asked on

VPN Bottleneck.

We have two sites (in UK)which connects backs to site1(Australia),
The folks over in UK are often complaining about the speed of connecting back to site1 over the VPN. Ive had a colleage run a couple of tests from the office there as well as at a different location (in UK) in an attempt to see if we can spot any potential bottlenecks that may be unplugged. The results that i have pasted shows those results. Within a certain range most results like similar. The one exception that I do note, and one that I suspect may be a cause of the problem, is the upload speed from The site2. It seems that its almost 3 times slower that in site3.
Can you please have a think about these results and any options on both further isolating where the VPN bottlenecks may be and how we may improve things? Be aware that a dedicated internet line into The site2 has been quoted in the order of 500-750 pounds per month. Too rich for our blood!

Results for Site 2 (in UK).

1. Ping to site1 = 390ms

2. Oz Broadband Speed Test - Upload Test
(www.ozspeedtest.com)"      "You uploaded 1 MB bytes in 31.29 seconds.

kbps: 268.33
KB/s: 33.54
Mbps: 0.27"

3. tracert site1      "C:\Documents and Settings\user>tracert site1

Tracing route to site1.
over a maximum of 30 hops:

1 392 ms 390 ms 391 ms 10.222.0.1
2 392 ms 391 ms 392 ms 192.168.30.254
3 389 ms 391 ms 391 ms site1

Trace complete."

"4. Bigpond Broadband Speed Test
(http://users.bigpond.net.au/speedtest/)"      Download Speed - 394kbps/ Upload Speed 50.4 kbps

Not Connected through VPN      Average
"2. Oz Broadband Speed Test - Upload Test
(www.ozspeedtest.com)"      "You uploaded 1 MB bytes in 25.15 seconds.

kbps: 333.85
KB/s: 41.73
Mbps: 0.33"
"3. Bigpond Broadband Speed Test
(http://users.bigpond.net.au/speedtest/)"      Download Speed - 287kbps/ Upload Speed 627kbps

Results for Site3 (in UK);

1. Ping to site1=357ms

"2. Oz Broadband Speed Test - Upload Test
(www.ozspeedtest.com)"      "You uploaded 1 MB bytes in 29.83 seconds.

kbps: 281.5
KB/s: 35.19
Mbps: 0.28"

3. tracert site1      "C:\Documents and Settings\user>tracert site1

Tracing route to site1
over a maximum of 30 hops:

1 385 ms 358 ms 368 ms 10.222.0.1
2 352 ms 353 ms 355 ms 192.168.30.254
3 355 ms 356 ms 357 ms site1

Trace complete."

"4. Bigpond Broadband Speed Test
(http://users.bigpond.net.au/speedtest/)"      Download Speed - 466kbps/ Upload Speed 138 kbps

Not Connected through VPN      Average
"2. Oz Broadband Speed Test - Upload Test
(www.ozspeedtest.com)"      "You uploaded 1 MB bytes in 23.37 seconds.

kbps: 359.34
KB/s: 44.92
Mbps: 0.36"
"3. Bigpond Broadband Speed Test
(http://users.bigpond.net.au/speedtest/)"      Download Speed - 1.40mbps/ Upload Speed 360 kbps

usmansultan

ASKER

ISP claimed speeds at both locations are identical and are standard ADSL2+. Actual measured speeds are as per results that i pasted. This is where I note the discrepancy with upload speeds.
and the medium that VPN uses to connect is mostly RDP with a TCP/IP connection to a mainframe machine.

debuggerau

actual speed will depend on the current use of the link, if they are clean (no use) then it appears to be a poor connection for adsl2, I'd check with the ISP..

Else, you'd better stop those torrents...

usmansultan

ASKER

I dont think anyone uses the Torrents at these sites (i.e. site2,site3), and the links are clean,
I have checked with the ISP and they are saying that its fine from there end.

debuggerau

from my adsl1 site in melb:
["Speed Results"]
Download: 120 Kilobytes/s
Upload: 34.2 Kilobytes/s
QOS: 15%
RTT: 41 ms
MaxPause: 287 ms
Test location: Sydney

Which calculates out at 120KB/s = 960kb/s

So you can see why I think the ISP speed is the issue...
P.S. My link has 4 vpn clients/ 5 voice calls and 3 browsers currently using it (active at time of test).

usmansultan

ASKER

I am bit confused about the Speed, because on both the sites there are two ratios for Up and downlink speed, its normally one speed for uplink /downlink.

