Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(openvpn): Add OPENVPN_MTU env to change default tun-mtu #2221

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

PseudoResonance
Copy link

This resolves #2044.

tun-mtu directive will be omitted if OPENVPN_MTU is unset.

Additionally lowers the default AirVPN TunMTU to 1320 to resolve connection issues, such as the following: #1417 #1989

…nMTU value.

tun-mtu directive will be omitted if OPENVPN_MTU is unset.

Additionally lowers the default AirVPN TunMTU to 1320 to resolve connection issues.
qdm12#1417
qdm12#1989

Signed-off-by: PseudoResonance <[email protected]>
@qdm12
Copy link
Owner

qdm12 commented Apr 29, 2024

Does using for example OPENVPN_MSSFIX=1292 (1320-28, see https://openvpn.net/community-resources/reference-manual-for-openvpn-2-4/) fix it instead?

@PseudoResonance
Copy link
Author

PseudoResonance commented Apr 30, 2024

Yes, the OPENVPN_MSSFIX environment variable was also able to resolve the issue. I could probably just remove the OPENVPN_MTU variable and leave only the AirVPN config change if you'd like.

Edit: Actually, I spoke too soon... I missed the logs about the DNS list downloads failing. It doesn't seem to work.

Edit: Never mind, it appears to be working again? I'm not sure what changed, but I'll leave it running for a bit and see.

@qdm12
Copy link
Owner

qdm12 commented May 1, 2024

Edit: Never mind, it appears to be working again? I'm not sure what changed, but I'll leave it running for a bit and see.

Yes take your time and let's find out.

I was changing your code actually to have a common VPN_MTU common for Wireguard and OpenVPN (and remove WIREGUARD_MTU), and default it to 1320 for all. However, I was a bit skeptical this would break OpenVPN setups using the default MTU (I think 1500?). It might also be problematic if the MSSFIX option is used (in that case we should default it to 1500 for retro-compatibility???). Anyway a bit messy in the end, so if we can leave it using OPENVPN_MSSFIX that would be great. Maybe something to write into #1113 (add VPN_MTU, remove OPENVPN_MSSFIX+WIREGUARD_MTU)

@PseudoResonance
Copy link
Author

After around a month, I think it's been working well with just MSSFIX set. It did have issues a few times for some reason, but after it restarted once or twice it worked. I think the behavior was similar with my MTU flag too though.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

allow to change MTU for all VPNs
2 participants