VPN tunnels reduce usable packet size. Learn how MTU, MSS, packet fragmentation, and path issues can cause slow loading or stalled HTTPS pages.
Quick answer: MTU is the maximum packet size on a link, while MSS is the TCP payload size. VPN encryption and tunneling add overhead, so oversized packets can stall or fragment, causing slow pages, broken images, or stuck apps.
Some VPN problems are not complete failures. The VPN connects, small pages open, but images stall, HTTPS pages hang, or apps load forever. MTU, MSS, and packet fragmentation are common technical causes.
MTU vs MSS
| Term | Meaning | VPN impact |
|---|---|---|
| MTU | Maximum transmission unit for one packet | VPN headers reduce usable payload space |
| MSS | Maximum TCP segment size | Should fit under the effective MTU |
| Fragmentation | Splitting large packets into smaller ones | Some networks drop or block fragments |
Symptoms of MTU problems
- The VPN connects but some HTTPS sites stall.
- Text loads but images or downloads fail.
- The same server works on mobile data but not on campus or hotel Wi-Fi.
- Ping works, but real browsing feels broken.
Troubleshooting order
- Test another server first to rule out congestion.
- Disable double VPN, proxy chains, or extra accelerators.
- Try lower MTU values such as 1400, 1380, or 1360 if your client allows it.
- On routers, check MSS clamping or TCP MSS adjustment.
- Change one variable at a time and test the same site.
Common questions
Should every slow VPN be fixed by lowering MTU?
No. First rule out DNS, server load, routing rules, IPv6, and local network quality.
Can MTU be too low?
Yes. Very low values increase overhead and can reduce throughput. The goal is stable, not minimal.
What is MSS clamping?
It adjusts TCP segment size so packets fit through the tunnel without fragmentation problems.
Related technical guides
- DNS leak test guide
- VPN connected but IP not changing
- Mobile VPN keeps disconnecting
- VPN Kill Switch explained
- Proxy vs VPN comparison