Dynamic Path MTU Ends Silent Drops

🔑 Enhanced Key Takeaways

• •PMTUD requires WARP to use the MASQUE tunnel protocol and is disabled by default, enabled via MDM configuration with 'enable_pmtud' set to true.[1]
• •Enabling PMTUD generates approximately 25 MB/day of additional probe traffic from the device.[1]
• •PMTUD mandates a minimum network path MTU of 1281 bytes, comprising 1200 bytes QUIC datagram, 53 bytes WARP MASQUE encapsulation, and 28 bytes IP/UDP headers.[1]
• •PMTUD status can be verified using the 'warp-diag connectivity.txt' command, which displays 'PMTUD enabled: true' and the detected MTU value.[1]

🛠️ Technical Deep Dive

• •WARP actively probes the full network path to the minimum MTU using MASQUE protocol, then dynamically adjusts the tunnel interface MTU accordingly.[1]
• •Minimum path MTU requirement: 1281 bytes (1200 bytes QUIC datagram + 53 bytes MASQUE encapsulation + 28 bytes IP/UDP headers).[1]
• •Enabled via MDM JSON configuration: {"enable_pmtud": true}, which also enforces MASQUE tunnel protocol.[1]
• •Verification command: 'warp-diag connectivity.txt', searches for 'PMTU' to confirm status and detected MTU (e.g., 1500 bytes).[1]
• •Cloudflare's earlier server-side solution involved open-sourcing 'pmtud' daemon on GitHub, which captures and broadcasts ICMP type 3 code 4 (IPv4) or type 2 code 0 (IPv6) messages to all servers via Ethernet broadcast.[2][6]

🔮 Future ImplicationsAI analysis grounded in cited sources

⏳ Timeline