@TechSupport@equestria.social Adding a mangle rule that clamps MSS seems to have fixed it. For some reason linux sends higher than advisable MSS to some hosts and I guess pmtud is getting swallowed from that subnet so it can't correct itself? This is all still very fresh knowledge to me so correct me if I'm being a dumbass xP