Document fragment_size for RadSec

The comments about EAP and ethernet frames are no longer
relevant

diff --git a/raddb/sites-available/tls b/raddb/sites-available/tls
index 8cba28fa3b6aebb30209b7586548434ffb3f61f2..b1c531df9a7f452ffd76a663214571d5e9c703dd 100644 (file)
--- a/raddb/sites-available/tls
+++ b/raddb/sites-available/tls
@@ -61,15 +61,14 @@ listen {
                random_file = ${certdir}/random
 
                #
-               #  This can never exceed the size of a RADIUS
-               #  packet (4096 bytes), and is preferably half
-               #  that, to accomodate other attributes in
-               #  RADIUS packet.  On most APs the MAX packet
-               #  length is configured between 1500 - 1600
-               #  In these cases, fragment size should be
-               #  1024 or less.
+               #  The default fragment size is 1K.
+               #  However, it's possible to send much more data than
+               #  that over a TCP connection.  The upper limit is 64K.
+               #  Setting the fragment size to more than 1K means that
+               #  there are fewer round trips when setting up a TLS
+               #  connection.  But only if the certificates are large.
                #
-       #       fragment_size = 1024
+       #       fragment_size = 65536
 
                #  include_length is a flag which is
                #  by default set to yes If set to
@@ -311,15 +310,11 @@ home_server tls {
                random_file = ${certdir}/random
 
                #
-               #  This can never exceed the size of a RADIUS
-               #  packet (4096 bytes), and is preferably half
-               #  that, to accomodate other attributes in
-               #  RADIUS packet.  On most APs the MAX packet
-               #  length is configured between 1500 - 1600
-               #  In these cases, fragment size should be
-               #  1024 or less.
+               #  The default fragment size is 1K.
+               #  However, TLS can send 64K of data at once.
+               #  It can be useful to set it higher.
                #
-       #       fragment_size = 1024
+       #       fragment_size = 65536
 
                #  include_length is a flag which is
                #  by default set to yes If set to