# ---
# Error: AEAD Decrypt error: bad packet ID
# ---

# see also: 
#    https://askubuntu.com/questions/1136003/aead-decrypt-error-bad-packet-id-on-openvpn-using-udp

# Adjust MTU settings
#
# Note: 
# =====
#
# With a TUN-style tunnel over UDP using the default TLS options, 
# the per-packet overhead is:
#
#    - 41 bytes security layer overhead (includes packet tag (1), 
#      HMAC-SHA1 signature (20), initialization vector (16), 
       sequence number (4))
#
#    - 28 bytes tunneling overhead (includes IP + UDP header)
#
#    - Total: 69 bytes per packet
#
# => maybe 'mssfix 1431' is sufficient
#
tun-mtu 1500
mssfix 1300
push "tun-mtu 1500"

# ---
# End: Error: AEAD Decrypt error: bad packet ID
# ---