From 6a2e575a2fabda36319be8614df92adab6f2c7e9 Mon Sep 17 00:00:00 2001 From: Nikos Mavrogiannopoulos Date: Mon, 20 Apr 2015 20:22:39 +0200 Subject: [PATCH] doc update --- NEWS | 2 ++ src/ocserv-args.def | 2 ++ 2 files changed, 4 insertions(+) diff --git a/NEWS b/NEWS index 73848ed5..c34d7f1d 100644 --- a/NEWS +++ b/NEWS @@ -9,6 +9,8 @@ - When multiple authentication methods are set and the primary includes a certificate, no longer require a certificate for all clients. - When receiving non-minimal DPD messages, reflect their contents. +- try-mtu-discovery config option was fixed to not set the DF bit if + it is unset. - sec-mod: Do not impose timeouts on reads from main. That would prevent issues when reading in a very busy system. diff --git a/src/ocserv-args.def b/src/ocserv-args.def index a524dc61..75880f48 100644 --- a/src/ocserv-args.def +++ b/src/ocserv-args.def @@ -218,6 +218,8 @@ dpd = 90 mobile-dpd = 1800 # MTU discovery (DPD must be enabled) +# If set, this forces all UDP packets to carry the don't fragment +# (DF) bit. try-mtu-discovery = false # The key and the certificates of the server