nixos-module/container/upstream/pppoe: add clamp-mss-to-pmtu for IPv6

2022-06-10 01:15:22 +02:00 · 2022-06-10 01:15:22 +02:00 · 22e4e19a5b
parent 69eeccc2a7
commit 22e4e19a5b
1 changed files with 3 additions and 1 deletions
--- a/nix/nixos-module/container/upstream/pppoe.nix
+++ b/nix/nixos-module/container/upstream/pppoe.nix
@ -81,11 +81,13 @@ in lib.mkIf (pppoeInterfaces != {}) {
      };
    }) {} (builtins.attrNames pppoeInterfaces);

-  # TODO: needed?
  networking.nat.extraCommands = ''
    iptables -A FORWARD \
      -p tcp --tcp-flags SYN,RST SYN \
      -j TCPMSS --clamp-mss-to-pmtu
+    ip6tables -A FORWARD \
+      -p tcp --tcp-flags SYN,RST SYN \
+      -j TCPMSS --clamp-mss-to-pmtu
  '';

 }