Project

General

Profile

Actions

Todo #16658

open

Automatically configure the OpenVPN tunnel MTU when set in the assigned interface configuration

Added by Marcos M 3 days ago. Updated 1 day ago.

Status:
Feedback
Priority:
Normal
Assignee:
Category:
OpenVPN
Target version:
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
26.03
Release Notes:
Default

Description

The OpenVPN server and client can optionally have an assigned interface. This is useful for setting the tunnel MTU and MSS. Though this can all currently be done it requires additional manual steps to work as expected.
- Saving the assigned interface configuration results in the IP addresses being removed and hence the OpenVPN service needs to be manually restarted.
- Setting the MTU on the assigned interface also requires that tun-mtu <size> be set in the OpenVPN custom configuration.
- There's no indication to the user that using a non-default MTU with OpenVPN DCO also requires setting the MSS. This is needed because OpenVPN only does MSS clamping when DCO is disabled.

Make the following changes:
- Automatically restart applicable OpenVPN services when applying interface changes.
- Automatically set tun-mtu as needed. Also add upgrade code to check OpenVPN custom configuration so that tun-mtu isn't set twice.
- When editing an OpenVPN assigned interface, add a note to the MTU field about the potential need for MSS.

Actions

Also available in: Atom PDF