From owner-freebsd-questions Fri Jan 31 10: 1:18 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C816E37B401 for ; Fri, 31 Jan 2003 10:01:15 -0800 (PST) Received: from pa-plum1b-166.pit.adelphia.net (pa-plum1b-166.pit.adelphia.net [24.53.161.166]) by mx1.FreeBSD.org (Postfix) with ESMTP id D081643F79 for ; Fri, 31 Jan 2003 10:01:14 -0800 (PST) (envelope-from wmoran@potentialtech.com) Received: from potentialtech.com ([172.16.0.95]) by pa-plum1b-166.pit.adelphia.net (8.12.3/8.12.3) with ESMTP id h0VI2dT5001785; Fri, 31 Jan 2003 13:02:40 -0500 (EST) (envelope-from wmoran@potentialtech.com) Message-ID: <3E3AB994.7040106@potentialtech.com> Date: Fri, 31 Jan 2003 12:59:48 -0500 From: Bill Moran User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.1) Gecko/20021127 X-Accept-Language: en-us, en MIME-Version: 1.0 To: jdroflet@canada.com Cc: freebsd-questions@FreeBSD.ORG Subject: Re: PPtP Client to MPD to boxes behind NATD are very slow ?? References: <20030131092353.11107.h020.c009.wm@mail.canada.com.criticalpath.net> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG [could you wrap lines around 72 chars or so, please] jdroflet@canada.com wrote: > On Fri, 31 Jan 2003 09:00:07 -0800 (PST), Bill Moran wrote: > >>jdroflet@canada.com wrote: >> >>>After connecting via VPN I can get decent throughput from the MPD host but >> >> > very poor speed from anything past it. >> >>What do you mean by this? We use MPD off and on, and (honestly) it is just >>slow. I've got some tricks on how to speed it up, but it's slow no matter what. > > From other posts I knew MPD would be slow but what concerns me is that it is how > much slower it is beyond the mpd host itself, see test results below. I'm not sure I understand your test results. Are you saying PPTP client <--> MPD machine <---> "other host" ? If so, is "other host" on the Internet, or on your local network? We've seen that trying to route through the MPD machine to the internet is terribly slow, but haven't noticed any problems with routing to the local network. Did you check the box on the MS side to say "use gateway on remote network"? >>You don't state your hardware. Keep in mind that MPD is encryption and encryption >>is processor intensive. Faster CPU should give faster performance. > > Hardware: > CPU: Pentium 4 (1495.16-MHz 686-class CPU) > real memory = 1073180672 (1048028K bytes) > The box is dedicated to NAT and now trying MPD - it's a very bored box ;) The box at 5.6.7.8 is > a new install and has the same specs. > Network cards are public Intel Server fxp0 and onboard 3com xl0. > 5 mbs fibre to our ISP. I don't think that's an issue, then. >>>A separte public IP is redirected to a 4.7 RELEASE box on the inside. >>>Client(s) tested with have been Windows 2000 SP2 and SP3 from 2 different ADSL Lines. >>> >>>client-----1.2.3.4 MPD/NATD 172.16.105.80------172.16.105.66 / 5.6.7.8 Redirected from 1.2.3.4 >>> >>>Tests using Penguinet SCP and a 1.9 MB ZIP file. >>>Baseline Download the file from the public IP's >>>1.2.3.4 -> client 180 kBs >>>5.6.7.8 -> client 180 kBs >>> >>>Now test via the PPtP. >>>172.16.105.80 -> client 84 kBs >>>172.16.105.66 -> client 35 kBs I see now. We haven't tested this extensively. We've only seen it when routing into the VPN, just to go back out on the Internet (which seemed a silly thing to do). > Actually I used SCP on the second test so as not to skew things, in normal operations we won't > be. My concern is test to 172.16.105.66. What > would make it perform worse than to 172.16.105.80 ? In my mind they should be same, like the public IP tests. Apparently, something in MPD isn't working as efficiently as it should. > It also shows Transmit Errors=0 Receive Errors=xx <- increments at a slow rate when connected. Ok, now this is something. We need to find out the nature of the errors and fix it. I'm very interested in getting this working better for the same reason that you are. I'm going to set up a test network here and see what I can figure out. I'll keep in touch with you on my findings if you agree to do the same. -- Bill Moran Potential Technologies http://www.potentialtech.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message