home bbs files messages ]

Forums before death by AOL, social media and spammers... "We can't have nice things"

   comp.dcom.vpn      VPN protocols, clients, awesomeness      2,349 messages   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]

   Message 1,415 of 2,349   
   Mike Drechsler - SPAM PROTECTED EMA to rpaz61@gmail.com   
   Re: Site-to-site VPN Issue   
   05 Jan 05 22:46:14   
   
   From: mike-newsgroup@-DELETETHISPART-.upcraft.com   
      
   rpaz61@gmail.com wrote:   
   > Here's the setup:   
   SNIP   
   > Network:   
   > SBC 768K SDSL   
   SNIP   
   > All users use a Windows-based application that connects to a database   
   > on the Windows Server 2003 domain controller.  There are not any   
   > performance issues in the Main Office.  There are performance issues   
   > with clients accessing the database and copying/opening files from the   
   > server to the client PC over the VPN from the Remote Office.   
   >   
   > We ran a packet trace (netcap.exe on a Windows XP SP2 PC at the Remote   
   > Office and netmon.exe on the Windows Server 2003 domain controller)   
   > while copying a 12.7MB file from the server to the client PC.  What we   
   > found is that the client PC at the Remote Office is repeatedly sending   
   > ACKs across the VPN tunnel to the domain controller and the domain   
   > controller is yet the domain controller is repeatedly sending ACKs   
   > across the VPN tunnel to the client PC.   
   >   
   > We do not know what's causing this issue.  Sonicwall states that   
   > there's nothing wrong with their hardware or the VPN tunnel itself.   
   >   
   > Does anyone have any ideas?   
   >   
   > Thanks in advance!!   
   >   
   > Rob   
   >   
   > PS - I can send the packet trace capture files if needed.  Just let me   
   > know.   
      
   So you have a 0.7 Mbit connection that you are comparing to your   
   internal 100Mbit connection and you notice that it's slower.  Wow,   
   that's shocking.   
      
    > What we   
    > found is that the client PC at the Remote Office is repeatedly sending   
    > ACKs across the VPN tunnel to the domain controller and the domain   
    > controller is yet the domain controller is repeatedly sending ACKs   
    > across the VPN tunnel to the client PC.   
      
   You also notice that the client and server send TCP acknowledge   
   messages.  So what?  That's not an issue, that's how the TCP protocol   
   works.  You mangled the sentence though so you might have intended to   
   say something else.   
      
      
   How long does it actually take to transfer that 12.7MB file? If it's   
   less than 5 minutes then you have nothing to complain about.  A   
   768Kbit/s connection would take a minimum of about 3 minutes but doing a   
   direct copy over Microsoft SMB protocol file sharing often adds a bit of   
   overhead plus whatever anyone else is doing on the connection at the   
   time.  The routers you are using should handle an encrypted tunnel at   
   the wire speed without any artificially induced slowdown.  There is some   
   overhead when encrypting but it's not big and has a larger effect on   
   latency.  How much bandwidth does your database application use for a   
   typical session?  If this is a custom database application has your   
   programmer optimized the queries to use as little bandwidth as possible?   
     Is the database maybe doing too many small queries so the response   
   time becomes an issue?  Can the client application cache some of the   
   database responses to cut down on the delay and traffic?   
      
   Maybe I'm missing something but what you describe is exactly what you   
   should expect.  If you need to do things that require database access   
   then you might be better off with a Terminal server setup at your main   
   office for the remote users to use.  If you combine Microsoft Terminal   
   services with Citrix presentation server you can make it very similar to   
   running the application on the local machine.   
      
      
   --   
   WARNING!  Email address has been altered for spam resistance.   
   Please remove the -deletethispart-. section before replying directly.   
   Mike Drechsler (mike-newsgroup@-deletethispart-.upcraft.com)   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]


(c) 1994,  bbs@darkrealms.ca