ansible/oopen-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Role ipt-server: initiativenserver: clamp IPv6 HTTPS MSS to 1360 again.

Browse Source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
chris
2026-11-12 19:38:34 +01:00
co-authored by Claude Opus 5.5
parent f3d8b0b0ce
commit 57970a6567
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
host_vars/initiativenserver.oopen.de/initiativenserver-ipt-server.yml
+4
View File
@@ -21,6 +21,10 @@ munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
fw_http_server_ips: $ext_1_ip fw_http_server_ips: $ext_1_ip
fw_http_server_ips_v6: $ext_ips fw_http_server_ips_v6: $ext_ips
# --- IPv6: clamp MSS of incoming HTTPS SYN packets (as before the migration)
fw_throttle_tcp6_mss_for_https: true
fw_tcp6_mss_for_https_val: "1360"
# --- Mail # --- Mail
fw_mail_client_ips: $ext_1_ip fw_mail_client_ips: $ext_1_ip
fw_mail_client_ips_v6: $ext_ips fw_mail_client_ips_v6: $ext_ips
hosts
+1 -1
View File
@@ -7,6 +7,7 @@ formbricks-nd.oopen.de
#schleuder3.so36.net ansible_user=ckubu #schleuder3.so36.net ansible_user=ckubu
#site36.net ansible_user=ckubu #site36.net ansible_user=ckubu
#web.so36.net ansible_user=ckubu #web.so36.net ansible_user=ckubu
[so36_server] [so36_server]
backup.so36.net ansible_user=ckubu backup.so36.net ansible_user=ckubu
comm.so36.net ansible_user=ckubu comm.so36.net ansible_user=ckubu
@@ -27,7 +28,6 @@ web.so36.net ansible_user=ckubu
[no_ipt_firewall] [no_ipt_firewall]
lxc-host-kb.anw-kb.netz lxc-host-kb.anw-kb.netz
o13-git.oopen.de
o13-staging-board.oopen.de o13-staging-board.oopen.de
o25.oopen.de o25.oopen.de
o41.oopen.de o41.oopen.de