|
|
I prefer starting with an english course instead of a wins server ----- Original Message ----- From: "Renato Salles" <rsalles@xxxxxxxxxxxxxxxxxxxx> To: <openvpn-users@xxxxxxxxxxxxxxxxxxxxx> Sent: Saturday, October 11, 2003 6:16 AM Subject: Re: [Openvpn-users] Re: performance issue Hi all. I a previous UDP VPN very well known by the RedHat linux users, this issue was debated a lot and, by my part, there will no cross subnet browsing without a WINS server around. As many are already aware, this browsing limitations is inherent to the network model developed by that guys at Redmond, and there is not much we can do about. A ftp tunnel could be a solution - maybe a workaround - by a WINS server does the trick and SAMBA can actuallly be configured to do that. If someone are interesting in some experiencing with, take care to don't define a SAMBA and another Win32 server - NT, 2K or XP - as WINS servers in the same sub-network. RSalles > howard ho <hho@xxxxxxxxx> said: > >> Hi James, >> >> OpenVPN is such a great product. Easy to install and configure. I have >> installed it on our corporate firewall to allow road-warriors to access >> the >> corporate LAN and PBX systems (IP telephony). Some users noticed once >> the >> link is established with the TLS server, the bandwidth of the data >> channel >> is reduced substantially; as noticed when streaming audio fails to work. >> I >> just wonder if you might some idea about where the problem might come >> from? >> >> I'm running OPENVPN TLS server on the firewall and the users are running >> Windows2000 as TLS client. I can send you the .conf files if it helps. >> >> thank you >> >> Howard >> > > Howard, > > The issues I'm aware of with regards to performance are: > > (1) The linux TAP driver has some performance issues. Not sure if you are > using it. Using a TUN driver is almost always a better choice with > regards to > performance. The latest Windows client supports it now. If you are using > windows file sharing or samba, you may need to reconfigure some things in > order to get everything to work without broadcasts (TUN drivers don't pass > broadcasts). > > (2) A lot of performance problems are caused by inefficient fragmentation > which occur when packets which are already the max size for medium get > expanded due to encryption and encapsulation overhead. A new option > --mssfix > is a good solution to this problem. Try adding "mssfix 1400" to your > config > on at least one side of the connection. > > (3) Sometimes windows file sharing may be slow, even when the tunnel > itself is > capable of supporting higher speeds. If you are noticing problems with > windows file sharing performance, try an FTP transfer over the same tunnel > and > compare performance with windows file sharing. > > James > > > > ------------------------------------------------------- > This SF.net email is sponsored by: SF.net Giveback Program. > SourceForge.net hosts over 70,000 Open Source Projects. > See the people who have HELPED US provide better services: > Click here: http://sourceforge.net/supporters.php > _______________________________________________ > Openvpn-users mailing list > Openvpn-users@xxxxxxxxxxxxxxxxxxxxx > https://lists.sourceforge.net/lists/listinfo/openvpn-users > -- "A well-written program is its own heaven; a poorly-written program is its own hell." TAO of Programming - Book 4 ____________________________________________ Openvpn-users mailing list Openvpn-users@xxxxxxxxxxxxxxxxxxxxx https://lists.sourceforge.net/lists/listinfo/openvpn-users ____________________________________________ Openvpn-users mailing list Openvpn-users@xxxxxxxxxxxxxxxxxxxxx https://lists.sourceforge.net/lists/listinfo/openvpn-users |