TCP MSS Clamping Explained: A Hands-On Fix for Path MTU Black Holes
Protocol Lab has released Lab #26, a free hands-on networking tutorial focused on TCP Maximum Segment Size (MSS) clamping as a solution to Path MTU Discovery (PMTUD) failures. When ICMP messages are filtered along a network path, PMTUD can silently drop oversized packets, creating a 'black hole' effect that disrupts TCP connections. MSS clamping addresses this by having a router rewrite the MSS field in passing TCP SYN packets, ensuring both endpoints agree on a segment size that fits the narrowest link before data transfer begins. In the lab's topology, a router clamps the client's advertised MSS from 1460 to 1360 bytes to accommodate a 1400-MTU link, eliminating dependence on PMTUD. The tutorial runs in a containerlab environment and is particularly relevant for networks using tunneling protocols such as WireGuard, VXLAN, or GRE, which reduce the effective MTU.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in