VPN performance problem Post: 302376043

Sponsored Content

Homework and Emergencies Emergency UNIX and Linux Support VPN performance problem Post 302376043 by Corona688 on Monday 30th of November 2009 12:09:54 PM

11-30-2009

Registered User

VPN performance problem

This is a weird problem I've been butting my head against for days now...

I have two OpenVPN servers set up with identical configurations except for the keys. One of them is hosted in a datacenter with a large backbone, the other is hosted on my home server's limited residential internet. One of them delivers consistent topped-out performance(100 kilobytes per second) even while under network load, the other delivers at best 30 kilobytes per second when load-free. Care to guess which one is which?

You'd guess I'd get better performance on the VPS, right? Wrong! My anemic home server gets better performance and throughput than my hosting provider. This is made doubly odd by the fact that throughput to my hosting provider seems fine in any other way I've thought to test. CPU load, I/O load, network load, all of those look minimal.

They're running nearly identical systems, with the same OS(Gentoo Linux) and very similar versions of OpenVPN -- indeed, their specific support for Gentoo and OpenVPN both are reasons this provider was picked. No firewalls or bandwidth throttling is involved yet. The latency to both hosts is nearly identical(i.e. terrible Smilie

But my client's behind a sat connection, so it's to be expected ) I'm nearly out of ideas. Is it time to fire my hosting provider? Any suggestions for alternatives?

Last edited by Corona688; 11-30-2009 at 01:16 PM..

Corona688

View Public Profile for Corona688

Visit Corona688's homepage!

Find all posts by Corona688

8 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

performance problem

Hello, I have a mail server (sendmail) with SUNOS 5.5.1. Just recently it began to respond very slowly. I used vmstat to check the performance data. Only interupt, system call and CPU context swiching are relatively high. Other statistics are normal, especially CPU utilization are very...

2. Solaris

Performance problem

Hi All, There is a virtual user "ecoouk" which logs on to the server and runs some scripts. I want to know how much server performance can I gain if I put off all the scripts run by this user. Please tell me how to analyse how much resources a specific user is using. Regards, Abhishek

3. Linux

vpn problem

Trying to connect to my companies VPN with vpnc but I keep getting an error that the target failed to respond. I run wireshark and see that my host sends out a few ISAKMP packets but gets no response and gives up. Any ideas what can cause this to happen? Is there someway that UDP traffic could...

4. UNIX for Dummies Questions & Answers

Network performance problem

I have a Teradata Machine, using MP-RAS Unix, with a 1000 Intel Ethernet card and a Cisco switch. If I configure the ethernet card and the switch to auto, so they negotiate to 1000, or configure the ethernet card and switch manually to 1000Full or 100Full, the velocity is very very low. Only...

5. UNIX for Dummies Questions & Answers

Problem when I try to Install a Client VPN Cisco

Hi Gurus of UNIX, I have a problem when I try to install a software VPN Cisco in Laptop (HP530). I do the following procedures: Part 2 - VPN Client Compilation We will now set up the vpn client. As there is no official Cisco VPN Client for OpenSolaris X86 available, we will use vpnc....

6. UNIX for Advanced & Expert Users

Performance problem with bidirectional nc

Working on a simple, half duplex network diagnostic that will run anywhere using nc and dd. Performance is symmetrical with sink and source nc processes open as a server: nc -vkl 5000 > /dev/null & cat /dev/zero | nc -vkl 5001 & With this on the client: nc host0 5001 | dd of=/dev/null...

7. Cybersecurity

VPN Initial Connection Problem

Hey everyone. I have a problem, but it may be my lack of understanding that is the cause. Ok so I attend a technical school, and needless to say there's a lot of wannabe hackers, pranksters and what not. So from my laptop I'd like to connect to the wireless AP's around campus, but security is a...

8. Shell Programming and Scripting

Performance problem in Shell Script

Hi, I am Shell script beginner. I wrote a shell programming that will take each line of a file1 and search for it in another file2 and give me the output of the lines that do not exist in the file2. I wrote it using do while nested loop but the problem here is its running for ever . Is there...

LEARN ABOUT DEBIAN

racoon-tool

RACOON-TOOL(8)						      System Manager's Manual						    RACOON-TOOL(8)

NAME

       racoon-tool - program to manage the racoon(8) IPSEC IKE daemon.

SYNOPSIS

       racoon-tool [-h] reload|restart|force-reload|start|stop
       racoon-tool [-h] sadflush|spdflush|saddump|spddump
       racoon-tool [-h] vpndown|vdown|vpnup|vup connection-name|all
       racoon-tool [-h] vpnreload|vreload connection-name|all
       racoon-tool [-h] vpnlist|vlist [connection-name|all]
       racoon-tool [-h] vpnmenu|vmenu [connection-name-regexp]
       racoon-tool [-h] racoonstart|racoonstop|rstart|rstop

DESCRIPTION

       This  manual page documents briefly the racoon-tool command.  racoon-tool(8) is a perl script that can be used to control the racoon(8) IKE
       daemon and the SPD database within the kernel via the setkey(8) command.  Various operations that it can do are described below.

       You can also optionally choose not to use it via reconfiguring the racoon package using dpkg-reconfigure(8).

OPTIONS

       A summary of options are included below.

       -h     Show summary of options.

COMMANDS

       start  Start racoon(8), loading any needed modules, configuring the SPD, and generating a configuration	from  /etc/racoon/racoon-tool.conf
	      (head) and following up with *.conf files from /etc/racoon/racoon-tool.conf.d/.

       stop   Stop racoon(8) unloading any crypto/IPSEC modules, flushing the SAD and SPD.

       reload Regenerate  configuration  from  /etc/racoon/racoon.conf, and /etc/racoon/racoon.conf.d/, HUP racoon(8) and reinitialise the SPD and
	      SAD.

       restart|force-reload
	      Perform a stop followed by a start

       sadflush
	      Flush the SAD via setkey(8).

       spdflush
	      Flush the SPD via setkey(8).

       saddump|dump
	      Dump the SAD to screen via setkey(8), paginating via your pager.

       spddump
	      Dump the SPD to screen via setkey(8), paginating via your pager.

       vpnup|vup connection-name|all
	      Bring up the VPN connection(s).

       vpndown|vdown connection-name|all
	      Take down the VPN connection(s).

       vpnreload|vreload connection-name|all
	      Reload the VPN connection(s).

       vpnlist|vlist [connection-name|all]
	      List the known VPN connections in /etc/racoon/racoon-tool.conf, etc.  Can be used by a script or administrator to see if a VPN  con-
	      nection exists.

       vpnmenu|vmenu [connection-name-regexp]
	      Start  the  VPN  menu management mode.  This displays the SPD, and you can shutdown VPNs from here.  Latter on support will be added
	      for checking status and reloading the chosen connection.

       racoonstart|rstart
	      Start only the racoon(8) daemon.

       racoonstop|rstop
	      Stop only the racoon(8) daemon.

FILES

       /etc/racoon/racoon-tool.conf
	      - configuration file (head).

       /etc/racoon/racoon-tool.conf.d
	      - configuration file segment directory read after the above.

       /var/lib/racoon/racoon.conf
	      - generated racoon.conf

SEE ALSO

       racoon(8), racoon.conf(5), setkey(8), racoon-tool.conf(5).

AUTHOR

       This manual page was written by Matthew Grant <matthewgrant5@gmail.com>, for the Debian GNU/Linux system (but may be used by others).

																    RACOON-TOOL(8)