diff options
| author | Robert Göhler <github@ghlr.de> | 2022-12-19 19:55:30 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-12-19 19:55:30 +0100 |
| commit | 768dd2b4a3935a813f0086f03031af1f9ae29348 (patch) | |
| tree | fe280f290eac25c440af695668e66ccfd27cd5f8 | |
| parent | 9ca78c3edc4a72616f4135140c6d624227e8d1b2 (diff) | |
| parent | 6205398554d80d117838085f03a218466264862c (diff) | |
| download | vyos-documentation-768dd2b4a3935a813f0086f03031af1f9ae29348.tar.gz vyos-documentation-768dd2b4a3935a813f0086f03031af1f9ae29348.zip | |
Merge pull request #859 from initramfs/equuleus-fix-tcp-mss
firewall: T4709: update documentation for TCP MSS clamping
| -rw-r--r-- | docs/configuration/firewall/index.rst | 14 |
1 files changed, 10 insertions, 4 deletions
diff --git a/docs/configuration/firewall/index.rst b/docs/configuration/firewall/index.rst index 8a90e7fa..c2e584a3 100644 --- a/docs/configuration/firewall/index.rst +++ b/docs/configuration/firewall/index.rst @@ -812,10 +812,13 @@ IPv4 .. cfgcmd:: set firewall options interface <interface> adjust-mss - <number-of-bytes> + <mss | clamp-mss-to-pmtu> Use this command to set the maximum segment size for IPv4 transit - packets on a specific interface (500-1460 bytes). + packets on a specific interface (536-65535 bytes). + + Instead of a numerical MSS value `clamp-mss-to-pmtu` can be used to + automatically set the proper value. Example ------- @@ -835,10 +838,13 @@ IPv6 ==== .. cfgcmd:: set firewall options interface <interface> adjust-mss6 - <number-of-bytes> + <mss | clamp-mss-to-pmtu> Use this command to set the maximum segment size for IPv6 transit - packets on a specific interface (1280-1492 bytes). + packets on a specific interface (1220-65535 bytes). + + Instead of a numerical MSS value `clamp-mss-to-pmtu` can be used to + automatically set the proper value. .. _firewall:ipv6_example: |