Some kind of Path MTU Discovery failure. Usually ICMP is blocked, but just as common is that the ICMP packet comes from an incorrect (ISP internal) IP, and then gets dropped. This can happen due to NAT-ing or MPLS, or such. This used to be much more common 20 years ago, but it definitely still happens.
OpenVPN has a mtu-test option that can sometimes help with this, I don't know if Wireguard has something similar.
Power management, mobile and firmware developer on Linux. Security developer at Aurora. Ex-biologist. mjg59 on Twitter. Content here should not be interpreted as the opinion of my employer. Also on Mastodon.
Path MTU discovery failure
Date: 2024-02-20 06:12 am (UTC)OpenVPN has a mtu-test option that can sometimes help with this, I don't know if Wireguard has something similar.