mss tweaking now internal
This commit is contained in:
parent
bde7904f92
commit
c826a9e4b3
1 changed files with 0 additions and 17 deletions
|
|
@ -56,7 +56,6 @@ H3 {
|
||||||
<LI><A HREF="#Filtering">Filtering</A></LI>
|
<LI><A HREF="#Filtering">Filtering</A></LI>
|
||||||
<LI><A HREF="#Clustering">Clustering</A></LI>
|
<LI><A HREF="#Clustering">Clustering</A></LI>
|
||||||
<LI><A HREF="#Routing">Routing</A></LI>
|
<LI><A HREF="#Routing">Routing</A></LI>
|
||||||
<LI><A HREF="#AvoidingFragmentation">Avoiding Fragmentation</A></LI>
|
|
||||||
<LI><A HREF="#Performance">Performance</A></LI>
|
<LI><A HREF="#Performance">Performance</A></LI>
|
||||||
</OL>
|
</OL>
|
||||||
|
|
||||||
|
|
@ -1059,22 +1058,6 @@ ibgp" for IBGP. If this is not supported by your IOS revision, you
|
||||||
can use "maximum-paths" (which works for EBGP) and set
|
can use "maximum-paths" (which works for EBGP) and set
|
||||||
<B>as_number</B> to a private value such as 64512.<P>
|
<B>as_number</B> to a private value such as 64512.<P>
|
||||||
|
|
||||||
<H2 ID="AvoidingFragmentation">Avoiding Fragmentation</H2>
|
|
||||||
|
|
||||||
Fragmentation of encapsulated return packets to the LAC may be avoided
|
|
||||||
for TCP sessions by adding a firewall rule to clamps the MSS on
|
|
||||||
outgoing SYN packets.
|
|
||||||
|
|
||||||
The following is appropriate for interfaces with a typical MTU of
|
|
||||||
1500:
|
|
||||||
|
|
||||||
<pre>
|
|
||||||
iptables -A FORWARD -i tun+ -o eth0 \
|
|
||||||
-p tcp --tcp-flags SYN,RST SYN \
|
|
||||||
-m tcpmss --mss 1413:1600 \
|
|
||||||
-j TCPMSS --set-mss 1412
|
|
||||||
</pre>
|
|
||||||
|
|
||||||
<H2 ID="Performance">Performance</H2>
|
<H2 ID="Performance">Performance</H2>
|
||||||
|
|
||||||
Performance is great.<P>
|
Performance is great.<P>
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue