Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 5 replies
  • Subscribers 27 subscribers
  • Views 930 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG to XG RED tunnel optimization

Carlo

Hello,

Can I do anything to improve RED tunnel throughput between local XGS 2100 on 1000/500 WAN link and virtual XG firewall running in Azure? Enable/disable compression does not change anything as far I can see.

PS C:\Users\administrator\Downloads\iperf> .\iperf3.exe -c 10.2.0.6
Connecting to host 10.2.0.6, port 5201
[  4] local 10.1.0.6 port 49478 connected to 10.2.0.6 port 5201
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-1.00   sec  4.75 MBytes  39.7 Mbits/sec
[  4]   1.00-2.01   sec  4.12 MBytes  34.5 Mbits/sec
[  4]   2.01-3.01   sec  3.62 MBytes  30.3 Mbits/sec
[  4]   3.01-4.01   sec  3.25 MBytes  27.2 Mbits/sec
[  4]   4.01-5.01   sec  2.88 MBytes  24.2 Mbits/sec
[  4]   5.01-6.01   sec  2.88 MBytes  24.1 Mbits/sec
[  4]   6.01-7.01   sec  2.62 MBytes  22.1 Mbits/sec
[  4]   7.01-8.01   sec  2.88 MBytes  24.0 Mbits/sec
[  4]   8.01-9.01   sec  1.88 MBytes  15.7 Mbits/sec
[  4]   9.01-10.01  sec  2.00 MBytes  16.8 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-10.01  sec  30.9 MBytes  25.9 Mbits/sec                  sender
[  4]   0.00-10.01  sec  30.7 MBytes  25.7 Mbits/sec                  receiver



This thread was automatically locked due to age.
Parents Reply Children
  • +1 in reply to Carlo

    In General, multi download streams are faster than a single connection. But this could be a limitation of the iperf and not the general tunnel. What if you try another protocol to download something? 

    You could try to decrease/lower the MTU of the RED tunnel. 

    Decrease to 1400 on both ends and redo the tests. 

    __________________________________________________________________________________________________________________

  • 0 in reply to LuCar Toni

    I would not say that this is iperf limitation because when I test local network I get good results.

    Results with 1400 MTU are same

    PS C:\Users\administrator\Downloads\iperf> .\iperf3 --client 10.2.0.6
Connecting to host 10.2.0.6, port 5201
[  4] local 10.1.0.6 port 54958 connected to 10.2.0.6 port 5201
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-1.00   sec  4.25 MBytes  35.6 Mbits/sec
[  4]   1.00-2.00   sec  4.75 MBytes  39.8 Mbits/sec
[  4]   2.00-3.00   sec  5.25 MBytes  44.2 Mbits/sec
[  4]   3.00-4.00   sec  5.75 MBytes  48.1 Mbits/sec
[  4]   4.00-5.00   sec  4.25 MBytes  35.6 Mbits/sec
[  4]   5.00-6.00   sec  3.38 MBytes  28.4 Mbits/sec
[  4]   6.00-7.01   sec  2.12 MBytes  17.7 Mbits/sec
[  4]   7.01-8.01   sec  1.88 MBytes  15.6 Mbits/sec
[  4]   8.01-9.02   sec  1.25 MBytes  10.5 Mbits/sec
[  4]   9.02-10.00  sec  1.00 MBytes  8.51 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-10.00  sec  33.9 MBytes  28.4 Mbits/sec                  sender
[  4]   0.00-10.00  sec  33.7 MBytes  28.3 Mbits/sec                  receiver

iperf Done.

  • 0 in reply to LuCar Toni

    I get same results when copying files

  • 0 in reply to LuCar Toni

    It is related to TCP buffer tuning: Now I get better results.

    Linux Tuning (es.net)

    carlo@web01:~$ iperf3 -c 10.2.0.102 -w 2m
Connecting to host 10.2.0.102, port 5201
[  5] local 10.1.0.7 port 34380 connected to 10.2.0.102 port 5201
[ ID] Interval           Transfer     Bitrate         Retr  Cwnd
[  5]   0.00-1.00   sec  13.8 MBytes   115 Mbits/sec  988    319 KBytes
[  5]   1.00-2.00   sec  6.25 MBytes  52.4 Mbits/sec   33    185 KBytes
[  5]   2.00-3.00   sec  6.25 MBytes  52.4 Mbits/sec    0    222 KBytes
[  5]   3.00-4.00   sec  7.50 MBytes  62.9 Mbits/sec    0    330 KBytes
[  5]   4.00-5.00   sec  13.8 MBytes   115 Mbits/sec    0    545 KBytes
[  5]   5.00-6.00   sec  20.0 MBytes   168 Mbits/sec    0    872 KBytes
[  5]   6.00-7.00   sec  8.75 MBytes  73.4 Mbits/sec   77    248 KBytes
[  5]   7.00-8.00   sec  6.25 MBytes  52.4 Mbits/sec   12    145 KBytes
[  5]   8.00-9.00   sec  5.00 MBytes  41.9 Mbits/sec    0    180 KBytes
[  5]   9.00-10.00  sec  6.25 MBytes  52.4 Mbits/sec    0    254 KBytes
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate         Retr
[  5]   0.00-10.00  sec  93.8 MBytes  78.6 Mbits/sec  1110             sender
[  5]   0.00-10.00  sec  90.8 MBytes  76.2 Mbits/sec                  receiver

iperf Done.
carlo@web01:~$

Unfiltered HTML