#!/usr/bin/env -S nft -f table inet wg0_mss_clamping { chain forward { type filter hook forward priority 0; iif wg0 tcp flags syn tcp option maxseg size set rt mtu; oif wg0 tcp flags syn tcp option maxseg size set rt mtu; } }