I am still getting that wacky “TCP Treason Unclocked” kernel message from time-to-time, so I’m disabling window scaling on my pfSense firewall.

pfSense is a FreeBSD derivative, so I looked up the procedures for doing so, and decided to add this to /etc/systctl.conf:

net.inet.tcp.inflight.enable=0
net.inet.tcp.path_mtu_discovery=0
net.inet.tcp.rfc1323=0

I haven’t tested this setup extensively yet.