Agreed.  I have run IPsec over MPLS with no problem in China on several
carriers.  Internet connectivity also worked but performance was spotty
due to overloaded firewall or circuits in and out of the country.

Steven Naslund

-----Original Message-----
From: Tom Paseka [mailto:t...@cloudflare.com] 
Sent: Wednesday, December 05, 2012 1:27 PM
To: Christopher Morrow
Cc: nanog@nanog.org
Subject: Re: China Telecom VPN problems (again)

On Wed, Dec 5, 2012 at 11:25 AM, Christopher Morrow
<morrowc.li...@gmail.com
> wrote:

> On Wed, Dec 5, 2012 at 2:19 PM, Tom Paseka <t...@cloudflare.com> wrote:
> > Its quite easy to get MPLS-VPN connectivity into China (Pacnet, 
> > Singtel, CPCNet, etc, will offer), but at a price.
>
> mpls != ipsec ... perhaps the OP wants some privacy and authentication

> and such?


run IPSEC over the MPLS-VPN. It'll be a lot more stable than over public
internet.

Reply via email to