mandrakeman wrote:
> I've a problem with VPN (ipsec):
>
> LAN "A" (IPSEC) -------(DSL connection)------- LAN "B" (IPSEC)
> LAN "A" (IPSEC) ---------(Satellite)---------- LAN "C" (IPSEC)
>
> connection A-B work fine.
> connection A-C telnet is too slow and there is a delay.
>
> pinging host B from A get me response within 80000 ms
> pinging host C from A get me response within 800000 ms.
>
> There is any optimization that I can apply to kernel ?
Probably not much as sat links are by nature high latency. You might
make interactive (eg., telnet) traffic more responsive by assigning it
a higher relative priority with a custom queueing scheme, but I doubt
it will make much difference unless you have peculiar traffic patterns.
The sat link the source of the problem.
For that matter, 80000 ms via dsl looks pretty bad -- 8 full seconds?
Or just illustrative numbers (I hope)?
hth,
prg
email above disabled
|