CLOUD CONCEPT

Jumbo Frames

Jumbo frames are Ethernet frames that carry an IP packet larger than the conventional 1,500-byte maximum transmission unit.

Cloud Concepts Hub →

What is Jumbo Frames

Jumbo frames reduce the number of packets needed to transfer large amounts of data, potentially improving throughput and reducing packet-processing overhead. Their usefulness depends on the maximum transmission unit supported across the entire network path, including hosts, switches, routers, cloud connections, and tunnels.

Jumbo frames increase the amount of data carried in each Ethernet frame beyond the conventional 1,500-byte IP maximum transmission unit, or MTU. Approximately 9,000 bytes is common, but there is no single universal jumbo-frame size. An interface MTU normally describes the maximum IP packet size, including IP headers, rather than the complete Ethernet frame. Switch specifications may instead describe the full frame size, so account for Ethernet headers, VLAN tags, and frame check sequences when comparing equipment limits.

The principal benefit is fewer packets for the same amount of application data. For bulk replication, backups, and distributed storage traffic, this can reduce per-packet processing and improve efficiency. Jumbo frames do not increase physical link speed, guarantee higher application throughput, or eliminate bandwidth and latency constraints. Benefits may be smaller when network interface offloads already reduce host processing costs. Larger frames also take longer to serialize, which can matter when latency-sensitive traffic shares a constrained link.

Successful deployment requires a compatible path, not merely a larger MTU on the source interface. Check the source and destination operating systems, virtual interfaces, physical switch ports, VLAN trunks, routed interfaces, cloud gateways, and any intermediate appliances. Ethernet switches generally discard frames exceeding their supported size rather than fragmenting them. Optical transceivers establish physical connectivity, while link aggregation groups combine links; neither feature automatically enables jumbo frames. Configure compatible MTUs across aggregate members and the logical interfaces carrying the traffic.

Cloud paths frequently have different limits. Supported Amazon EC2 instance types can use a 9,001-byte MTU, but that does not mean every destination reachable from the instance supports it. AWS Direct Connect private virtual interfaces support MTUs of 1,500 or 9,001 bytes, while transit virtual interfaces support 1,500 or 8,500 bytes. Public virtual interfaces support 1,500 bytes. Confirm jumbo-frame capability on the underlying connection or link aggregation group and configure the virtual interface explicitly; do not assume a working BGP session proves that large data packets can pass.

AWS Transit Gateway supports an 8,500-byte MTU for supported attachment paths, so a route crossing it cannot carry a 9,001-byte IP packet unchanged. Internet-bound paths should use a 1,500-byte MTU, while VPN encapsulation reduces the usable inner-packet size further. A design using Direct Connect as its primary path and an IPsec VPN as backup must account for this difference. Otherwise, small health checks can succeed after failover while large application transfers stall.

Path MTU Discovery helps endpoints adapt to smaller routed links. For IPv4, packets with the Don't Fragment flag require suitable ICMP feedback when they exceed a link MTU; IPv6 routers do not fragment forwarded packets and use ICMPv6 Packet Too Big messages. Filtering these messages can create an MTU black hole. TCP maximum segment size clamping can help TCP traffic fit a smaller path, but it does not solve oversized UDP packets or replace correct MTU configuration.

Validate each intended route with controlled packet-size tests and application transfers, including backup paths and both traffic directions. On Linux, an IPv4 command such as ping -M do -s 8472 destination tests an 8,500-byte IP packet when standard 20-byte IPv4 and 8-byte ICMP headers apply. Increase test sizes gradually and inspect interface discard counters, retransmissions, and packet captures. Oversized packets visible in host captures may reflect segmentation offload rather than actual frames transmitted on the wire.

Key aspects of Jumbo Frames

Jumbo frames improve bulk-transfer efficiency only when packet sizing, encapsulation, and every primary and backup path are compatible.

Path-wide MTU compatibility

The usable packet size is limited by the smallest supported MTU along the selected path. Validate endpoints, switching, routing, gateways, and appliances rather than changing only the host interface.

Reduced per-packet overhead

Larger packets carry bulk data with fewer headers and fewer packet-processing operations. Benchmark representative workloads because hardware offloads and application bottlenecks can reduce the benefit.

Layer 2 and Layer 3 size distinctions

An IP MTU and a switch's maximum Ethernet frame size are not necessarily the same measurement. Include VLAN and other link-layer overhead when checking physical interconnect compatibility.

Connection-specific limits

Private connections, transit gateways, public interfaces, and VPNs can support different packet sizes. Choose MTUs for the actual route and its failover alternatives, not just the largest value supported by the instance.

Discovery and encapsulation

Allow the ICMP feedback needed for Path MTU Discovery where the path supports it, and account for tunnel overhead. TCP MSS adjustment can mitigate TCP sizing problems but does not protect every protocol.

Operational validation

Test large packets in both directions and during failover, then monitor drops and retransmissions. Successful small pings, established routing sessions, and healthy physical links do not establish jumbo-frame compatibility.

Cloud services for Jumbo Frames

EC2 provides the endpoint interface capability, while Direct Connect and Transit Gateway determine the packet sizes available across private and transit paths. The selected MTU must also fit the on-premises network and any intermediate appliances. A Direct Connect private virtual interface can support 9,001 bytes, but a route through Transit Gateway is limited to 8,500 bytes on supported attachment paths. Site-to-Site VPN introduces a smaller effective MTU, making failover testing essential. Coordinate endpoint settings, connection settings, packet-size testing, and TCP MSS policies instead of treating jumbo support as a single network-wide switch.

AWS Direct Connect image AWS Direct Connect

Private virtual interfaces support a 9,001-byte MTU, and transit virtual interfaces support an 8,500-byte MTU when the underlying connection supports jumbo frames. Public virtual interfaces use a 1,500-byte MTU; on-premises ports, VLAN interfaces, and any LAG must also accommodate the selected size.

Open AWS Direct Connect →
Amazon EC2 image Amazon EC2

Supported EC2 instance types support a 9,001-byte MTU. Configure the operating system appropriately and verify the destination path, because instance capability does not establish the MTU of gateways, tunnels, or external networks.

Open Amazon EC2 →
AWS Transit Gateway image AWS Transit Gateway

Transit Gateway supports an 8,500-byte MTU across supported VPC, Direct Connect, Connect, and peering attachment paths. Its VPN attachments have smaller limits, so traffic through the same transit architecture can require different packet sizes.

Open AWS Transit Gateway →
AWS Site to Site VPN image AWS Site-to-Site VPN

Site-to-Site VPN does not provide a jumbo-frame path, and IPsec overhead reduces the usable inner-packet MTU. Size traffic for the tunnel and evaluate TCP MSS adjustment, particularly when VPN is a backup for a jumbo-enabled private connection.

Open AWS Site-to-Site VPN →