I think a GRE Tunnel environment would solve the problem.Configure a GRE-Tunnel from the spokes to the hub and enable ospf on it.Set the "ip tcp adjust-mss 1300" on the tunnel interface and your problem is solved.I think http to the internet is worki...