mention about clamping MSS

This commit is contained in:
Nikos Mavrogiannopoulos
2015-04-21 11:04:23 +02:00
parent 6a2e575a2f
commit ed3ba2e0fa

View File

@@ -824,6 +824,17 @@ and user-profile options must be set in ocserv's configuration.
_EOT_;
};
doc-section = {
ds-type = 'NETWORKING CONSIDERATIONS';
ds-format = 'texi';
ds-text = <<-_EOT_
In certain setups, where a firewall may be blocking ICMP responses, it is setting the
MSS of TCP connections to MTU will eliminate the "black hole" connection issues.
See http://lartc.org/howto/lartc.cookbook.mtu-mss.html for instructions
to enable it on a Linux system.
_EOT_;
};
doc-section = {
ds-type = 'SEE ALSO';
ds-format = 'man';