Re: [Openvpn-users] Compression and MTU information and questions

[Jon Bendtsen <jon.bendtsen@xxxxxxxxxx>]

Den lørdag 4.feb kl. 7:47 skrev John A. Sullivan III:

> We've successfully launched our first OpenVPN + openswan solution into
> production tonight.  We've seen some interesting behavior on the wire
> tonight that I thought I would share with the list.
>
> We anticipated that we would have some difficulty with fragmentation.
> The OpenVPN fragment setting is 1400 and the openswan overridemtu
> setting was also 1400.  We started to see lots of requests for
> fragmentation so I set to work trying to find optimal MTU settings.

Why did you anticipate that you would have fragmentation problems?
and what did they result in? Did the tunnel behaive poorly, or not at
all?


[cuuuut]


> I am wondering if this is compression at work.  If so, that's quite an
> impressive reduction.  Of course, the ping packet is probably simply
> text but that's still impressive -- better than I thought it would be.
>
> Alas, it prevented me from finding the optimal match between physical
> interface and OpenVPN.  My testers have gone home and I'm too tire to
> start doing large transfers of images to test further.  If anyone has
> any better information or comments, please share them - John

Turn off compression? and then test with packet sizes/MTU.
Do you have --comp-lzo yes, or are you pushing that?

There is always	--mtu-test


JonB

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users