diff --git a/host_vars/initiativenserver.oopen.de/initiativenserver-ipt-server.yml b/host_vars/initiativenserver.oopen.de/initiativenserver-ipt-server.yml index fdf2440..6c11f52 100644 --- a/host_vars/initiativenserver.oopen.de/initiativenserver-ipt-server.yml +++ b/host_vars/initiativenserver.oopen.de/initiativenserver-ipt-server.yml @@ -21,6 +21,10 @@ munin_remote_ipv6: "2a01:4f9:3070:2bda::227" fw_http_server_ips: $ext_1_ip fw_http_server_ips_v6: $ext_ips +# --- IPv6: clamp MSS of incoming HTTPS SYN packets (as before the migration) +fw_throttle_tcp6_mss_for_https: true +fw_tcp6_mss_for_https_val: "1360" + # --- Mail fw_mail_client_ips: $ext_1_ip fw_mail_client_ips_v6: $ext_ips diff --git a/hosts b/hosts index 9b49778..d1c1755 100644 --- a/hosts +++ b/hosts @@ -7,6 +7,7 @@ formbricks-nd.oopen.de #schleuder3.so36.net ansible_user=ckubu #site36.net ansible_user=ckubu #web.so36.net ansible_user=ckubu + [so36_server] backup.so36.net ansible_user=ckubu comm.so36.net ansible_user=ckubu @@ -27,7 +28,6 @@ web.so36.net ansible_user=ckubu [no_ipt_firewall] lxc-host-kb.anw-kb.netz -o13-git.oopen.de o13-staging-board.oopen.de o25.oopen.de o41.oopen.de