services.strongswan-swanctl.swanctl.connections.<name>.children.<name>.copy_df

Whether to copy the DF bit to the outer IPv4 header in tunnel mode. This effectively disables Path MTU discovery (PMTUD). Controlling this behavior is not supported by all kernel interfaces.

StrongSwan default: true

Type
null or boolean
Default
null
Declared
<nixpkgs/nixos/modules/services/networking/strongswan-swanctl/module.nix>