On Sun, Feb 24, 2019 at 02:02:10PM +1000, Beto HydroxyButyrate wrote:
> I have MTU 9000 set on my internal network.  sys-net connects to this
> network.
> 
> I want all qubes VM interfaces to default to MTU 9000 rather than 1500.
> 
> Is there some simple global setting I can make to enable this?

You could set it at the router level in sys-net using a mangle table.
This is available for both iptables and nftables.
I've  done this with iptables in the past and I dont recall issues with
conntrack and connected clients. ymmv

iptables has tcp-MSS patch that allows you to hit this in FORWARD rules
- dont know if similar is available for nftables.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190224141432.n76eoa5geseil5kk%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.

Reply via email to