Satelite Broadband and VPN

adne

Hi,

I got Satelite broadband installed (onwave), getting 10 Meg d and 2 Meg u speeds, however when I connect to work through a Cisco VPN the speeds are throttled to .6 Meg d and .2 Meg u.

Anyone any idea of what would be causing this issue, any ideas how to resolve.

brianwalshcork

When your connected to your work VPN, your Internet traffic is usually routed through the VPN connection also, so that's extra hops for a start and your companies Internet connection might be the source of the congestion. I doubt that the speed is actually being trottled.

A better test might be to FTP a file up and down to/from an FTP server on your work network.

Brian

adne

brianwalshcork wrote: »

When your connected to your work VPN, your Internet traffic is usually routed through the VPN connection also, so that's extra hops for a start and your companies Internet connection might be the source of the congestion. I doubt that the speed is actually being trottled.

A better test might be to FTP a file up and down to/from an FTP server on your work network.

Brian

Yes the internet traffic is routed through the VPN connection but that does not explain the massive downgrade in speed.
The Speed is much slower, I have a 2 Meg DSL connection also and using this the VPN works fine.

Is there a specific setting that needs to be configured for the satelite broadband modem

PogMoThoin

Don't be mistaken, what you got is not broadband and not at all suitable for a decent vpn. Vpn's require a high-bandwidth, low-latency network on both sides to function well. Satellite has very high latencies due to the long distance the signal must travel. It will barely work, as you can see.

adne

PogMoThoin wrote: »

Don't be mistaken, what you got is not broadband and not at all suitable for a decent vpn. Vpn's require a high-bandwidth, low-latency network on both sides to function well. Satellite has very high latencies due to the long distance the signal must travel. It will barely work, as you can see.

That does not fully explain the speed differences, to go from getting a constant 10 M down to getting .6 M Down via the VPN cannot be fully explained by this reasoning.

brianwalshcork

Op, what response time do you get when you ping a server on your network over the VPN?

adne

brianwalshcork wrote: »

Op, what response time do you get when you ping a server on your network over the VPN?

Not connected at the moment, will try this tomorrow and let u know

PogMoThoin

adne wrote: »

That does not fully explain the speed differences, to go from getting a constant 10 M down to getting .6 M Down via the VPN cannot be fully explained by this reasoning.

Do a speedtest on an Australian server with your DSL connection and you might realise the answer.

rolion

PogMoThoin wrote: »

Don't be mistaken, what you got is not broadband and not at all suitable for a decent vpn. Vpn's require a high-bandwidth, low-latency network on both sides to function well. Satellite has very high latencies due to the long distance the signal must travel. It will barely work, as you can see.

Sat b/band is not suitable for VPN.
I am surprised to see that is even working for you !

Some time ago,it said that due to latency (2-3 seconds) and the encryption used by the modem-satelitte-NOC,VPN is not allowed/not able to use it.

Same applies for VoIP.

Call onwave and check with them...

As a short term solution...decrease your encryption level to a "softer" one and try using Logmein ,Web access for email or some form of secure Remote Desktop connection!

Also,check your VPN client and make sure you have shared gateway / tunnels AND not all internet traffic must go through your office !!! I've seen settings where due to security policy,all internet traffic was routed from Dublin,via London,to all web sites.

Good luck...

adne

brianwalshcork wrote: »

Op, what response time do you get when you ping a server on your network over the VPN?

I get the following responses


Reply from xxxxxxx: bytes=32 time=792ms TTL=121
Reply from xxxxxxx: bytes=32 time=792ms TTL=121
Reply from xxxxxxx: bytes=32 time=792ms TTL=121
Reply from xxxxxxx: bytes=32 time=872ms TTL=121

PogMoThoin

No satellite provider supports vpn.

Here's your answer:

In all current-generation satellite data networks IP acceleration (IP spoofing) compensates for the space-link transit time. Spoofing is accomplished by special equipment at the carrier’s main satellite hub site. This equipment masquerades itself so as to appear as if it were the remote location, while acting as a relay or forwarder for data packets going to and from the remote satellite location. When the spoofing equipment receives Internet traffic destined for a remote satellite location, it acknowledges receipt of the packet so more data packets will follow immediately. In this manner, the latency is “hidden” because the acknowledgments are returned rapidly. As a result, TCP moves out of slow-start mode quickly and builds to the highest possible speed.
The acceleration equipment watches for real acknowledgements coming back from the remote site and suppresses them. If the acknowledgement is not received from the remote site, the system automatically re-sends the packet from its buffer. Thus, satellite-connected sites communicate seamlessly with servers on the terrestrial Internet.
In a VPN-over-satellite session, the packets are encrypted and, therefore, can only be acknowledged by the VPN client software at the remote site – not by the spoofing equipment. Spoofing is bypassed. Consequently, acknowledgments are delayed and the slow-start data rate remains in place during the entire session. This results in substantial performance degradation. VPN over satellite may be approximately as fast dial-up, but is not the robust multi-user broadband experienced when web browsing or using email over the same satellite link.

http://www.skycasters.com/broadband-satellite-vpn/

bealtine

PogMoThoin wrote: »

No satellite provider supports vpn.

Here's your answer:



http://www.skycasters.com/broadband-satellite-vpn/

I hope the OP didn't give up his 2mb DSL line for satellite crap?