GRE Tunnel

aurologic DDoS-Protection can be consumed through GRE Tunnel. The customer is entitled to provide his public ipv4-address, accepting GRE encapsulated IPv4/IPv6 traffic. Within the tunnel, a BGP-Session with AS30823 is made available, allowing the customer to send and receive routes, e.g. for synchronous traffic routing required by flowtrack.

MSS Clamping

As the GRE protocol adds additional 24 bytes of data to a ethernet frame, MSS Clamping for TCP SYN/SYN-ACK packets should be enabled on the customer equipment, reducing TCP MSS (Maximum Segment Size) to at least 1476 byte. Not enabling MSS Clamping, in order to reduce the maximum allowed tcp packet size, may lead to packetloss, following most TCP connections are maxing out typical 1500 byte MTU (=frame size).