Re: maximum performance for 100Mbit/s - how to optimize

Am Freitag, 25. Juni 2004 17:12 schrieb John Tracke:
> hi,
>
> thanks for input. I should have stated that this is basically a LAN-to-LAN
> tunnel over Internet; that would clarify many things.

Yes... then I would never had suggested: iproute2. It is a nice tool anyway 
(and for other things like: source routing, fw-mark based routing, etc...) 
but I never would suggest to use an unencrypted and unauthenticated method 
for a tunnel over an unsecure media like the internet.

You should definitly use something with encryption... you said that you don't 
have gigabit traffic on your link... on good servers (like yours) you should 
be able to tunnel to networks over openvpn without big performance issues.

Even if you don't get 100% speed all the time it should still be enough for 
normal webbrowsing, voip etc... But it's better to have a secure network then 
intruders, hijackers, sniffers or something like that in your network.

> So: solution could be 
> OpenVPN or IPRoute2 or some other tunnel through IP... but we need
> PERFORMANCE :)

I would suggest then that you try every solution and decide for yourself:

OpenVPN (with and without encryption)
iproute2 tunnel (I only tried ip-in-ip and ipv6-in-ip myself...)

>
> thank you,  John.
>
>
> ---------------------------------
> Do you Yahoo!?
> Yahoo! Mail - 50x more storage than other providers!


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com