mirror of
https://github.com/slackhq/nebula.git
synced 2026-10-03 21:16:38 +02:00
JackDoanandClaude Fable 5.1
e366f9452c
Follow-up to #1871. The Get-NetIPInterface check proves the value was written, not that windows fragments to it. A 9000 byte payload only crosses the tunnel as fragments cut at NlMtu on the way out of the adapter. Left at the adapter default it reaches nebula whole, overflows the udp.MTU (9001) write buffer and is dropped, so the ping never answers. Anything smaller would ride out as one oversized datagram and survive on IP fragmentation of the underlay, which is why a payload that is merely larger than tun.mtu would not catch a regression. Both families are pinged from the windows side so the v4 NlMtu, which was always right, gets the same guard. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01J34ExJUUPKWUvr2g5GMREi