Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 5470 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Throughput ssl & ipsec vpn tunnels

RomanBY
We had made ssl and ipsec vpn tunnel on gigabit interfaces and then measured throughput. It was less than ~130 Mbps.
Who knows does Astaro limit ssl or ipsec vpn tunnels throughput?


This thread was automatically locked due to age.
  • 0
    With the SSL VPN, did you change the protocol to UDP instead of TCP and select Compression on the 'Advanced' tab?

    With IPsec, that sounds like an MTU problem.

    Cheers - Bob
  • 0 in reply to BAlfson
    With the SSL VPN, did you change the protocol to UDP instead of TCP and select Compression on the 'Advanced' tab?

    With IPsec, that sounds like an MTU problem.

    Cheers - Bob


    Thank You for answering. But what a problem it may be with MTU, if we have just Astaro server with default MTU and 2 computers with software Ixia ixchariot for measurement throughput?
  • 0
    In the 'Remote Gateway' definition 'Advanced' section, select 'Support Path MTU discovery'.  Make this setting on both sides of the site-to-site tunnel.

    If there is a switch between the two Astaros, you may need to lower the MTU of the interfaces - try 1400 just to see if there's a difference.

    Cheers - Bob


    Cheers - Bob
  • 0
    I think the problem is with ethernet adapter. We checked with another adapter - throughput was ~170 Mbps. What throughput have you on your equipment?