Ipsec: you want IPComp? Please add to the bounty, see last post
-
Hi guys,
Just to butt in, do IPSec or OpenVPN do TCP Acceleration aside from Compression?
like this one http://www.[anti seo]expan[anti seo]d.com/ , more likely a wan OPTIMIZATION this is a vast of users needing this, especially in Satellite field.
TCP acceleration is the most needed in sat link because of its latency and TCP Session limitation.
-
Just to butt in, do IPSec or OpenVPN do TCP Acceleration aside from Compression?
No. Nor is there anything open source that does so. Such boxes cost a gigantic pile of money because it costs vast sums to develop.
-
I agree, but there is one though under linux and not that mature also.. http://www.trafficsqueezer.org/Doc_TCP_Optimization.html which does almost the same, but without the Single TCP tunnel which does not solve the issue of TCP Session limits of most newest sat modems like (IPST[anti ceo]AR) aside from scpc and mcpc. but to that effect, it drives more bandwidth and lessen latency, since the roundtrip time is minimal and compressed data traffic and since it almost convert TCP traffic somewhat like UDP traffic.
And yes, its a ton of money needed, agree, agree.
-
Okay, but what about IPComp for ipsec? :P
-
I agree, but there is one though under linux and not that mature also.. http://www.trafficsqueezer.org/Doc_TCP_Optimization.html which does almost the same,
I should have clarified - nothing even remotely close to being production capable. There are at least a couple projects along those lines, none of which are anywhere near being usable.
@mxx:
Okay, but what about IPComp for ipsec? :P
It should work just by adding it to the config. Hack it in, try it out, and let us know how it works. It's not hard to add if it works, but we have no plans to do the leg work on that in the immediate future.
-
Okay I'll try :) and report back
-
I've managed to bring a tunnel with ipcomp/esp between two pfSense boxes but I doubt that compression actually works. I am sending 508 byte icmp packets and I see 564 byte ESP packets. And surprisingly I can't find good info about troubleshooting ipcomp in racoon. Any thoughts/hints?
-
Hi, yes I tried what Jimp suggested as good as I could ;) but then I had those problems and errors you can read in the aforementioned thread.
Edit: ohh this thread it is :D sorry a little bit confused over here.. thought to having replied to the corresponding thread in the bounty forum..
Maybe you could test with Shrewsoft VPN Client.. I suppose the software would tell you if ipcomp was actually in use or not..
-
To anyone else wanting that feature, please add to the bounty here: http://forum.pfsense.org/index.php/topic,31527.0.html also very little amounts make a difference ;)
-
bump just a reminder: Anyone who would like to have compression support for ipsec, please add to the bounty. Even if it's just 5 USD ;)
Thank you!
http://forum.pfsense.org/index.php/topic,31527.0.html