MTU

MTU and Packet Fragmentation

The Maximum Transmission Unit defines the largest packet size a network interface or path can carry without fragmentation. When a packet exceeds the MTU of any link along a TracerouteA network diagnostic tool that maps the path packets take from source to destination by sending probes with incrementing TTL values. Each responding router reveals one hop in the route, along with its latency. path, it must be fragmented — split into smaller pieces that are reassembled at the destination. Fragmentation adds latency and CPU overhead. If the IP "Don't Fragment" bit is set and the packet is too large, the router drops it and sends an ICMP "Fragmentation Needed" message back, enabling Path MTU Discovery (PMTUD) to find the correct size.

Common MTU Values

Ethernet links use a standard MTU of 1500 bytes. Jumbo frames extend this to 9000 bytes on supported switches and NICs, improving throughput for storage and high-bandwidth workloads by reducing per-packet overhead. VPNVirtual Private Network. A technology that creates an encrypted tunnel between a device and a remote server, protecting data in transit and masking the user's real IP address. Used for privacy, security, and accessing restricted networks. tunnels and Overlay NetworkA virtual network built on top of an existing physical (underlay) network using encapsulation protocols like VXLAN or GRE. Overlay networks provide logical separation and flexibility without modifying the underlying infrastructure. encapsulation (VXLAN, GRE, IPsec) add headers that consume MTU headroom — a VLANVirtual Local Area Network. A logical network segmentation technique that groups devices into separate broadcast domains regardless of physical location, using IEEE 802.1Q tagging. VLANs improve security, performance, and manageability.-tagged packet inside an IPsec tunnel may require an outer MTU well above 1500 bytes, making proper MTU configuration across the entire path critical.

Diagnosing MTU Issues

MTU mismatches cause subtle, hard-to-diagnose failures: TCPTransmission Control Protocol. A reliable, connection-oriented transport protocol that guarantees ordered, error-checked delivery of data through three-way handshakes, acknowledgments, and retransmission. The foundation of HTTP, SSH, and most internet services. connections establish but hang when transferring large payloads, or HTTPSHTTP Secure. The encrypted version of HTTP that uses TLS to protect data in transit between a browser and a web server. Identified by the padlock icon in browsers and the https:// URL scheme. pages load partially. PMTUD failures — common when ICMP is blocked by FirewallA network security device or software that monitors and filters incoming and outgoing traffic based on predefined rules. Firewalls can block traffic by IP address, port number, protocol, or application-layer content. rules — prevent automatic size negotiation. MSS clamping on RouterA network device that forwards data packets between different networks by examining destination IP addresses and consulting its routing table. Routers operate at Layer 3 (Network) of the OSI model. or firewall interfaces is a common workaround when PMTUD is unreliable. Subnet Calculator helps plan IP addressing alongside MTU budgets for tunneled and segmented paths.