diff options
| author | Antonio Quartulli <antonio@mandelbit.com> | 2026-09-28 16:02:20 +0200 |
|---|---|---|
| committer | Antonio Quartulli <antonio@mandelbit.com> | 2026-09-29 23:33:24 +0200 |
| commit | 12d3aa212f35b8cdd9a0ccd849b45beea46ed94d (patch) | |
| tree | 749a4cf397b026fc2c1b5b5f1183dc2a28de8b0e /data | |
| parent | 98e4432163032c894ef10b7f14522471c2a54530 (diff) | |
| download | vyos-1x-12d3aa212f35b8cdd9a0ccd849b45beea46ed94d.tar.gz vyos-1x-12d3aa212f35b8cdd9a0ccd849b45beea46ed94d.zip | |
openvpn: T9364: default the MTU to 1420 when DCO is enabled
The ovpn Kernel module does no MSS clamping, so with a 1500 bytes MTU
full sized packets get fragmented on the underlay.
Add an "mtu" node, rendered as "tun-mtu". With "offload dco" it
defaults to 1420, unless a raw tun-mtu/link-mtu/udp-mtu option is
present. Reject "mtu" together with such an option, below 100, and
below 1280 when IPv6 runs inside the tunnel.
Diffstat (limited to 'data')
| -rw-r--r-- | data/templates/openvpn/server.conf.j2 | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/data/templates/openvpn/server.conf.j2 b/data/templates/openvpn/server.conf.j2 index 999af5086..729ab7a80 100644 --- a/data/templates/openvpn/server.conf.j2 +++ b/data/templates/openvpn/server.conf.j2 @@ -52,6 +52,9 @@ compress lzo {% if offload.dco is not vyos_defined %} disable-dco {% endif %} +{% if tun_mtu is vyos_defined %} +tun-mtu {{ tun_mtu }} +{% endif %} {% if mode is vyos_defined('client') %} # |