The TCP connection MSS is set to 1460 bytes and also Don't fragment flag is set. The server selects this MSS as a frame size on its side and packet is dropped, probably. If you are using linux router try to use this command "iptables -I FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu" or be careful to set MTU on all client machines adapters correctly.

On 10.01.2020 1:05, alpha_one_x86 wrote:

Hi,

I have wireguard interface "veth", and my real interface "eth0".

No bug with openvpn, but with wireguard on IPv4 for https, I have bug, see the attached file, the returned data is 3300byte, then Destination unreachable (Fragmentation needed).

Bug into wireguard? How fix this?

The ok.pcapng it's same https download do with openvpn.

Cheers,
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard