Gratis · Netwerk en IT-infrastructuur
MTU- en MSS-calculator.
Bereken de bruikbare MTU en TCP-MSS via PPPoE, MPLS, WireGuard, IPsec, GRE, VXLAN en andere tunnels, met clamping-commando’s.
1500 for standard Ethernet; 9000 or more with jumbo frames.
4 bytes each when the physical MTU cannot grow.
WireGuard’s default MTU of 1420 assumes an IPv6 outer header.
- Overhead
- 80 bytes
- TCP MSS
- 1380
- Ethernet frame (with FCS)
- 1518 bytes
- TCP payload efficiency on the wire
- 89.7 % Includes preamble and inter-frame gap (20 bytes)
Commands
# Linux interface MTU
ip link set dev wg0 mtu 1420
# Clamp TCP MSS on forwarded traffic (iptables)
iptables -t mangle -A FORWARD -o wg0 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1380
# nftables equivalent
nft add rule inet mangle forward oifname "wg0" tcp flags syn tcp option maxseg size set 1380
# Cisco IOS tunnel interface
ip mtu 1420
ip tcp adjust-mss 1380Overhead breakdown (bytes)
| Component | Bytes |
|---|---|
| Physical MTU | 1500 |
| Outer IP header | −40 |
| UDP header | −8 |
| WireGuard header + Poly1305 tag | −32 |
| Usable inner MTU | 1420 |
| TCP MSS (IPv4 20 + TCP 20) | 1380 |
- Path MTU discovery fails when ICMP “packet too big” or “fragmentation needed” messages are blocked; MSS clamping avoids stalled TCP connections in that case.
- Test with ping -M do -s <MTU−28> on Linux, or ping -f -l <MTU−28> on Windows.
Zo gebruik je deze tool: MTU- en MSS-calculator
Voer gegevens in of kies een bestand. Pas de instellingen aan, maak het resultaat en controleer het voordat je het kopieert of downloadt.
Limieten en ondersteunde formaten
Je invoer wordt op je apparaat verwerkt.
Technische opmerkingen in het Engels
IPsec overhead is computed for AES-GCM or AES-CBC with HMAC-SHA-256 in tunnel mode; other algorithms differ. GRE assumes no key or sequence fields. Everything is calculated in your browser; nothing is sent or probed on the network.
Each layer removes its header from the available MTU. For IPsec, the inner packet plus trailer is padded to the cipher block, so the largest inner size is solved exactly. MSS is the MTU minus IP and TCP headers.
WireGuard over IPv6 on a 1,500-byte link leaves an MTU of 1,420 and an IPv4 TCP MSS of 1,380.