Hi all,
I need to push UDP/Ipsec traffic with DF flag through Wireguard tunnel between my 2 openWrt routers. Ipsec + Wireguard headers are too big and the final packet size is larger than the underlying physical network MTU.
The only solution I could think of is to fragment the traffic anyway and then reassemble it at the remote end router.
Reassembling seems to be done by conntrack?
Is there a way to do this with Iptables or nftables?
Or any other workaround?
P.S.I dont control IPsec devices, so i can't change the mtu, df settings or enable pmtud.