Anyways whenever anyone connects to the site1 network, the VPN chooses the slowest uplink in its routing table, and thats why users feel the pain.

As from the spreadsheet for site2 uplink speed its about 50Kbps (I guess) which is the bottleneck speed. I think if i get two people at the same time to open a big file from the
site1 Network they will feel the effects.
Thats what i am trying to sort out, how to eliminate the Hops between the sites.....
and why its slow...

debuggerau

should be only one ratio: download speed:upload speed.

So you have configured least cost routing on the router ey?
Or do you have any bandwidth restrictions maybe?

50kps seems like an old modem speed, hardly broadband!!
Are you sure its not 50KB/s this is about what is standard for bigpond cable upload (256Kb/s actually), as its not meant to house servers, you would need a business account with unrestricted upload speed.

from bigpond:
"* Once you have reached your usage allowance, the speed of your service will slow to 64kps. No additional usage charges apply to BigPond Liberty plans.
## Speeds up to 30Mbps/1000kbps are available in selected areas of Melbourne and Sydney when downloading from capable sites or across multiple sites. Other areas have speeds up to 17Mbps/256kbps."

usmansultan

ASKER

I havent configured any of the sites, and no history of who did it, and how they did it.
We dont have any bandwidth restrictions (not what i am aware of)
Both of the sites are in UK, not in Australia, and these sites are facing a low connectivity issue, when ever they try to connect to the site in Australia.
I am trying to find out the cause of slow network connection between the sites in Australia and UK.

debuggerau

The only way to check each ISP is to use a local test point for bandwidth testing, not stretching it internationally..

If your testing the international speed, it should vary from provider to provider, we use business grade, but for others, the quality just isnt there..

Is it a bigpond advance connection in Australia your trying to connect to from the UK? Or another provider?

Some ISP's have upload restrictions, and they are rarely utilized compared with downloads...

If you provide the providers and plans, I could look further into it..

usmansultan

ASKER

The connection that they are using in UK is;
http://www.demon.net/demon/products/internetaccess/businessbroadband/business8000
Let me know if you need any more info.
Thanks.

debuggerau

yes, I would need more info like the connection here for starters..

But there is something of interest from your link:
* Refers to maximum downstream line speeds only. The actual speed you experience will be subject to certain conditions and depends on a number of factors, including your distance from the telephone exchange and the quality of the wiring in between.

I think this could be your problem...

usmansultan

ASKER

I am not sure if that would be the problem or not, because i have ask from the people who did the testing from UK and they told me that the exchange was in Crondall which is less than a mile from the office and they using ADSL, as the exchange is not enabled for ADSL2 or SDSL...
I am attaching the speed test results from Australia to UK.....

BNE01-061WS.speed.xls

debuggerau

why the different speeds now from the original rates above?

It appears to be much better results in the spreadsheet that what is listed above..

I suspect the delays you talk of with the VPN may be related either to your contention ratios or the Australian providers speeds, can you run a test for that site?

usmansultan

ASKER

The spreadsheet that i have pasted now show the connection speed from Australia to UK.
The speedtest that i have pasted above (in the start of the question) shows the speed from UK to Australia.

ASKER CERTIFIED SOLUTION

debuggerau

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

usmansultan

ASKER

I have some test results which are run from UK to UK....

C:\Users\User>ping qaserver
Pinging qaserver [134.183.135.50] with 32 bytes of data:
Reply from 134.183.135.50: bytes=32 time=47ms TTL=128
Reply from 134.183.135.50: bytes=32 time=66ms TTL=128
Reply from 134.183.135.50: bytes=32 time=57ms TTL=128
Reply from 134.183.135.50: bytes=32 time=33ms TTL=128
Ping statistics for 134.183.135.50:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 33ms, Maximum = 66ms, Average = 50ms

