * From wire packet MTU, subtract headers and MAC and IV, round *down* > to a multiple of blocksize, subtract TWO footer bytes, and that's the > largest payload you can carry. Signed-off-by: Daniel Lenski <dlenski@gmail.com> Signed-off-by: David Woodhouse <dwmw2@infradead.org>
- Loading branch information
Showing
1 changed file
with
17 additions
and
10 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters