=== RFC1191 support in IPSEC tunnels Contact: Wojciech Macek The Semihalf team has been working on providing support for RFC1191 in IPSEC tunnels. This allows the PMTUD algorithm to dynamically discover the maximum path MTU the tunnel can handle and update tunnel parameters accordingly. As a result, a better performance can be observed as there is no need for packet fragmentation. The newly introduced rework includes: * NEEDFRAG support for IPSEC link:https://cgit.freebsd.org/src/commit/?id=d9d59bb1af142e7575032dd6c51fc64580de84df[commit d9d59bb1af1] * PMTUD for IPv4 IPSEC over IPv6 link link:https://cgit.freebsd.org/src/commit/?id=4f3376951d7024d1c3446af2260cef9e4d3404a6[commit 4f3376951d70] * Security fix as per RFC1191 specs link:https://cgit.freebsd.org/src/commit/?id=b4220bf387e62f59d73308f122f5eea887a59d58[commit b4220bf387e6] * PMTUD support for IPv6 tunnel link:https://cgit.freebsd.org/src/commit/?id=9dfc8606eb80a49a0b071ff17dbbfa307d7248be[commit 9dfc8606eb80] Sponsor: Stormshield