From 8d6dd27435884e136f61ccba41f1d6177a7fb0dc Mon Sep 17 00:00:00 2001 From: Will Anderson Date: Wed, 15 Apr 2026 02:32:51 -0500 Subject: [PATCH] Fix gluetun MTU for k3s Flannel network eth0 MTU in pods is 1450 (Flannel VXLAN). gluetun's MTU discovery was setting tun0 to 1440, making WireGuard outer packets ~1500 bytes which exceeds the 1450 limit. TLS ClientHello gets dropped, causing startup check to fail and loop. Fix: set MTU=1320 so WireGuard UDP packets stay well under 1450. --- servers/legion/k8s/media/fornax-workers.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/servers/legion/k8s/media/fornax-workers.yaml b/servers/legion/k8s/media/fornax-workers.yaml index 4174023..08ee879 100644 --- a/servers/legion/k8s/media/fornax-workers.yaml +++ b/servers/legion/k8s/media/fornax-workers.yaml @@ -112,6 +112,8 @@ spec: value: "10.43.0.10:53" - name: FIREWALL_OUTBOUND_SUBNETS value: "10.42.0.0/16,10.43.0.0/16" + - name: MTU + value: "1320" volumeMounts: - name: gluetun-data mountPath: /tmp/gluetun @@ -360,6 +362,8 @@ spec: value: "10.43.0.10:53" - name: FIREWALL_OUTBOUND_SUBNETS value: "10.42.0.0/16,10.43.0.0/16" + - name: MTU + value: "1320" volumeMounts: - name: gluetun-data mountPath: /tmp/gluetun