Add TCPMSS rule when setting up VPNs
Third-party VPNs use policy routing to reroute Chrome/chronos traffic
through the tunnel. This causes the MSS on TCP SYN packets to reflect
the MTU from the original interface, not the tunnel MTU. Add a firewall
rule that fixes this.
BUG=chromium:646827
TEST=manually verify MSS via tcpdump
TEST=`FEATURES=test emerge-link firewalld`
Change-Id: Ib1554bf8c3b061fde5a28c33b6df7a554c6c2686
Reviewed-on: https://chromium-review.googlesource.com/391040
Commit-Ready: Kevin Cernekee <cernekee@chromium.org>
Tested-by: Kevin Cernekee <cernekee@chromium.org>
Reviewed-by: Luigi Semenzato <semenzato@chromium.org>
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
1 file changed
