Path MTU discovery fixes and improvements (#3109)

- Existing option `WIREGUARD_MTU` , if set, disables PMTUD and is used
- New option `PMTUD_ICMP_ADDRESSES=1.1.1.1,8.8.8.8` and `PMTUD_TCP_ADDRESSES=1.1.1.1:443,8.8.8.8:443`
- ICMP PMTUD now targets external-by-default IP addresses
- New TCP PMTUD (binary search only) as a second MTU confirmation and fallback mechanism.
- Force set TCP MSS to MTU - IP header - TCP base header - "magic 20 bytes" 🎆
- Fix #3108

internal/provider/utils/wireguard_test.go

@@ -22,7 +22,7 @@ func Test_BuildWireguardSettings(t *testing.T) {
 		ipv6Supported bool
 		settings      wireguard.Settings
 	}{
-		"some settings": {
+		"some_settings": {
 			connection: models.Connection{
 				IP:     netip.AddrFrom4([4]byte{1, 2, 3, 4}),
 				Port:   51821,
@@ -41,6 +41,7 @@ func Test_BuildWireguardSettings(t *testing.T) {
 				},
 				PersistentKeepaliveInterval: ptrTo(time.Hour),
 				Interface:                   "wg1",
+				MTU:                         ptrTo(uint32(1000)),
 			},
 			ipv6Supported: false,
 			settings: wireguard.Settings{
@@ -58,6 +59,7 @@ func Test_BuildWireguardSettings(t *testing.T) {
 				PersistentKeepaliveInterval: time.Hour,
 				RulePriority:                101,
 				IPv6:                        boolPtr(false),
+				MTU:                         1000,
 			},
 		},
 	}