so just block multipath and add the firewall rule from article that drops packets with IPv4 options
Both of which we are finding out are apparently insufficient to mitigate this.
Hoping fix will be out soon so we don’t have to.
Both of which we are finding out are apparently insufficient to mitigate this.