Re: [qubes-users] MTU setting for all interfaces

2019-02-24 Thread Beto HydroxyButyrate
On Monday, February 25, 2019 at 12:14:34 AM UTC+10, unman wrote:
> On Sun, Feb 24, 2019 at 02:02:10PM +1000, Beto HydroxyButyrate wrote:
> > I have MTU 9000 set on my internal network.  sys-net connects to this
> > network.
> > 
> > I want all qubes VM interfaces to default to MTU 9000 rather than 1500.
> > 
> > Is there some simple global setting I can make to enable this?
> 
> You could set it at the router level in sys-net using a mangle table.
> This is available for both iptables and nftables.
> I've  done this with iptables in the past and I dont recall issues with
> conntrack and connected clients. ymmv
> 
> iptables has tcp-MSS patch that allows you to hit this in FORWARD rules
> - dont know if similar is available for nftables.
> 
> unman

Not quite what I want.  I want to be able to have all current and future VM 
instances which have networking enabled be provisioned with interfaces with the 
MTU set to 9000.  I do not want any local s/w to be mangling the jumbo frames.  
I want jumbo frames flowing freely and naturally, as ghod and Selina Lo 
intended, between, for instance, my NAS drive and various VMs.  Mainly for NAS 
SMB and/or NFS for performance.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/abab22f9-6340-4806-8212-50bc6bc4cdf9%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] MTU setting for all interfaces

2019-02-24 Thread unman
On Sun, Feb 24, 2019 at 02:02:10PM +1000, Beto HydroxyButyrate wrote:
> I have MTU 9000 set on my internal network.  sys-net connects to this
> network.
> 
> I want all qubes VM interfaces to default to MTU 9000 rather than 1500.
> 
> Is there some simple global setting I can make to enable this?

You could set it at the router level in sys-net using a mangle table.
This is available for both iptables and nftables.
I've  done this with iptables in the past and I dont recall issues with
conntrack and connected clients. ymmv

iptables has tcp-MSS patch that allows you to hit this in FORWARD rules
- dont know if similar is available for nftables.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190224141432.n76eoa5geseil5kk%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] MTU setting for all interfaces

2019-02-23 Thread Beto HydroxyButyrate
I have MTU 9000 set on my internal network.  sys-net connects to this
network.

I want all qubes VM interfaces to default to MTU 9000 rather than 1500.

Is there some simple global setting I can make to enable this?

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/deb2ae5e-6a2b-6fe1-17d1-ff53c6f7fc6d%40damon.com.
For more options, visit https://groups.google.com/d/optout.