Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 31 Jan 2003 12:59:48 -0500
From:      Bill Moran <wmoran@potentialtech.com>
To:        jdroflet@canada.com
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: PPtP Client to MPD to boxes behind NATD are very slow  ??
Message-ID:  <3E3AB994.7040106@potentialtech.com>
References:  <20030131092353.11107.h020.c009.wm@mail.canada.com.criticalpath.net>

next in thread | previous in thread | raw e-mail | index | archive | help
[could you wrap lines around 72 chars or so, please]

jdroflet@canada.com wrote:
> On Fri, 31 Jan 2003 09:00:07 -0800 (PST), Bill Moran wrote:
> 
>>jdroflet@canada.com wrote:
>>
>>>After connecting via VPN I can get decent throughput from the MPD host but
>>
>> > very poor speed from anything past it.
>>
>>What do you mean by this?  We use MPD off and on, and (honestly) it is just
>>slow.  I've got some tricks on how to speed it up, but it's slow no matter what.
> 
> From other posts I knew MPD would be slow but what concerns me is that it is how
 > much slower it is beyond the mpd host itself, see test results below.

I'm not sure I understand your test results.
Are you saying
PPTP client <--> MPD machine <---> "other host"
?
If so, is "other host" on the Internet, or on your
local network?
We've seen that trying to route through the MPD
machine to the internet is terribly slow, but
haven't noticed any problems with routing to the
local network.
Did you check the box on the MS side to say
"use gateway on remote network"?

>>You don't state your hardware.  Keep in mind that MPD is encryption and encryption
>>is processor intensive.  Faster CPU should give faster performance.
> 
> Hardware:
> CPU: Pentium 4 (1495.16-MHz 686-class CPU)
> real memory  = 1073180672 (1048028K bytes)
> The box is dedicated to NAT and now trying MPD - it's a very bored box ;) The box at 5.6.7.8 is
 > a new install and has the same specs.
> Network cards are public Intel Server fxp0 and onboard 3com xl0.
> 5 mbs fibre to our ISP.

I don't think that's an issue, then.

>>>A separte public IP is redirected to a 4.7 RELEASE box on the inside. 
>>>Client(s) tested with have been Windows 2000 SP2 and SP3 from 2 different ADSL Lines.
>>>
>>>client-----1.2.3.4 MPD/NATD 172.16.105.80------172.16.105.66 / 5.6.7.8 Redirected from 1.2.3.4 
>>>
>>>Tests using Penguinet SCP and a 1.9 MB ZIP file. 
>>>Baseline Download the file from the public IP's 
>>>1.2.3.4 -> client 180 kBs 
>>>5.6.7.8 -> client 180 kBs 
>>>
>>>Now test via the PPtP. 
>>>172.16.105.80 -> client 84 kBs 
>>>172.16.105.66 -> client 35 kBs

I see now.
We haven't tested this extensively.  We've only seen it when routing into the VPN, just to
go back out on the Internet (which seemed a silly thing to do).

> Actually I used SCP on the second test so as not to skew things, in normal operations we won't
 > be. My concern is test to 172.16.105.66. What
> would make it perform worse than to 172.16.105.80 ? In my mind they should be same, like the public IP tests.

Apparently, something in MPD isn't working as efficiently as it should.

> It also shows Transmit Errors=0 Receive Errors=xx <- increments at a slow rate when connected.

Ok, now this is something.  We need to find out the nature of the errors and
fix it.

I'm very interested in getting this working better for the same reason that
you are.  I'm going to set up a test network here and see what I can figure
out.  I'll keep in touch with you on my findings if you agree to do the
same.

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3E3AB994.7040106>