TCP分片调整ChangeMss 默认1300偏低，根据网络阈值调整
{#TCP分片调整，默认1300偏低，根据网络阈值调整:local mssLen 1300
/ip firewall mangle
remove
add action=change-mss chain=postrouting comment="ChangeMss536(syn)" new-mss=536 protocol=tcp tcp-flags=syn tcp-mss=!537-1460
add action=change-mss chain=postrouting comment="ChangeMss536(ack)" new-mss=536 protocol=tcp tcp-flags=syn,ack tcp-mss=!537-1460
add action=change-mss chain=forward comment="ChangeMssSyn" ipv4-options=timestamp new-mss=$mssLen protocol=tcp tcp-flags=syn tcp-mss=(($mssLen+1)."-65535")
add action=change-mss chain=forward comment="ChangeMssAck" ipv4-options=timestamp new-mss=$mssLen protocol=tcp tcp-flags=syn,ack tcp-mss=(($mssLen+1)."-65535")
add action=change-mss chain=forward new-mss=clamp-to-pmtu protocol=tcp tcp-flags=syn
add action=change-mss chain=forward new-mss=clamp-to-pmtu protocol=tcp tcp-flags=syn,ack
add action=change-mss chain=output new-mss=clamp-to-pmtu protocol=tcp tcp-flags=syn
add action=change-mss chain=output new-mss=clamp-to-pmtu protocol=tcp tcp-flags=syn,ack
add action=change-mss chain=postrouting new-mss=clamp-to-pmtu protocol=tcp tcp-flags=syn
add action=change-mss chain=postrouting new-mss=clamp-to-pmtu protocol=tcp tcp-flags=syn,ack
}
页:
[1]