| commit | b1ad0373613728b9f2457d2d04d4b7338537c16c | [log] [tgz] |
|---|---|---|
| author | Kevin Cernekee <[email protected]> | Thu Sep 29 23:53:54 2016 |
| committer | chrome-bot <[email protected]> | Sat Oct 01 07:01:46 2016 |
| tree | e92da99a1415620f3b8a748f5c6ffa80cad5f95f | |
| parent | 90c4a0d3a66a84270aa8a8b4d46a97e6172074e9 [diff] |
Add TCPMSS rule when setting up VPNs Third-party VPNs use policy routing to reroute Chrome/chronos traffic through the tunnel. This causes the MSS on TCP SYN packets to reflect the MTU from the original interface, not the tunnel MTU. Add a firewall rule that fixes this. BUG=chromium:646827 TEST=manually verify MSS via tcpdump TEST=`FEATURES=test emerge-link firewalld` Change-Id: Ib1554bf8c3b061fde5a28c33b6df7a554c6c2686 Reviewed-on: https://chromium-review.googlesource.com/391040 Commit-Ready: Kevin Cernekee <[email protected]> Tested-by: Kevin Cernekee <[email protected]> Reviewed-by: Luigi Semenzato <[email protected]> Reviewed-by: Jorge Lucangeli Obes <[email protected]>