Skip to content

Commit ca87d4a

Browse files
marciocloudflarepedrosousa
authored andcommitted
[MT] IPv6 MSS clamping (cloudflare#23040)
* added clamping recs * refined text * Apply suggestions from code review Co-authored-by: Pedro Sousa <[email protected]> --------- Co-authored-by: Pedro Sousa <[email protected]>
1 parent 00bb310 commit ca87d4a

File tree

1 file changed

+6
-2
lines changed
  • src/content/docs/magic-transit/how-to

1 file changed

+6
-2
lines changed

src/content/docs/magic-transit/how-to/ipv6.mdx

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,12 +32,16 @@ Cloudflare transports IPv6 traffic over an IPv6-over-IPv4 GRE tunnel. Here is ho
3232

3333
## How to configure IPv6
3434

35-
Since IPv6 works over an existing IPv4 tunnel you will need to choose either an existing IPv4 GRE tunnel or create a new one to test IPv6. All settings that apply to the IPv4 GRE tunnel apply to the IPv6 tunnel as well, and there is only one new field you need to fill out: **IPv6 Interface address**. Here, you enter one of the two IPv6 addresses from the `/127` subnet that Cloudflare automatically allocates for the GRE tunnel. The other, you need to enter in your router.
35+
Since IPv6 works over an existing IPv4 tunnel you will need to choose either an existing IPv4 GRE tunnel or create a new one to test IPv6. All settings that apply to the IPv4 GRE tunnel apply to the IPv6 tunnel as well, except for any MSS clamping you might need to configure — refer to [MSS clamping recommendations](#mss-clamping-recommendations) below for more information.
36+
37+
To test and set up IPv6 in the Cloudflare dashboard there is only one new field you need to fill out when creating a new IPv4 GRE tunnel or editing an existing one: **IPv6 Interface address**. Here, you enter one of the two IPv6 addresses from the `/127` subnet that Cloudflare automatically allocates for the GRE tunnel. You need to enter the other IPv6 address in your router.
3638

3739
To configure IPv6:
3840

3941
1. Follow the instructions on how to [add a GRE tunnel](/magic-transit/how-to/configure-tunnels/#add-tunnels).
4042
2. In **IPv6 Interface address** enter the IPv6 address assigned to you by Cloudflare for the Cloudflare side of the GRE tunnel. This address is part of a `/127` subnet that is provided to you by your Cloudflare team.
4143
3. Use the other IPv6 address you received from your team to configure your router.
4244

43-
For IPv6 traffic over IPv4 tunnels, the same [MSS clamping](/magic-transit/reference/mtu-mss/#mss-clamping) recommendations apply.
45+
### MSS clamping recommendations
46+
47+
Customers using Magic Transit ingress-only traffic (DSR) should apply a TCP MSS clamp with a maximum of 1,416 bytes to their edge router's transit ports to account for the larger IPv6 header.

0 commit comments

Comments
 (0)