Yeah if you try and work around broken PMTUD though you're going to mess up your application layer protocol SO bad... EDIT: I suppose you could rewrite TCP MSS

Yeah if you try and work around broken PMTUD though you're going to mess up your application layer protocol SO bad... EDIT: I suppose you could rewrite TCP MSS on your own firewall or drop MTU on all web servers.... but of course if you're going to reconfigure your firewall / intefaces, you may as well just fix the problem - which was caused by poor device configuration in the first place.