A GRE over IPsec tunnel survives WAN failover, but MSS adjustment stays on the old physical interface and large HTTP transfers start hanging

Overlay continuity exists, yet payload sizing logic remained attached to the wrong underlay object.