nixos-module/container/upstream/pppoe: add clamp-mss-to-pmtu for IPv6
This commit is contained in:
parent
69eeccc2a7
commit
22e4e19a5b
|
@ -81,11 +81,13 @@ in lib.mkIf (pppoeInterfaces != {}) {
|
||||||
};
|
};
|
||||||
}) {} (builtins.attrNames pppoeInterfaces);
|
}) {} (builtins.attrNames pppoeInterfaces);
|
||||||
|
|
||||||
# TODO: needed?
|
|
||||||
networking.nat.extraCommands = ''
|
networking.nat.extraCommands = ''
|
||||||
iptables -A FORWARD \
|
iptables -A FORWARD \
|
||||||
-p tcp --tcp-flags SYN,RST SYN \
|
-p tcp --tcp-flags SYN,RST SYN \
|
||||||
-j TCPMSS --clamp-mss-to-pmtu
|
-j TCPMSS --clamp-mss-to-pmtu
|
||||||
|
ip6tables -A FORWARD \
|
||||||
|
-p tcp --tcp-flags SYN,RST SYN \
|
||||||
|
-j TCPMSS --clamp-mss-to-pmtu
|
||||||
'';
|
'';
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in New Issue