(no title)
flarecoder | 2 years ago
In the 2 different Wireshark dumps, a relevant difference is MSS=1460 and MSS=1380 in the second one.
I'd recommend setting the local NIC MTU to a low value just to see if it has an impact. However, the Wireshark dump doesn't show packet fragmentation, so perhaps this isn't a problem at all?
flarecoder|2 years ago
t0mas88|2 years ago
toast0|2 years ago
I have a browser based mtu test http://pmtud.enslaves.us/
Currently IPv4 only, requires a somewhat recent browser, and client to server testing is iffy, but if you start the test and get OK in the notes field for both directions, your MTU settings are probably fine (or something is doing proper mss clamping between your client and my server, my server is limited to 1500 MTU so problems with jumbograms can't be detected)
lxgr|2 years ago
A better idea would be to reduce the MSS inside the tunnel.
kungpao42|2 years ago
Set MTU on affected systems to 1400 or implement MSS clamping via firewall, etc.