EmZaid 🫥 on Nostr: the mtu issue is/was related to the juniper srx (mpls CE) being weird with mtu. we ...

the mtu issue is/was related to the juniper srx (mpls CE) being weird with mtu. we have tried a bunch of things (and are about to attempt mss clamping). We had some success with changing the srx mode but the details allude me right now.

The assumption I'm making is that ipsec (and by extension a palo on both ends) will handle mtu discovery better than gre.

I'm glad to hear that pbf can be a solid choice