Forum Discussion
draco_184361
Nimbostratus
Oct 24, 2017F5 setting the DF bit. Can we make F5 not set DF bit ?
F5 setting the DF bit. Can we make F5 not set DF bit ?So that router could fragment it if more than its interface MTU?we are doinf SSL offload for one of the virtual server.So the ssl handshake server hello packet is a bit bigger than the MTU size set on router.So since DF bit set by F5, router doesnt fragment and drops the packet.
1 Reply
- Simon_Blakely
Employee
DF-bit set is to allow Path MTU discovery
K13948: Overview of the BIG-IP Path MTU Discovery (11.x - 12.x)You can disable this option as detailed in the document, but this may interfere with correct MTU discovery.
You can also set the VLAN MTU to match your Router MTU.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects