HIPL

packet that initializes handshake is dropped

Asked by Samuel Richter

Starting hipd on two machines and pinging the HIT of one from the other leads to the first packet lost on otherwise successful connection.

I was told this packet was once buffered in the kernel, but this feature was somehow lost.

Question information

Language:
English Edit question
Status:
Expired
For:
HIPL Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:

This question was originally filed as bug #680488.

Revision history for this message
Miika Komu (miika-iki) said : 		#1

This is a "feature" in the Linux IPsec (see the first bullet):

http://vger.kernel.org/~davem/net_todo.html

Linux IPsec assumes transport layer handles packet retransmissions. IMHO, this is a fair assumption except that it can cause unnecessary delay to e.g. TCP connections, leading to lowered user experience.

So either it should reported to some other bugzilla or the description of this bug should be changed to "hipfw lacks a packet cache mechanism".

Revision history for this message
René Hummen (rene-hummen) said : 		#2

This is not a bug in HIPL. Nevertheless, this information is useful, so we should keep it. "Answers" seems to be a far better place for this purpose.

Revision history for this message
Launchpad Janitor (janitor) said : 		#3

This question was expired because it remained in the 'Open' state without activity for the last 15 days.