Home-Network/home-network-k3s-impl
2
0 Fork 0
Code Issues 3 Pull Requests 3 Actions Packages Projects Releases Wiki Activity

Merge feature/vpn-mtu-tune into main

Browse Source
This commit is contained in:
jakman85 committed 2026-08-22 23:46:37 -05:00
2 parents 49dca0e8bb b859e52697
commit bc42c4bee9
1 file changed
+6 -2
Download Patch File Download Diff File Expand all files Collapse all files
platform/vpn-egress/gluetun-gateway.yaml
+6 -2
View File
@@ -66,9 +66,13 @@ spec:
# DATA-channel packets fit (the handshake is small so this wasn't the connect blocker, but the # DATA-channel packets fit (the handshake is small so this wasn't the connect blocker, but the
# data channel needs it). Hardcoded strings (int-coercion gotcha). See DECISIONS-LOG. # data channel needs it). Hardcoded strings (int-coercion gotcha). See DECISIONS-LOG.
- name: OPENVPN_MTU - name: OPENVPN_MTU
value: "1350" value: "1300" # tun-mtu: extra margin under the 1450 pod MTU (data channel)
- name: OPENVPN_MSSFIX - name: OPENVPN_MSSFIX
value: "1350" value: "1300" # clamp TCP-in-tunnel to match
- name: OPENVPN_FLAGS
value: "--tls-mtu 1200 --hand-window 120" # shrink the CONTROL-channel packets (RSA-4096 strong
# preset handshake) so they fit reliably under 1450, and give the
# handshake longer than the default 60s to complete over a lossy path.
# PIA credentials from the SOPS secret (Gluetun's PIA OpenVPN creds env): # PIA credentials from the SOPS secret (Gluetun's PIA OpenVPN creds env):
- name: OPENVPN_USER - name: OPENVPN_USER
valueFrom: valueFrom: