On Thu, Mar 11, 2021 at 03:25:25PM +0000, tincanteksup wrote: > I was expecting that openvpn configure MSS at the IP level so > that only the kernel manages that side of the packet creation.
What would happen if the OpenVPN client is actually a router that forward trafic from a network ? In that case, only the dynamic TCP MSS clamping can work. The same if your OpenVPN server is not the end server you communicate with. The only case what you suggest might work is if the OpenVPN client *is* the application client and the OpenVPN server *is* the application server. In that case it would be enough that the tun or tap interface presents a MTU which takes in account OpenVPN header overhead. In my use cases, this nevers happens. _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
