Work out the real MSS once tunnels and headers have taken their cut.
Timestamps take 12 bytes and are on by default on Linux and macOS. Set 0 to see the textbook figure.
MSS 1448 bytes on a 1500 byte MTU
An MSS of 1448 leaves 97% of each frame carrying real data. If you are troubleshooting rather than planning, test the real path MTU directly by pinging with the do-not-fragment flag set and shrinking the payload until it gets through. The largest size that succeeds, plus 28 bytes for the probe and IP headers, is the actual path MTU.
What this cannot tell you
Take this with you
MTU / MSS & Fragmentation Calculator on RunTheTests — free browser-based netmath tools, no sign-up.