1
24.1 Production Series / TCP MSS - Firewall: Settings: Normalization
« on: February 06, 2024, 05:43:13 pm »
Anyone else seeing/noticing issues with MSS? I have had my MSS set to 1300 for IPSEC and WG for years and it has been working well, but after the 24.1 update (including 24.1.1) its either not working or something else is going on, UDP I get full speed, but TCP very slow like alot of frag. Ive even tried lowering MSS to 1260 to no effect. I can see in my transport graphs that this changed on 1/30/24 with the update to 24.1.
# iperf3 -c X.X.X.X -b 950M
Connecting to host X.X.X.X, port 5201
[ 5] local X.X.X.X port 34276 connected to X.X.X.X port 5201
[ ID] Interval Transfer Bitrate Retr Cwnd
[ 5] 0.00-1.00 sec 1.25 MBytes 10.5 Mbits/sec 16 9.75 KBytes
[ 5] 1.00-2.00 sec 867 KBytes 7.11 Mbits/sec 10 13.4 KBytes
[ 5] 2.00-3.00 sec 669 KBytes 5.48 Mbits/sec 12 12.2 KBytes
[ 5] 3.00-4.00 sec 726 KBytes 5.94 Mbits/sec 16 6.09 KBytes
[ 5] 4.00-5.00 sec 634 KBytes 5.19 Mbits/sec 13 9.75 KBytes
[ 5] 5.00-6.00 sec 760 KBytes 6.23 Mbits/sec 17 6.09 KBytes
[ 5] 6.00-7.00 sec 824 KBytes 6.75 Mbits/sec 13 12.2 KBytes
[ 5] 7.00-8.00 sec 768 KBytes 6.29 Mbits/sec 17 4.88 KBytes
[ 5] 8.00-9.00 sec 640 KBytes 5.24 Mbits/sec 15 6.09 KBytes
[ 5] 9.00-10.00 sec 620 KBytes 5.08 Mbits/sec 15 3.66 KBytes
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-10.00 sec 7.61 MBytes 6.38 Mbits/sec 144 sender
[ 5] 0.00-10.01 sec 7.43 MBytes 6.23 Mbits/sec receiver
iperf Done.
iperf3 -c X.X.X.X -b 950M -u
Connecting to host X.X.X.X, port 5201
[ 5] local X.X.X.X port 58862 connected to X.X.X.X port 5201
[ ID] Interval Transfer Bitrate Total Datagrams
[ 5] 0.00-1.00 sec 77.4 MBytes 649 Mbits/sec 65016
[ 5] 1.00-2.00 sec 114 MBytes 957 Mbits/sec 95900
[ 5] 2.00-3.00 sec 118 MBytes 987 Mbits/sec 98870
[ 5] 3.00-4.00 sec 113 MBytes 947 Mbits/sec 94853
[ 5] 4.00-5.00 sec 114 MBytes 959 Mbits/sec 96052
[ 5] 5.00-6.00 sec 115 MBytes 968 Mbits/sec 97000
[ 5] 6.00-7.00 sec 115 MBytes 961 Mbits/sec 96237
[ 5] 7.00-8.00 sec 104 MBytes 876 Mbits/sec 87765
[ 5] 8.00-9.00 sec 116 MBytes 975 Mbits/sec 97616
[ 5] 9.00-10.00 sec 117 MBytes 984 Mbits/sec 98529
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bitrate Jitter Lost/Total Datagrams
[ 5] 0.00-10.00 sec 1.08 GBytes 926 Mbits/sec 0.000 ms 0/927838 (0%) sender
[ 5] 0.00-10.02 sec 646 MBytes 541 Mbits/sec 0.012 ms 381658/924217 (41%) receiver
# iperf3 -c X.X.X.X -b 950M
Connecting to host X.X.X.X, port 5201
[ 5] local X.X.X.X port 34276 connected to X.X.X.X port 5201
[ ID] Interval Transfer Bitrate Retr Cwnd
[ 5] 0.00-1.00 sec 1.25 MBytes 10.5 Mbits/sec 16 9.75 KBytes
[ 5] 1.00-2.00 sec 867 KBytes 7.11 Mbits/sec 10 13.4 KBytes
[ 5] 2.00-3.00 sec 669 KBytes 5.48 Mbits/sec 12 12.2 KBytes
[ 5] 3.00-4.00 sec 726 KBytes 5.94 Mbits/sec 16 6.09 KBytes
[ 5] 4.00-5.00 sec 634 KBytes 5.19 Mbits/sec 13 9.75 KBytes
[ 5] 5.00-6.00 sec 760 KBytes 6.23 Mbits/sec 17 6.09 KBytes
[ 5] 6.00-7.00 sec 824 KBytes 6.75 Mbits/sec 13 12.2 KBytes
[ 5] 7.00-8.00 sec 768 KBytes 6.29 Mbits/sec 17 4.88 KBytes
[ 5] 8.00-9.00 sec 640 KBytes 5.24 Mbits/sec 15 6.09 KBytes
[ 5] 9.00-10.00 sec 620 KBytes 5.08 Mbits/sec 15 3.66 KBytes
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-10.00 sec 7.61 MBytes 6.38 Mbits/sec 144 sender
[ 5] 0.00-10.01 sec 7.43 MBytes 6.23 Mbits/sec receiver
iperf Done.
iperf3 -c X.X.X.X -b 950M -u
Connecting to host X.X.X.X, port 5201
[ 5] local X.X.X.X port 58862 connected to X.X.X.X port 5201
[ ID] Interval Transfer Bitrate Total Datagrams
[ 5] 0.00-1.00 sec 77.4 MBytes 649 Mbits/sec 65016
[ 5] 1.00-2.00 sec 114 MBytes 957 Mbits/sec 95900
[ 5] 2.00-3.00 sec 118 MBytes 987 Mbits/sec 98870
[ 5] 3.00-4.00 sec 113 MBytes 947 Mbits/sec 94853
[ 5] 4.00-5.00 sec 114 MBytes 959 Mbits/sec 96052
[ 5] 5.00-6.00 sec 115 MBytes 968 Mbits/sec 97000
[ 5] 6.00-7.00 sec 115 MBytes 961 Mbits/sec 96237
[ 5] 7.00-8.00 sec 104 MBytes 876 Mbits/sec 87765
[ 5] 8.00-9.00 sec 116 MBytes 975 Mbits/sec 97616
[ 5] 9.00-10.00 sec 117 MBytes 984 Mbits/sec 98529
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bitrate Jitter Lost/Total Datagrams
[ 5] 0.00-10.00 sec 1.08 GBytes 926 Mbits/sec 0.000 ms 0/927838 (0%) sender
[ 5] 0.00-10.02 sec 646 MBytes 541 Mbits/sec 0.012 ms 381658/924217 (41%) receiver