C:\Users\User>ping -n 30 qaserver
Pinging qaserver [134.183.135.50] with 32 bytes of data:
Reply from 134.183.135.50: bytes=32 time=37ms TTL=128
Reply from 134.183.135.50: bytes=32 time=35ms TTL=128
Reply from 134.183.135.50: bytes=32 time=54ms TTL=128
Reply from 134.183.135.50: bytes=32 time=37ms TTL=128
Reply from 134.183.135.50: bytes=32 time=35ms TTL=128
Reply from 134.183.135.50: bytes=32 time=35ms TTL=128
Reply from 134.183.135.50: bytes=32 time=36ms TTL=128
Reply from 134.183.135.50: bytes=32 time=49ms TTL=128
Reply from 134.183.135.50: bytes=32 time=44ms TTL=128
Reply from 134.183.135.50: bytes=32 time=33ms TTL=128
Reply from 134.183.135.50: bytes=32 time=35ms TTL=128
Reply from 134.183.135.50: bytes=32 time=59ms TTL=128
Reply from 134.183.135.50: bytes=32 time=34ms TTL=128
Reply from 134.183.135.50: bytes=32 time=38ms TTL=128
Reply from 134.183.135.50: bytes=32 time=35ms TTL=128
Reply from 134.183.135.50: bytes=32 time=78ms TTL=128
Reply from 134.183.135.50: bytes=32 time=39ms TTL=128
Reply from 134.183.135.50: bytes=32 time=57ms TTL=128
Reply from 134.183.135.50: bytes=32 time=65ms TTL=128
Reply from 134.183.135.50: bytes=32 time=44ms TTL=128
Reply from 134.183.135.50: bytes=32 time=35ms TTL=128
Reply from 134.183.135.50: bytes=32 time=47ms TTL=128
Reply from 134.183.135.50: bytes=32 time=56ms TTL=128
Reply from 134.183.135.50: bytes=32 time=39ms TTL=128
Reply from 134.183.135.50: bytes=32 time=44ms TTL=128
Reply from 134.183.135.50: bytes=32 time=34ms TTL=128
Reply from 134.183.135.50: bytes=32 time=48ms TTL=128
Reply from 134.183.135.50: bytes=32 time=37ms TTL=128
Reply from 134.183.135.50: bytes=32 time=46ms TTL=128
Reply from 134.183.135.50: bytes=32 time=35ms TTL=128
Ping statistics for 134.183.135.50:
Packets: Sent = 30, Received = 30, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 33ms, Maximum = 78ms, Average = 43ms

C:\Users\User>tracert qaserver
Tracing route to qaserver [134.183.135.50]
over a maximum of 30 hops:
1 36 ms 47 ms 35 ms QASERVER [134.183.135.50]
Trace complete.
C:\Users\User>tracert 80.176.133.34
Tracing route to respsys1-adsl.demon.co.uk [80.176.133.34]
over a maximum of 30 hops:
1 1 ms 1 ms 1 ms 192.168.0.1
2 8 ms 9 ms 8 ms 10.129.140.1
3 11 ms 9 ms 18 ms glfd-t2cam1-b-v104.network.virginmedia.net [80.4.30.145]
4 29 ms 8 ms 23 ms glfd-t3core-1b-ge-011-0.network.virginmedia.net [195.182.175.253]
5 47 ms 9 ms 11 ms gfd-bb-b-ge-220-0.network.virginmedia.net [213.105.175.89]
6 9 ms 9 ms 31 ms gfd-bb-a-ae0-0.network.virginmedia.net [213.105.172.5]
7 12 ms 14 ms 28 ms nth-bb-b-so-230-0.network.virginmedia.net [213.105.175.138]
8 14 ms 15 ms 15 ms tele-ic-1-as0-0.network.virginmedia.net [62.253.184.2]
9 18 ms 15 ms 15 ms ldn-b4-link.telia.net [213.248.70.29]
10 114 ms 51 ms 38 ms thus-106917-ldn-b4.c.telia.net [213.248.100.162]
11 23 ms 14 ms 19 ms anchor-inside-4-g6-0-5.router.demon.net [193.195.25.69]
12 22 ms 14 ms 13 ms anchor-access-4-g1-2.router.demon.net [194.159.161.85]
13 23 ms 16 ms 15 ms anchor-hg-4-g8-0-0-s156.router.demon.net [194.159.161.197]
14 * * * Request timed out.
15 * * * Request timed out.
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.
19 * * * Request timed out.
20 * * * Request timed out.
21 * * * Request timed out.
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.
Trace complete.

Let me know what you think....

debuggerau

I can only see ICMP latency readings and some trace route hops, but not exactly helpful..

Are you having fun yet?