Re: [Openvpn-users] Access from Client on a high latency link very slow

2016-08-15 Thread Jason Haar
I'm in New Zealand and indeed can confirm VPN (basically any kind) works
just fine over high-latency links. The only real issue is *packet loss*. If
you are on a raw Internet link with (say) 1% packet loss, and mostly do
non-stateful stuff like web surfing, then your Internet experience is
"pleasant". However, if you run a VPN (any kind) over that 1% packet loss
link, it "feels like" 10% packet loss within the VPN - and at that point
from an end-user perspective is effectively *broken*. People complain, cat
and dogs live together in harmony, world ending catastrophe.

Packet loss is the enemy of VPNs - not distance

On Tue, Aug 16, 2016 at 12:33 AM, Eduardo Wirth  wrote:

> Hello
> I live and work in Uruguay.
> 300ms RTT Europe is expected as a normal delay.
> South America Europe traffic is normally done by Miami
> I agree with comments from Selva I have worked with satellite
> connections (more than 1000ms) ... always it depends on the type of data
> you want to transmit and its features (interactive or not)
> But correctmente 300ms can work in most scenarios.
>
> Eduardo
>
> Dante F. B. Colò wrote:
> > Hello everyone
> >
> > I have a issue with a client machine running openvpn 2.3.11 on Windows
> > 10 located in London , my server is located here in São Paulo, Brazil
> > and there is a high latency between the two endpoints , ping replies to
> > each other take around 280 ms, when i try to access some service on my
> > network almost everything take much time to respond, it's is pratically
> > unusable, i already tried somethings like enable LZO compression ,
> > change mtu on client and server tun interfaces , i still don't have much
> > experience with openvpn, is this normal ? Is there anything more that i
> > can do to improve performance ?
> >
> >
> > Regards
> > Dante F. B. Colò
> >
> > 
> --
> > What NetFlow Analyzer can do for you? Monitors network bandwidth and
> traffic
> > patterns at an interface-level. Reveals which users, apps, and protocols
> are
> > consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> > J-Flow, sFlow and other flows. Make informed decisions using capacity
> > planning reports. http://sdm.link/zohodev2dev
> > ___
> > Openvpn-users mailing list
> > Openvpn-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/openvpn-users
>
>
> 
> --
> What NetFlow Analyzer can do for you? Monitors network bandwidth and
> traffic
> patterns at an interface-level. Reveals which users, apps, and protocols
> are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning reports. http://sdm.link/zohodev2dev
> ___
> Openvpn-users mailing list
> Openvpn-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
>



-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
--
___
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users


Re: [Openvpn-users] [Q] may VPN and LAN coexist in the same /24 net?

2016-08-15 Thread Gert Doering
Hi,

On Mon, Aug 15, 2016 at 09:17:40PM +0300, Zeus Panchenko wrote:
> may /24 network be devided in half, so the first /25 to be used for VPN
> pool and the second /25 to be used for LAN?

Sure.  Basic subnetting, nothing particular about OpenVPN here.

gert
-- 
USENET is *not* the non-clickable part of WWW!
   //www.muc.de/~gert/
Gert Doering - Munich, Germany g...@greenie.muc.de
fax: +49-89-35655025g...@net.informatik.tu-muenchen.de


signature.asc
Description: PGP signature
--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. http://sdm.link/zohodev2dev___
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users


[Openvpn-users] [Q] may VPN and LAN coexist in the same /24 net?

2016-08-15 Thread Zeus Panchenko
greetings,

please advise

may /24 network be devided in half, so the first /25 to be used for VPN
pool and the second /25 to be used for LAN?

final aim is to advertise whole /24 net via OSPF to the uplink VPN servers


VPN /25 <--- +--> uplink VPN srvA
clients \| 
  VPN srv1 <--- OSPF +--> uplink VPN srvB
/| 
LAN /25 <--- +--> uplink VPN srvN

-- 
Zeus V. Panchenko   jid:z...@im.ibs.dn.ua
IT Dpt., I.B.S. LLC   GMT+2 (EET)

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. http://sdm.link/zohodev2dev
___
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users


Re: [Openvpn-users] Access from Client on a high latency link very slow

2016-08-15 Thread Eduardo Wirth
Hello
I live and work in Uruguay.
300ms RTT Europe is expected as a normal delay.
South America Europe traffic is normally done by Miami
I agree with comments from Selva I have worked with satellite 
connections (more than 1000ms) ... always it depends on the type of data 
you want to transmit and its features (interactive or not)
But correctmente 300ms can work in most scenarios.

Eduardo

Dante F. B. Colò wrote:
> Hello everyone
>
> I have a issue with a client machine running openvpn 2.3.11 on Windows
> 10 located in London , my server is located here in São Paulo, Brazil
> and there is a high latency between the two endpoints , ping replies to
> each other take around 280 ms, when i try to access some service on my
> network almost everything take much time to respond, it's is pratically
> unusable, i already tried somethings like enable LZO compression ,
> change mtu on client and server tun interfaces , i still don't have much
> experience with openvpn, is this normal ? Is there anything more that i
> can do to improve performance ?
>
>
> Regards
> Dante F. B. Colò
>
> --
> What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
> patterns at an interface-level. Reveals which users, apps, and protocols are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning reports. http://sdm.link/zohodev2dev
> ___
> Openvpn-users mailing list
> Openvpn-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openvpn-users


--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. http://sdm.link/zohodev2dev
___
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users