The official documentation says to better leave alone tun-mtu AND link-mtu parameters, and use mssfix and fragmentation values instead: Assume i tested my SSL VPN on a few clients, and everything kan zijn working fine with the default settings. Means no mssfix or MTU values are set, only the defaults. https://penisringdragen87520.thenerdsblog.com/42593225/penisring-geheimen