From fddc9d61fade9340c8b0d261f62a1dd6b58e5cb3 Mon Sep 17 00:00:00 2001 From: Justin Santa Barbara Date: Sat, 18 Jun 2016 21:52:10 -0400 Subject: [PATCH] AWS: Enable ICMP Type 3 Code 4 for ELBs This enables MTU discovery. Fixes #24254 --- pkg/cloudprovider/providers/aws/aws.go | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/pkg/cloudprovider/providers/aws/aws.go b/pkg/cloudprovider/providers/aws/aws.go index f836abf9016..d5487b7d504 100644 --- a/pkg/cloudprovider/providers/aws/aws.go +++ b/pkg/cloudprovider/providers/aws/aws.go @@ -2317,6 +2317,19 @@ func (s *AWSCloud) EnsureLoadBalancer(apiService *api.Service, hosts []string) ( permissions.Insert(permission) } + + // Allow ICMP fragmentation packets, important for MTU discovery + { + permission := &ec2.IpPermission{ + IpProtocol: aws.String("icmp"), + FromPort: aws.Int64(3), + ToPort: aws.Int64(4), + IpRanges: []*ec2.IpRange{{CidrIp: aws.String("0.0.0.0/0")}}, + } + + permissions.Insert(permission) + } + _, err = s.setSecurityGroupIngress(securityGroupID, permissions) if err != nil { return nil, err