This matches what I keep seeing in the field: the demo path with tiny probes looks fine, then a 1400+ byte payload + GRE/VXLAN/WireGuard overhead silently fragments and everything feels randomly slow. Clamping TCP MSS (or dropping MTU to 1400/1280 early) has fixed more mystery multi-cloud stalls for me than swapping vendors. Nice write-up.