Re: ISP marking ipsec traffic based on certificate, how is this possible?

2015-12-18 Thread Tin, James
>From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Mark Zimmer >Sent: Thursday, December 17, 2015 4:29 AM >To: nanog@nanog.org >Subject: ISP marking ipsec traffic based on certificate, how is this possible? > > Hello list, > > I have a site-to-site ipsec vpn with stro

RE: ISP marking ipsec traffic based on certificate, how is this possible?

2015-12-17 Thread Nick Ellermann
rk Zimmer Sent: Thursday, December 17, 2015 4:29 AM To: nanog@nanog.org Subject: ISP marking ipsec traffic based on certificate, how is this possible? Hello list, I have a site-to-site ipsec vpn with strongswan. It was working well for 5-6 months then a day ago I have noticed something strang

ISP marking ipsec traffic based on certificate, how is this possible?

2015-12-17 Thread Mark Zimmer
Hello list, I have a site-to-site ipsec vpn with strongswan. It was working well for 5-6 months then a day ago I have noticed something strange, that from Site-A to Site-B (tunnel mode) only the upload bandwidth is capped down to 20-30kbit/s inside the VPN. I have tried various apps like f