[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] Re: performance issue


  • Subject: Re: [Openvpn-users] Re: performance issue
  • From: "Renato Salles" <rsalles@xxxxxxxxxxxxxxxxxxxx>
  • Date: Sat, 11 Oct 2003 13:00:02 -0300 (BRT)
  • Importance: Normal

vklengh,


Yes, re-reading my message i found so many errors that one could thing
that i'm was drunk or something like that. Yo're right: i'll pay much more
attention in the next time.

Let's try again:


Hi, all.

In another VPN product maillist - in this case, CIPE, well-known by RedHat
linux users -, this issue was debated a lot and - IMHO - it's not possible
to have cross-subnet browsing without a WINS server. As many of you are
already aware, this browsing limitations is inherent to the network model
developped by that guys at Redmond: we can't do much more about it. A ftp
tunnel "could" be a solution - or workaround - but a WINS server does the
trick, and samba can actuallly be configured for that. But: take care to
don't define a samba AND another Win32 server - NT, 2K or XP - as WINS
servers in the same sub-network.



Sds,

Renato
Sa0 pAuLº, bRaz1l




> I prefer starting with an english course instead of a wins server
>
> ----- Original Message -----
> From: "Renato Salles" <rsalles@xxxxxxxxxxxxxxxxxxxx>
> To: <openvpn-users@xxxxxxxxxxxxxxxxxxxxx>
> Sent: Saturday, October 11, 2003 6:16 AM
> Subject: Re: [Openvpn-users] Re: performance issue
>
>
> Hi all.
>
> I a previous UDP VPN very well known by the RedHat linux users, this issue
> was debated a lot and, by my part, there will no cross subnet browsing
> without a WINS server around. As many are already aware, this browsing
> limitations is inherent to the network model developed by that guys at
> Redmond, and there is not much we can do about. A ftp tunnel could be a
> solution - maybe a workaround - by a WINS server does the trick and SAMBA
> can actuallly be configured to do that. If someone are interesting in some
> experiencing with, take care to don't define a SAMBA and another Win32
> server - NT, 2K or XP - as WINS servers in the same sub-network.
>
>
> RSalles
>
>
>
>> howard ho <hho@xxxxxxxxx> said:
>>
>>> Hi James,
>>>
>>> OpenVPN is such a great product. Easy to install and configure. I have
>>> installed it on our corporate firewall to allow road-warriors to access
>>> the
>>> corporate LAN and PBX systems (IP telephony). Some users noticed once
>>> the
>>> link is established with the TLS server, the bandwidth of the data
>>> channel
>>> is reduced substantially; as noticed when streaming audio fails to
>>> work.
>>> I
>>> just wonder if you might some idea about where the problem might come
>>> from?
>>>
>>> I'm running OPENVPN TLS server on the firewall and the users are
>>> running
>>> Windows2000 as TLS client. I can send you the .conf files if it helps.
>>>
>>> thank you
>>>
>>> Howard
>>>
>>
>> Howard,
>>
>> The issues I'm aware of with regards to performance are:
>>
>> (1) The linux TAP driver has some performance issues.  Not sure if you
>> are
>> using it.  Using a TUN driver is almost always a better choice with
>> regards to
>> performance.  The latest Windows client supports it now.  If you are
>> using
>> windows file sharing or samba, you may need to reconfigure some things
>> in
>> order to get everything to work without broadcasts (TUN drivers don't
>> pass
>> broadcasts).
>>
>> (2) A lot of performance problems are caused by inefficient
>> fragmentation
>> which occur when packets which are already the max size for medium get
>> expanded due to encryption and encapsulation overhead.  A new option
>> --mssfix
>> is a good solution to this problem.  Try adding "mssfix 1400" to your
>> config
>> on at least one side of the connection.
>>
>> (3) Sometimes windows file sharing may be slow, even when the tunnel
>> itself is
>> capable of supporting higher speeds.  If you are noticing problems with
>> windows file sharing performance, try an FTP transfer over the same
>> tunnel
>> and
>> compare performance with windows file sharing.
>>
>> James
>>
>>
>>
>> -------------------------------------------------------
>> This SF.net email is sponsored by: SF.net Giveback Program.
>> SourceForge.net hosts over 70,000 Open Source Projects.
>> See the people who have HELPED US provide better services:
>> Click here: http://sourceforge.net/supporters.php
>> _______________________________________________
>> Openvpn-users mailing list
>> Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
>> https://lists.sourceforge.net/lists/listinfo/openvpn-users
>>
>
>
> --
> "A well-written program is its own heaven; a poorly-written program is its
> own hell."
> TAO of Programming - Book 4
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: SF.net Giveback Program.
> SourceForge.net hosts over 70,000 Open Source Projects.
> See the people who have HELPED US provide better services:
> Click here: http://sourceforge.net/supporters.php
> _______________________________________________
> Openvpn-users mailing list
> Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
>


-- 
"A well-written program is its own heaven; a poorly-written program is its
own hell."
TAO of Programming - Book 4

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users