anti-ddos tcp-mss

Function

The anti-ddos tcp-mss command sets the Maximum Segment Size (MSS) of TCP packets.

The undo anti-ddos tcp-mss command restores the default settings.

anti-ddos tcp-mss mss-value

undo anti-ddos tcp-mss

Parameter	Description	Value
mss-value	Specifies the MSS.	It is an integer that ranges from 100 to 1460, in bytes.

System view

2: Configuration level

On the FW, the anti-ddos tcp-mss command is used to restore the default MSS of the client in HTTP redirection defense.

By default, the MSS is 1460 bytes.

# Set the MSS of TCP packets to 1400.

<sysname> system-view
[sysname] anti-ddos tcp-mss 1400