This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

QoS for SSL VPN clients.

I've read a few threads on Qos on IPSEC and am wondering if the following would work.

(This is for remote road warrior workers using the Astaro SSL VPN client to connect to our LAN from remote, the problem is sometimes their connections are poor due to bandwidth hogging by other apps, these guys are usually accessing their desktops at work via RDP).

For a traffic selector use:

SRC: Internal LAN
SVC: Any
DST: VPN Pool (SSL) 10.242.2.0/24

Would that work?

This thread was automatically locked due to age.

0 BAlfson over 15 years ago

I just found this thread while searching for another one. Assuming that the problem is the time it takes for screen refreshes, I think you could make a selector 'Any -> SSL -> Any' and use it to guarantee bandwidth on the External interface.

I don't think your selector would ever be considered because I think the only relevant thing leaving the Exterrnal interface is SSL packets with a source of "External (Address)" and destinations of the public IPs your road warriors are calling from.

Cheers - Bob
PS Here's a thread that discusses favoring VoIP traffic by having SSL and IPsec VPNs between two sites, then having the subnets of VoIP phones pass via the VPN that has a bandwidth guarantee: https://community.sophos.com/products/unified-threat-management/astaroorg/f/54/t/39632
PPS Alan Toes wrote last year that you could apply QoS to traffic inside a tunnel using DSCP bits in the traffic selector, but I haven't seen anything more about this here or in the KnoweldgeBase.
PPPS This might work: Qos for VoIP via VPN
Cancel
Vote Up 0 Vote Down

Cancel