diff options
| author | initramfs <initramfs@initramfs.io> | 2022-09-24 11:01:50 +0800 |
|---|---|---|
| committer | initramfs <initramfs@initramfs.io> | 2022-09-25 04:00:40 +0800 |
| commit | 6205398554d80d117838085f03a218466264862c (patch) | |
| tree | eebb6e90c0d9bea6278a2d02d8b6b5cdc232d10b /docs | |
| parent | 4fdd85cdfc2c9e661be2da3a34d0a2f3c7e43fd5 (diff) | |
| download | vyos-documentation-6205398554d80d117838085f03a218466264862c.tar.gz vyos-documentation-6205398554d80d117838085f03a218466264862c.zip | |
firewall: T4709: update documentation for TCP MSS clamping
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/configuration/firewall/index.rst | 14 |
1 files changed, 10 insertions, 4 deletions
diff --git a/docs/configuration/firewall/index.rst b/docs/configuration/firewall/index.rst index 8a90e7fa..c2e584a3 100644 --- a/docs/configuration/firewall/index.rst +++ b/docs/configuration/firewall/index.rst @@ -812,10 +812,13 @@ IPv4 .. cfgcmd:: set firewall options interface <interface> adjust-mss - <number-of-bytes> + <mss | clamp-mss-to-pmtu> Use this command to set the maximum segment size for IPv4 transit - packets on a specific interface (500-1460 bytes). + packets on a specific interface (536-65535 bytes). + + Instead of a numerical MSS value `clamp-mss-to-pmtu` can be used to + automatically set the proper value. Example ------- @@ -835,10 +838,13 @@ IPv6 ==== .. cfgcmd:: set firewall options interface <interface> adjust-mss6 - <number-of-bytes> + <mss | clamp-mss-to-pmtu> Use this command to set the maximum segment size for IPv6 transit - packets on a specific interface (1280-1492 bytes). + packets on a specific interface (1220-65535 bytes). + + Instead of a numerical MSS value `clamp-mss-to-pmtu` can be used to + automatically set the proper value. .. _firewall:ipv6_example: |