<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">I've had to drop to 1280 from Linode to several cellular carriers or else IPv6 fails. Ymmv, but the primary problem I've seen is MTU discovery failing because the v6 message is being eaten but not the v4 message. Have you enabled discovery in the kernel?<br><br><div id="AppleMailSignature" dir="ltr">~Derrick • iPhone</div><div dir="ltr"><br>On Feb 28, 2019, at 11:56 AM, Denis Kisselev <<a href="mailto:denis@dkisselev.net">denis@dkisselev.net</a>> wrote:<br><br></div><blockquote type="cite"><div dir="ltr">
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Check what IP's the google domains are resolving to.<br>
<br>
You might be getting IPv6 DNS responses back and your VPN/firewall configuration is blocking them.</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I've run into the opposite issue where my ISP's IPv4 stack crashed and Google/Facebook worked (over IPv6) but most other sites failed.</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> WireGuard <<a href="mailto:wireguard-bounces@lists.zx2c4.com">wireguard-bounces@lists.zx2c4.com</a>> on behalf of STR . <<a href="mailto:strykar@hotmail.com">strykar@hotmail.com</a>><br>
<b>Sent:</b> Tuesday, February 26, 2019 4:39 AM<br>
<b>To:</b> <a href="mailto:wireguard@lists.zx2c4.com">wireguard@lists.zx2c4.com</a><br>
<b>Subject:</b> Help calculate MTU, ISP's 1448</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">Hi,<br>
<br>
I have Fiber to our apartment complex basement, from there Cat6 runs to<br>
each apartment. The ISP/apartment service provider suggests an MTU of<br>
1448, which I set for the PPPoE interface on my OpenWRT router.<br>
<br>
I read <br>
<a href="https://lists.zx2c4.com/pipermail/wireguard/2017-December/002201.html">https://lists.zx2c4.com/pipermail/wireguard/2017-December/002201.html</a><br>
which comes to (assuming 1500 byte MTU) to 60 bytes (IPv6) to 80 bytes less to account for Wireguard protocol overhead.<br>
<br>
Using this info, I tried an MTU of both (1448-80=1368) and (1448-<br>
60=1388).<br>
As my ISP assigns only IPv4, I expected an MTU of 1388 to work, which I<br>
set on the Wireguard interface in OpenWRT.<br>
<br>
However, when set to 1388, almost everything works except any Google<br>
related sites like Maps, Gmail, YT etc.<br>
When set to 1368, everything works and it's the way I have it setup<br>
right now.<br>
<br>
What am I missing here?<br>
Why won't Google sites load via my WG VPN when the MTU is set to 1388?<br>
<br>
If it helps, I host the WG server on Google's cloud platform and was<br>
informed that GCP has an MTU of 1460 bytes.<br>
<br>
Thank you,<br>
S<br>
<br>
_______________________________________________<br>
WireGuard mailing list<br>
<a href="mailto:WireGuard@lists.zx2c4.com">WireGuard@lists.zx2c4.com</a><br>
<a href="https://lists.zx2c4.com/mailman/listinfo/wireguard">https://lists.zx2c4.com/mailman/listinfo/wireguard</a><br>
</div>
</span></font></div>
</div></blockquote><blockquote type="cite"><div dir="ltr"><span>_______________________________________________</span><br><span>WireGuard mailing list</span><br><span><a href="mailto:WireGuard@lists.zx2c4.com">WireGuard@lists.zx2c4.com</a></span><br><span><a href="https://lists.zx2c4.com/mailman/listinfo/wireguard">https://lists.zx2c4.com/mailman/listinfo/wireguard</a></span><br></div></blockquote></body></html>