Merge pull request #27677 from justinsb/fix_24254

Automatic merge from submit-queue AWS: Enable ICMP Type 3 Code 4 for ELBs This enables MTU discovery. Fixes #24254

Merge pull request #27677 from justinsb/fix_24254
554b7010 · k8s-merge-robot · GitHub · d82c3023 · fddc9d61 · 554b7010
Commit 554b7010 authored Jun 20, 2016 by k8s-merge-robot Committed by GitHub Jun 20, 2016
Hide whitespace changes
Inline Side-by-side

Showing with 13 additions and 0 deletions

aws.go pkg/cloudprovider/providers/aws/aws.go +13 -0

No files found.
--- a/pkg/cloudprovider/providers/aws/aws.go
+++ b/pkg/cloudprovider/providers/aws/aws.go
@@ -2313,6 +2313,19 @@ func (s *AWSCloud) EnsureLoadBalancer(apiService *api.Service, hosts []string) (

 			permissions.Insert(permission)
 		}
+
+		// Allow ICMP fragmentation packets, important for MTU discovery
+		{
+			permission := &ec2.IpPermission{
+				IpProtocol: aws.String("icmp"),
+				FromPort:   aws.Int64(3),
+				ToPort:     aws.Int64(4),
+				IpRanges:   []*ec2.IpRange{{CidrIp: aws.String("0.0.0.0/0")}},
+			}
+
+			permissions.Insert(permission)
+		}
+
 		_, err = s.setSecurityGroupIngress(securityGroupID, permissions)
 		if err != nil {
 			return nil, err