Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature Request: AdvLinkMTU setting on Router Advertisements Page #4063

Closed
2 tasks done
linuxgemini opened this issue Apr 25, 2020 · 1 comment
Closed
2 tasks done
Assignees
Labels
feature Adding new functionality
Milestone

Comments

@linuxgemini
Copy link
Contributor

linuxgemini commented Apr 25, 2020

Important notices
Before you add a new report, we ask you kindly to acknowledge the following:

Is your feature request related to a problem? Please describe.
Using GIF interfaces through a VPN tunnel that has lower MTU than all other interfaces in OPNsense (like WireGuard) causes some SSL websites to not load (the usual MTU issue). This can be (usually) mitigated by lowering the advertised MTU on radvd. However on dhcpd_radvd_configure

$mtu = legacy_interface_stats($realif)['mtu'];
if (isset($config['interfaces'][$dhcpv6if]['track6-interface'])) {
$realtrackif = get_real_interface($config['interfaces'][$dhcpv6if]['track6-interface'], 'inet6');
$trackmtu = legacy_interface_stats($realtrackif)['mtu'];
if (!empty($trackmtu)) {
if ($trackmtu < $mtu) {
$mtu = $trackmtu;
}
}
}

the MTU is derived from the radvd parent/target interface (and maybe from 6rd tracked interface that is mentioned on #2643 and #2553)

Describe the solution you'd like
Addition of AdvLinkMTU to

$advanced_options = array('AdvDefaultLifetime', 'AdvValidLifetime', 'AdvPreferredLifetime', 'AdvRDNSSLifetime', 'AdvDNSSLLifetime', 'AdvRouteLifetime');

and re-calculating the MTU in dhcpd.inc based from the config.

Describe alternatives you've considered
I am currently lowering the LAN MTU, however this now causes instability issues on few IPv4 sites.

Additional context
The reason I'm doing this "tunnel in a tunnel" is due to me having a dynamic IPv4 address and my VPN mesh in WireGuard is not IPv6 oriented. Plus the server side of the tunnel does not have an update mechanism for IP updates.

@linuxgemini linuxgemini changed the title Feature Request: AdvLinkMTU setting on Router Advertisments Page Feature Request: AdvLinkMTU setting on Router Advertisements Page Apr 25, 2020
@fichtner fichtner added the feature Adding new functionality label Apr 26, 2020
@fichtner fichtner added this to the 20.7 milestone Apr 26, 2020
@linuxgemini
Copy link
Contributor Author

linuxgemini commented Apr 27, 2020

#4064 is merged and modified on aef9ada

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature Adding new functionality
Development

No branches or pull requests

3 participants