denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kernel-pfroute: Set lower MTU on TUN devices

Browse Source 
The default MTU of 1500 is too high if kernel-libipsec is used (considering
the overhead of UDP-encapsulated ESP), but might also have an effect if
a TUN device is only used to install a virtual IP (the route points to it,
so the system might use its MTU and 1500 would still be too high).

This also works around an issue on macOS 12 where no RTM_IFINFO event
is sent for the newly created TUN device (neither for the creation,
setting it "up", nor adding the address).  Changing the MTU, however,
triggers such an event and we can detect the virtual IP.

Closes strongswan/strongswan#707
This commit is contained in:
Tobias Brunner
2021-11-09 09:43:01 +01:00
parent eb19699a7a
commit f4bfdec21f
2 changed files with 15 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf/plugins/kernel-pfroute.opt
+3
View File
@@ -1,3 +1,6 @@
charon.plugins.kernel-pfroute.mtu = 1400
MTU to set on TUN devices created for virtual IPs.
charon.plugins.kernel-pfroute.vip_wait = 1000
Time in ms to wait until virtual IP addresses appear/disappear before
failing.