On Sun, Feb 24, 2019 at 02:02:10PM +1000, Beto HydroxyButyrate wrote: > I have MTU 9000 set on my internal network. sys-net connects to this > network. > > I want all qubes VM interfaces to default to MTU 9000 rather than 1500. > > Is there some simple global setting I can make to enable this?
You could set it at the router level in sys-net using a mangle table. This is available for both iptables and nftables. I've done this with iptables in the past and I dont recall issues with conntrack and connected clients. ymmv iptables has tcp-MSS patch that allows you to hit this in FORWARD rules - dont know if similar is available for nftables. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20190224141432.n76eoa5geseil5kk%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.