<br><br><div class="gmail_quote">On Mon, Jan 10, 2011 at 11:50 PM, SamLT <span dir="ltr"><<a href="mailto:samuel.lethiec@intelunix.fr">samuel.lethiec@intelunix.fr</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">On Mon, Jan 10, 2011 at 01:03:39PM -0600, <a href="mailto:richardvoigt@gmail.com">richardvoigt@gmail.com</a> wrote:<br>
> On Mon, Jan 10, 2011 at 1:01 PM, <a href="mailto:richardvoigt@gmail.com">richardvoigt@gmail.com</a> <<br>
> <a href="mailto:richardvoigt@gmail.com">richardvoigt@gmail.com</a>> wrote:<br>
><br>
> ><br>
> ><br>
> > On Mon, Jan 10, 2011 at 12:53 PM, Jan Seiffert <<br>
> > <a href="mailto:kaffeemonster@googlemail.com">kaffeemonster@googlemail.com</a>> wrote:<br>
> ><br>
> >> 2011/1/10 andu novac <<a href="mailto:novac.andu@gmail.com">novac.andu@gmail.com</a>>:<br>
> >> >> You're welcome. However you would not say "nice crystal ball" if you<br>
> >> saw<br>
> >> >> the scratch marks it leaves on the furniture ;)<br>
> >> ><br>
> >> > Furniture is replaceable, I'd say it's worth it :)<br>
> >> ><br>
> >><br>
> >> But since your furniture may be of value...<br>
> >> Someone already solved this quite nicely, look at the iptables manpage:<br>
> >><br>
> ><br>
> > This is fantastic if you must control stuff centrally. But it will result<br>
> > in every outgoing packet getting fragmented. Reducing the mtu on the client<br>
> > avoids that.<br>
> ><br>
><br>
> Oh nevermind, it affect the TCP option negotiation, so it causes the client<br>
> to send smaller packets. So it is a general solution for TCP (and only<br>
> TCP). For UDP, the mtu still needs to be reduced at the client.<br>
><br>
<br>
<br>
</div>Reducing the mtu on the client side will also mean they'll use this mtu<br>
for local traffic which isn't usually a good idea (performance wise:<br>
lower speed, higher cpu usage).<br>
<div><div></div><div class="h5"><br><br></div></div></blockquote><div><br></div><div>That's true, but it's a disproportionate cost. You have to decide between a 3% increase in packet count on local connections vs a 100% increase in packet count on internet traffic (if things go well and the fragments don't break things outright).</div>
</div>