From d41863641eaaeb2019c5c7967af933acaf3aab98 Mon Sep 17 00:00:00 2001 From: Dan <1596016+dan-v@users.noreply.github.com> Date: Mon, 6 Aug 2018 21:16:00 -0700 Subject: [PATCH] Change tcp mss to avoid mtu problems --- services/coreos/coreos.go | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/services/coreos/coreos.go b/services/coreos/coreos.go index 08c7abd..6e9405b 100644 --- a/services/coreos/coreos.go +++ b/services/coreos/coreos.go @@ -22,6 +22,14 @@ write_files: permissions: 0644 owner: root:root content: | + *mangle + :PREROUTING ACCEPT [0:0] + :INPUT ACCEPT [0:0] + :FORWARD ACCEPT [0:0] + :OUTPUT ACCEPT [0:0] + :POSTROUTING ACCEPT [0:0] + -A FORWARD -s 192.168.99.0/24 -o eth0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss --mss 1361:1536 -j TCPMSS --set-mss 1360 + COMMIT *nat :PREROUTING ACCEPT [0:0] :POSTROUTING ACCEPT [0:0]