AWS Security ChangesHomeSearch

AWS directconnect documentation change

Service: directconnect · 2025-06-13 · Documentation low

File: directconnect/latest/UserGuide/WorkingWithVirtualInterfaces.md

Summary

Standardized jumbo frames MTU to 8500 for private/transit VIFs and added deprecation note for 9001 MTU.

Security assessment

The changes involve network configuration standardization and deprecation notices. No evidence of security vulnerabilities related to MTU sizes is provided in the diff.

Diff

diff --git a/directconnect/latest/UserGuide/WorkingWithVirtualInterfaces.md b/directconnect/latest/UserGuide/WorkingWithVirtualInterfaces.md
index b2beb6996..7a90e0e59 100644
--- a//directconnect/latest/UserGuide/WorkingWithVirtualInterfaces.md
+++ b//directconnect/latest/UserGuide/WorkingWithVirtualInterfaces.md
@@ -138,2 +138 @@ For more information, see [Routing policies and BGP communities](https://docs.aw
-(Private virtual interface only) **Jumbo frames** | The maximum transmission unit (MTU) of packets over AWS Direct Connect. The default is 1500. Setting the MTU of a virtual interface to 9001 (jumbo frames) can cause an update to the underlying physical connection if it wasn't updated to support jumbo frames. Updating the connection disrupts network connectivity for all virtual interfaces associated with the connection for up to 30 seconds. Jumbo frames apply only to propagated routes from AWS Direct Connect. If you add static routes to a route table that point to your virtual private gateway, then traffic routed through the static routes is sent using 1500 MTU. To check whether a connection or virtual interface supports jumbo frames, select it in the AWS Direct Connect console and find **Jumbo frame capable** on the virtual interface **General configuration** page.  
-(Transit virtual interface only) **Jumbo frames** | The maximum transmission unit (MTU) of packets over AWS Direct Connect. The default is 1500. Setting the MTU of a virtual interface to 8500 (jumbo frames) can cause an update to the underlying physical connection if it wasn't updated to support jumbo frames. Updating the connection disrupts network connectivity for all virtual interfaces associated with the connection for up to 30 seconds. Jumbo frames are supported up to 8500 MTU for Direct Connect. Static routes and propagated routes configured in the Transit Gateway Route Table will support Jumbo Frames, including from EC2 instances with VPC static route table entries to the Transit Gateway Attachment. To check whether a connection or virtual interface supports jumbo frames, select it in the AWS Direct Connect console and find **Jumbo frame capable** on the virtual interface **General configuration** page.  
+(Private and transit virtual interfaces only) **Jumbo frames** | The maximum transmission unit (MTU) of packets over AWS Direct Connect. The default is 1500. Setting the MTU of a virtual interface to 8500 (jumbo frames) can cause an update to the underlying physical connection if it wasn't updated to support jumbo frames. Updating the connection disrupts network connectivity for all virtual interfaces associated with the connection for up to 30 seconds. Jumbo frames are supported up to 8500 MTU for Direct Connect. Static routes and propagated routes configured in the Transit Gateway Route Table will support Jumbo Frames, including from EC2 instances with VPC static route table entries to the Transit Gateway Attachment. To check whether a connection or virtual interface supports jumbo frames, select it in the AWS Direct Connect console and find **Jumbo frame capable** on the virtual interface **General configuration** page.  
@@ -169,0 +169,2 @@ For hosted connections, Jumbo frames can be enabled only if originally enabled o
+MTUs for private VIFs is standardizing to 8500. 9001 will continue to be accepted until it's removed.
+