Am 01.04.21 um 04:38 schrieb Tony He: > Hi Antonio, Arne, > > According to the dump, this issue is caused by fragment. If I set > link-mtu to 1472 in the condition of encryption "none", it's gone. > I also can reproduce the fragment in my Linux x86-64 PC and Linux VM . > They use kernel 5.4. Fragment affects the performance > in the low-end devices. It also consumes more CPU resource in low-end > and high-end devices. If I'm not mistaken, we don't need > to set link-mtu without dco. Is this a bug? Can you reproduce? Do I > still need to upload my dump? If so, maybe I need to provide a link.
Yes that is expected. Use tun-mtu 1400. The mtu 1500 leading to fragmentation is a longstanding issue but ist almost entirely masked by mssfix being enabled by default. In your dco to dco setup you probably don't have mssfix on either side unless you explicitly added iptables rules for that. Arne _______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
