TCP Maximum Segment Size Adjustment Added to GRE Tunnel

Starting with ExtremeXOS and Switch Engine 31.6, GRE tunnel supports TCP Maximum Segment Size (MSS) adjustment.

Turning on the TCP MSS adjustment on a GRE tunnel redirects TCP SYN and SYN ACK packets going into the GRE tunnel to the Control Protocol (CP) via the ACL implemented on fastpath. When passing the IP stack on CP, the netfilter rule is applied to those packets. If the TCP MSS value in the option is greater than the configured adjustment, the TCP MSS option value is rewritten to the configured one. However, if the option value is less than the configured value, there is no change. Doing this helps avoid end-to-end over GRE tunnel application failure.

When the TCP MSS adjustment is turned off, there is no interference on TCP SYN and SYN ACK packets going to the GRE tunnel because the ACL is removed. Those packets are fastpath forwarded.

Supported Platforms

ExtremeSwitching X450-G2, X460-G2, X465, X590, X670-G2, X690, X870, 5320, 5420, 5520 series switches.

New CLI Command

configure tunnel tunnel_name ip tcp adjust-mss [off | on] tcp_mss_value]