Merge pull request #27677 from justinsb/fix_24254

Automatic merge from submit-queue AWS: Enable ICMP Type 3 Code 4 for ELBs This enables MTU discovery. Fixes #24254
kubernetes · Jun 20, 2016 · 554b701 · 554b701
2 parents d82c302 + fddc9d6
commit 554b701
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/pkg/cloudprovider/providers/aws/aws.go b/pkg/cloudprovider/providers/aws/aws.go
@@ -2313,6 +2313,19 @@ func (s *AWSCloud) EnsureLoadBalancer(apiService *api.Service, hosts []string) (
 
 			permissions.Insert(permission)
 		}
+
+		// Allow ICMP fragmentation packets, important for MTU discovery
+		{
+			permission := &ec2.IpPermission{
+				IpProtocol: aws.String("icmp"),
+				FromPort:   aws.Int64(3),
+				ToPort:     aws.Int64(4),
+				IpRanges:   []*ec2.IpRange{{CidrIp: aws.String("0.0.0.0/0")}},
+			}
+
+			permissions.Insert(permission)
+		}
+
 		_, err = s.setSecurityGroupIngress(securityGroupID, permissions)
 		if err != nil {
 			return nil, err