MTU, MSS, and the Mysterious Hangs of Networks That Almost Work

There's a class of network bug where small requests work fine and large ones hang forever. Curl times out. The TCP handshake completes. The first few bytes flow. Then nothing. The cause is almost always MTU -- a number that nobody thinks about until the day it eats their VPN, their Kubernetes overlay, or their newly-deployed cloud network.