If your TCP stack sends a packet bigger than the path MTU, a router will either fragment it (IPv4) or drop it and ask for a smaller one (IPv6, via ICMPv6 "Packet Too Big").
VPN tunnels reduce the effective MTU because they wrap each packet in an additional header. A common symptom of an MTU mismatch is "DNS works but loading large pages hangs."
See also