TCP分片调整ChangeMss 默认1300偏低，根据网络阈值调整

admin

1. {#TCP分片调整，默认1300偏低，根据网络阈值调整
   
2. :local mssLen 1300
   
3. /ip firewall mangle
   
4. remove [find action=change-mss]
   
5. add action=change-mss chain=postrouting comment="ChangeMss536(syn)" new-mss=536 protocol=tcp tcp-flags=syn tcp-mss=!537-1460
   
6. add action=change-mss chain=postrouting comment="ChangeMss536(ack)" new-mss=536 protocol=tcp tcp-flags=syn,ack tcp-mss=!537-1460
   
7. add action=change-mss chain=forward comment="ChangeMssSyn" ipv4-options=timestamp new-mss=$mssLen protocol=tcp tcp-flags=syn tcp-mss=(($mssLen+1)."-65535")
   
8. add action=change-mss chain=forward comment="ChangeMssAck" ipv4-options=timestamp new-mss=$mssLen protocol=tcp tcp-flags=syn,ack tcp-mss=(($mssLen+1)."-65535")
   
9. add action=change-mss chain=forward new-mss=clamp-to-pmtu protocol=tcp tcp-flags=syn
   
10. add action=change-mss chain=forward new-mss=clamp-to-pmtu protocol=tcp tcp-flags=syn,ack
    
11. add action=change-mss chain=output new-mss=clamp-to-pmtu protocol=tcp tcp-flags=syn
    
12. add action=change-mss chain=output new-mss=clamp-to-pmtu protocol=tcp tcp-flags=syn,ack
    
13. add action=change-mss chain=postrouting new-mss=clamp-to-pmtu protocol=tcp tcp-flags=syn
    
14. add action=change-mss chain=postrouting new-mss=clamp-to-pmtu protocol=tcp tcp-flags=syn,ack
    
15. }
    

复制代码