I am a newcomer to VyOS.
I am using DS-Lite for IPv4 communication, but some sites, such as github.com, give me errors.
From the tcpdump it looks like a tcp mss issue.
I have therefore put in a setting to set mss to 1400, but the packets coming from the server are only 1400, but the packets being sent are not.
I have also tried set interfaces {tunnel,ethernet} * ip adjust-mss clamp-mss-to-pmtu with no success.
This is my version and config.
vyos@vyos1# run show version
Version: VyOS 1.4-rolling-202306190317
Release train: current
vyos@vyos1# show
firewall {
interface eth0 {
in {
name LAN_IN
}
local {
name LAN_LOCAL
}
}
interface eth1 {
in {
ipv6-name WAN_IN
name WAN_IN
}
local {
ipv6-name WAN_LOCAL
name WAN_LOCAL
}
}
ipv6-name WAN_IN {
default-action reject
rule 10 {
action accept
state {
established enable
related enable
}
}
}
ipv6-name WAN_LOCAL {
default-action reject
rule 10 {
action accept
state {
established enable
related enable
}
}
rule 20 {
action accept
protocol icmpv6
}
rule 30 {
action accept
destination {
port 546
}
protocol udp
source {
port 547
}
}
rule 40 {
action accept
destination {
port 33434-33534
}
protocol udp
}
}
name LAN_IN {
default-action accept
}
name LAN_LOCAL {
default-action accept
}
name WAN_IN {
default-action reject
rule 10 {
action accept
state {
established enable
related enable
}
}
}
name WAN_LOCAL {
default-action reject
rule 10 {
action accept
state {
established enable
related enable
}
}
rule 20 {
action accept
protocol icmp
}
rule 30 {
action accept
destination {
port 13231
}
protocol udp
}
}
}
interfaces {
ethernet eth0 {
address 192.168.1.2/24
description LAN
hw-id *****************
ip {
adjust-mss 1400
}
ipv6 {
adjust-mss 1400
}
}
ethernet eth1 {
address *****************
description WAN
dhcpv6-options {
duid *****************
parameters-only
pd 0 {
interface eth1 {
address 0
}
length 64
}
rapid-commit
}
hw-id *****************
ip {
adjust-mss 1400
}
ipv6 {
address {
autoconf
}
adjust-mss 1400
}
}
tunnel tun0 {
address *****************
encapsulation ipip6
ip {
adjust-mss 1400
}
ipv6 {
adjust-mss 1400
}
remote *****************
source-address *****************
}
}
nat {
source {
rule 999 {
outbound-interface tun0
source {
address 192.168.0.0/16
}
translation {
address masquerade
}
}
}
}
policy {
route adjust-mss {
interface eth0
interface eth1
interface tun0
rule 10 {
protocol tcp
set {
tcp-mss 1400
}
tcp {
flags {
syn
}
mss 1401-16384
}
}
}
route6 adjust-mss {
interface eth0
interface eth1
interface tun0
rule 10 {
protocol tcp
tcp {
flags {
syn
}
mss 1400
}
}
}
}
protocols {
static {
route 0.0.0.0/0 {
interface tun0 {
distance 1
}
}
}
}
service {
dhcp-server {
listen-address 192.168.1.2
shared-network-name LAN {
authoritative
subnet 192.168.1.0/24 {
default-router 192.168.1.2
domain-name *****************
domain-search *****************
lease 86400
name-server 192.168.1.2
range 0 {
start 192.168.1.10
stop 192.168.1.99
}
}
}
}
dns {
forwarding {
allow-from 192.168.0.0/16
cache-size 1000
dhcp eth0
listen-address 192.168.1.1
listen-address 192.168.1.2
name-server 2404:1a8:7f01:a::3 {
}
name-server 2404:1a8:7f01:b::3 {
}
}
}
ntp {
allow-client {
address ::/0
address 192.168.0.0/16
}
server ntp.nict.jp {
}
}
ssh {
}
}
system {
config-management {
commit-revisions 100
}
conntrack {
modules {
ftp
h323
nfs
pptp
sip
sqlnet
tftp
}
}
console {
device ttyS0 {
speed 115200
}
}
host-name vyos1
ipv6 {
strict-dad
}
login {
user vyos {
authentication {
encrypted-password ***********************
plaintext-password ""
}
}
}
name-server 2404:1a8:7f01:a::3
name-server 2404:1a8:7f01:b::3
syslog {
global {
facility all {
level info
}
facility local7 {
level debug
}
}
}
time-zone Asia/Tokyo
}