AWS Security ChangesHomeSearch

AWS directconnect documentation change

Service: directconnect · 2025-06-13 · Documentation low

File: directconnect/latest/UserGuide/max-resiliency-set-up.md

Summary

Consolidated jumbo frames documentation for private and transit virtual interfaces, changing transit interface MTU reference from 8500 to 9001 and removing transit-specific static route support details

Security assessment

The change updates MTU documentation but does not address a security vulnerability. While MTU misconfiguration could cause network disruptions, there's no evidence this change fixes an existing security flaw. The update appears to standardize documentation rather than mitigate risks.

Diff

diff --git a/directconnect/latest/UserGuide/max-resiliency-set-up.md b/directconnect/latest/UserGuide/max-resiliency-set-up.md
index 4bcb5914c..072e8476c 100644
--- a//directconnect/latest/UserGuide/max-resiliency-set-up.md
+++ b//directconnect/latest/UserGuide/max-resiliency-set-up.md
@@ -198,2 +198 @@ For more information, see [Routing policies and BGP communities](https://docs.aw
-(Private virtual interface only) **Jumbo frames** | The maximum transmission unit (MTU) of packets over AWS Direct Connect. The default is 1500. Setting the MTU of a virtual interface to 9001 (jumbo frames) can cause an update to the underlying physical connection if it wasn't updated to support jumbo frames. Updating the connection disrupts network connectivity for all virtual interfaces associated with the connection for up to 30 seconds. Jumbo frames apply only to propagated routes from AWS Direct Connect. If you add static routes to a route table that point to your virtual private gateway, then traffic routed through the static routes is sent using 1500 MTU. To check whether a connection or virtual interface supports jumbo frames, select it in the AWS Direct Connect console and find **Jumbo frame capable** on the virtual interface **General configuration** page.  
-(Transit virtual interface only) **Jumbo frames** | The maximum transmission unit (MTU) of packets over AWS Direct Connect. The default is 1500. Setting the MTU of a virtual interface to 8500 (jumbo frames) can cause an update to the underlying physical connection if it wasn't updated to support jumbo frames. Updating the connection disrupts network connectivity for all virtual interfaces associated with the connection for up to 30 seconds. Jumbo frames are supported up to 8500 MTU for Direct Connect. Static routes and propagated routes configured in the Transit Gateway Route Table will support Jumbo Frames, including from EC2 instances with VPC static route table entries to the Transit Gateway Attachment. To check whether a connection or virtual interface supports jumbo frames, select it in the AWS Direct Connect console and find **Jumbo frame capable** on the virtual interface **General configuration** page.  
+(Private and transit virtual interfaces only) **Jumbo frames** | The maximum transmission unit (MTU) of packets over AWS Direct Connect. The default is 1500. Setting the MTU of a virtual interface to 9001 (jumbo frames) can cause an update to the underlying physical connection if it wasn't updated to support jumbo frames. Updating the connection disrupts network connectivity for all virtual interfaces associated with the connection for up to 30 seconds. Jumbo frames apply only to propagated routes from AWS Direct Connect. If you add static routes to a route table that point to your virtual private gateway, then traffic routed through the static routes is sent using 1500 MTU. To check whether a connection or virtual interface supports jumbo frames, select it in the AWS Direct Connect console and find **Jumbo frame capable** on the virtual interface **General configuration** page.