I may be able to repeat your benchmarks, if you have something that shows the methodology, tools, parameters, etc. that were used. (The linked document does not have that level of detail.) -Adam
Adam Thompson Consultant, Infrastructure Services [MERLIN] 100 - 135 Innovation Drive Winnipeg, MB R3T 6A8 (204) 977-6824 or 1-800-430-6404 (MB only) https://www.merlin.mb.ca<https://www.merlin.mb.ca/> [cid:[email protected]]Chat with me on Teams<https://teams.microsoft.com/l/chat/0/[email protected]> From: Dave Taht <[email protected]> Sent: February 17, 2023 10:45 AM To: Adam Thompson <[email protected]> Cc: Daniel C. Eckert <[email protected]>; [email protected] Subject: Re: [Starlink] VPN woes, recommendations? On Fri, Feb 17, 2023 at 8:39 AM Adam Thompson via Starlink <[email protected]<mailto:[email protected]>> wrote: Sorry, forgot to answer the first part: yes, absent the tunnel, we get ~200/8 consistently, occasionally bursting higher. you really should test more deeply, and for longer periods than 15 seconds. I keep hoping someone with business class service will repeat these 2 year old benchmarks. https://docs.google.com/document/d/1puRjUVxJ6cCv-rgQ_zn-jWZU9ae0jZbFATLf4PQKblM/edit#heading=h.fwv7fw3aeaz -Adam Get Outlook for Android<https://aka.ms/AAb9ysg> ________________________________ From: Daniel C. Eckert <[email protected]<mailto:[email protected]>> Sent: Friday, February 17, 2023 10:36:24 AM To: Adam Thompson <[email protected]<mailto:[email protected]>> Cc: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> Subject: Re: [Starlink] VPN woes, recommendations? Interesting scenario. This reply only addresses a small part of your message: While I see you've done the math and checked the specs for the Aruba devices -- have you already conducted a few non-VPN tests between direct-wire-connected laptops/devices at those two locations to know what "baseline" bandwidth you're starting from when considering the max potential bandwidth for the encrypted traffic? For example, since you're on a business plan, you should have a direct public IP to target with iperf traffic from either end, even if not encrypted. Dan On Fri, Feb 17, 2023 at 11:30 AM Adam Thompson via Starlink <[email protected]<mailto:[email protected]>> wrote: Hi, all. We've been trying to develop a plug-and-play L2 VPN over Starlink, using Aruba Hospitality-series Remote APs like their RAP-505H. It's not going great, and I'm wondering about several Starlink-specific issues. First, having multiple devices in serial is generally not a great idea for reliability. Can we realistically plug our remote AP directly into the dish, still? (This is using Starlink Business, FWIW.). I know we lose access to the Starlink app, but we also lose a NATing router and an unwanted wifi AP, so that's probably a net zero. I just don't know what other dangers/problems that topology might cause. Secondly, we're only able to push about 30Mbps through the (magical Aruba-proprietary GRE+IPsec) tunnel. The bandwidth-delay equations suggest we should be seeing around 100Mbps, not 30. (The Aruba devices are rated for ~2Gbps encrypted at the site end, and ~7Gbps at the head end, so presumably that's not the bottleneck.) So: * does anyone have corroborating *or* contradicting evidence of VPN performance over Starlink's particular flavor of Long Fat Pipe, and * does anyone have any positive (or negative, I guess!) recommendations for cloud-managed VPN devices that can do at least 100M and magically work from behind double-NAT/CGNAT like we see with Starlink? Bonus points if it does L2 tunnels or can run a dynamic routing protocol. * Other comments or suggestions welcome, too. Thanks, -Adam Get Outlook for Android<https://streaklinks.com/BZdCYXLz80mmcz4jWATVEg7r/https%3A%2F%2Faka.ms%2FAAb9ysg> _______________________________________________ Starlink mailing list [email protected]<mailto:[email protected]> https://lists.bufferbloat.net/listinfo/starlink ᐧ ᐧ _______________________________________________ Starlink mailing list [email protected]<mailto:[email protected]> https://lists.bufferbloat.net/listinfo/starlink -- Surveillance Capitalism? Or DIY? Choose: https://blog.cerowrt.org/post/an_upgrade_in_place/ Dave Täht CEO, TekLibre, LLC
_______________________________________________ Starlink mailing list [email protected] https://lists.bufferbloat.net/listinfo/starlink
