From owner-freebsd-questions@FreeBSD.ORG  Thu May  5 17:39:36 2011
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 42A73106564A
	for <freebsd-questions@freebsd.org>;
	Thu,  5 May 2011 17:39:36 +0000 (UTC) (envelope-from nvass@gmx.com)
Received: from mailout-eu.gmx.com (mailout-eu.gmx.com [213.165.64.42])
	by mx1.freebsd.org (Postfix) with SMTP id 85CFC8FC16
	for <freebsd-questions@freebsd.org>;
	Thu,  5 May 2011 17:39:35 +0000 (UTC)
Received: (qmail invoked by alias); 05 May 2011 17:39:33 -0000
Received: from adsl-40.91.140.94.tellas.gr (EHLO [192.168.73.194])
	[91.140.94.40]
	by mail.gmx.com (mp-eu001) with SMTP; 05 May 2011 19:39:33 +0200
X-Authenticated: #46156728
X-Provags-ID: V01U2FsdGVkX1/qUoNjeIrqBrX6x7uGSoWobgW5ZgrhJ+Wfo3XW7H
	j89CSGCRERm3nj
Message-ID: <4DC2E0CA.9020902@gmx.com>
Date: Thu, 05 May 2011 20:39:22 +0300
From: Nikos Vassiliadis <nvass@gmx.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US;
	rv:1.9.2.17) Gecko/20110414 Thunderbird/3.1.10
MIME-Version: 1.0
To: David Brodbeck <gull@gull.us>
References: <201105040519.56695.geoff@apro.com.au>	<BANLkTimCMBvCQqOE=8Xfd9_ZF-aQeWBGEA@mail.gmail.com>	<BANLkTi=BfGDvym1GyBmvooMn1dbhT4UcTA@mail.gmail.com>
	<BANLkTintKC1TgFmrjaFgSMtsd7DCcz1Fzg@mail.gmail.com>
In-Reply-To: <BANLkTintKC1TgFmrjaFgSMtsd7DCcz1Fzg@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Y-GMX-Trusted: 0
Cc: Kevin Wilcox <kevin.wilcox@gmail.com>,
	Free BSD Questions list <freebsd-questions@freebsd.org>, geoff@apro.com.au
Subject: Re: Can I bridge the same subnet across a VPN?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 05 May 2011 17:39:36 -0000

On 5/5/2011 12:24 AM, David Brodbeck wrote:
> The problem I've always found with bridged solutions is they don't
> cope well under heavy traffic loads when the VPN link is slower than
> the LANs they're bridging between.  And the VPN link is usually slower
> if it's over a WAN.  The link tends to get saturated.

There is no inbuilt reason why a L2 VPN is more easily saturated
than a L3 VPN.

After all protocols doing bulk transfers should - and mostly - use
TCP which autotunes the rate of sent packets. And TCP should be
able to saturate the lower-bandwidth link of the whole path. That's
normal and desirable.

Some care must be taken with the broadcast and multicast traffic
which goes through the L2 VPN.

Just my 2 cents, Nikos