[165232] in North American Network Operators' Group
Re: IP Fragmentation - Not reliable over the Internet?
daemon@ATHENA.MIT.EDU (Jaap Akkerhuis)
Tue Aug 27 06:04:44 2013
To: Tony Finch <dot@dotat.at>
From: Jaap Akkerhuis <jaap@NLnetLabs.nl>
In-reply-to: <alpine.LSU.2.00.1308271021100.6019@hermes-2.csi.cam.ac.uk>
Date: Tue, 27 Aug 2013 12:04:15 +0200
Cc: North American Network Operators' Group <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Christopher Palmer <Christopher.Palmer@microsoft.com> wrote:
>
> What is the probability that a random path between two Internet hosts
> will traverse a middlebox that drops or otherwise barfs on fragmented
> IPv4 packets?
This question is important for large EDNS packets so you'll find some
recent practical investigations from the perspective of people interested
in DNSSEC. For instance, a couple of presentations from Roland van
Rijswijk:
https://ripe64.ripe.net/presentations/91-20120418_-_RIPE64_-_Ljubljana_-_DNSSEC_-_UDP_issues.pdf
http://toronto45.icann.org/meetings/toronto2012/presentation-dnssec-fragmentation-17oct12-en.pdf
Related to this and maybe be of interest is the following blog post
<https://www.nlnetlabs.nl/blog/2013/06/04/pmtud4dns/>.
jaap
