<feed xmlns='http://www.w3.org/2005/Atom'>
<title>vyos-1x.git/src/tests/test_interfaces_openvpn.py, branch rolling</title>
<subtitle>VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
</subtitle>
<id>https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling</id>
<link rel='self' href='https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/'/>
<updated>2026-09-29T21:33:24+00:00</updated>
<entry>
<title>openvpn: T9364: default the MTU to 1420 when DCO is enabled</title>
<updated>2026-09-29T21:33:24+00:00</updated>
<author>
<name>Antonio Quartulli</name>
<email>antonio@mandelbit.com</email>
</author>
<published>2026-09-28T14:02:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=12d3aa212f35b8cdd9a0ccd849b45beea46ed94d'/>
<id>urn:sha1:12d3aa212f35b8cdd9a0ccd849b45beea46ed94d</id>
<content type='text'>
The ovpn Kernel module does no MSS clamping, so with a 1500 bytes MTU
full sized packets get fragmented on the underlay.

Add an "mtu" node, rendered as "tun-mtu". With "offload dco" it
defaults to 1420, unless a raw tun-mtu/link-mtu/udp-mtu option is
present. Reject "mtu" together with such an option, below 100, and
below 1280 when IPv6 runs inside the tunnel.
</content>
</entry>
</feed>
