fix(vpn): default client profiles to MTU 1280; correct the VPN runbook #159

Merged

jakman85 merged 1 commits from fix/wg-client-mtu-docs into main

2026-11-09 03:26:02 +00:00

Author	SHA1	Message	Date
jakman85andClaude Opus 5.5	8f60e6103a	fix(vpn): default client profiles to MTU 1280; correct the VPN runbook gate / gate (pull_request) Successful in 57s Details gate / conformance (pull_request) Skipped Details new-peer.sh generated MTU 1420, which stalled traffic on mobile data despite a healthy handshake (one phone, one carrier, 2026-11-09). Default to 1280, overridable through WG_MTU. Correct stale claims in the runbook and the DaemonSet header against live BPF conntrack: LoadBalancer VIPs see 10.90.0.x as world, not a SNATed host identity. Add a troubleshooting section. The DaemonSet render is unchanged, so WireGuard pods do not roll. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-11-08 21:15:20 -06:00

Author

SHA1

Message

Date

jakman85andClaude Opus 5.5

8f60e6103a

fix(vpn): default client profiles to MTU 1280; correct the VPN runbook

gate / gate (pull_request) Successful in 57s

Details

gate / conformance (pull_request) Skipped

Details

new-peer.sh generated MTU 1420, which stalled traffic on mobile data
despite a healthy handshake (one phone, one carrier, 2026-11-09). Default
to 1280, overridable through WG_MTU.

Correct stale claims in the runbook and the DaemonSet header against
live BPF conntrack: LoadBalancer VIPs see 10.90.0.x as world, not a
SNATed host identity. Add a troubleshooting section.

The DaemonSet render is unchanged, so WireGuard pods do not roll.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-11-08 21:15:20 -06:00