Role ipt-server: initiativenserver: clamp IPv6 HTTPS MSS to 1360 again.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-12 19:38:34 +01:00
parent f3d8b0b0ce
commit 57970a6567
2 changed files with 5 additions and 1 deletions
@@ -21,6 +21,10 @@ munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
 fw_http_server_ips: $ext_1_ip
 fw_http_server_ips_v6: $ext_ips

+# --- IPv6: clamp MSS of incoming HTTPS SYN packets (as before the migration)
+fw_throttle_tcp6_mss_for_https: true
+fw_tcp6_mss_for_https_val: "1360"
+
 # --- Mail
 fw_mail_client_ips: $ext_1_ip
 fw_mail_client_ips_v6: $ext_ips