Forum Discussion

Neo_Ph's avatar
Neo_Ph
Icon for Altocumulus rankAltocumulus
May 09, 2024

VPN fragmented IP packets dropped

VPN fragmented IP packets being dropped by the Big-IP, because of 'tm.minipfragsize > default=552' (K52103592)  TCPDump showed the ip packets arriving on the client-side and never being forwarded on ...
irule
minipfragsize
more fragment
zamroni777's avatar
zamroni777
Icon for MVP rankMVP
May 14, 2024

as recommended by K52103592 referred by the error log, it is better if you solve the MTU matter.
executing irules for every IP fragment might cause performance problem.

enabling jumbo frame (MTU=9000 bytes) might help.
i assume the f5 resides behind router/switch which most of them supports jumbo frame nowadays.

https://en.wikipedia.org/wiki/Jumbo_frame