Solved

VPN Bottleneck.

Posted on 2008-10-01
16
750 Views
Last Modified: 2013-12-14
We have two sites (in UK)which connects backs to site1(Australia),  
The folks over in UK are often complaining about the speed of connecting back to site1 over the VPN. Ive had a colleage run a couple of tests from the office there as well as at a different location (in UK) in an attempt to see if we can spot any potential bottlenecks that may be unplugged. The results that i have pasted shows those results. Within a certain range most results like similar. The one exception that I do note, and one that I suspect may be a cause of the problem, is the upload speed from The site2. It seems that its almost 3 times slower that in site3.
Can you please have a think about these results and any options on both further isolating where the VPN bottlenecks may be and how we may improve things? Be aware that a dedicated internet line into The site2 has been quoted in the order of 500-750 pounds per month. Too rich for our blood!


Results for Site 2 (in UK).

1. Ping to site1 = 390ms
      
2. Oz Broadband Speed Test - Upload Test
(www.ozspeedtest.com)"      "You uploaded 1 MB bytes in 31.29 seconds.

kbps: 268.33
KB/s: 33.54
Mbps: 0.27"
      
3. tracert site1      "C:\Documents and Settings\user>tracert site1

Tracing route to site1.
over a maximum of 30 hops:

  1   392 ms   390 ms   391 ms  10.222.0.1
  2   392 ms   391 ms   392 ms  192.168.30.254
  3   389 ms   391 ms   391 ms  site1

Trace complete."
      
"4. Bigpond Broadband Speed Test
(http://users.bigpond.net.au/speedtest/)"      Download Speed - 394kbps/ Upload Speed 50.4 kbps
      
Not Connected through VPN      Average
"2. Oz Broadband Speed Test - Upload Test
(www.ozspeedtest.com)"      "You uploaded 1 MB bytes in 25.15 seconds.

kbps: 333.85
KB/s: 41.73
Mbps: 0.33"
"3. Bigpond Broadband Speed Test
(http://users.bigpond.net.au/speedtest/)"      Download Speed - 287kbps/ Upload Speed 627kbps



Results for Site3 (in UK);

1. Ping to site1=357ms
      
"2. Oz Broadband Speed Test - Upload Test
(www.ozspeedtest.com)"      "You uploaded 1 MB bytes in 29.83 seconds.

kbps: 281.5
KB/s: 35.19
Mbps: 0.28"
      
3. tracert site1      "C:\Documents and Settings\user>tracert site1

Tracing route to site1
over a maximum of 30 hops:

  1   385 ms   358 ms   368 ms  10.222.0.1
  2   352 ms   353 ms   355 ms  192.168.30.254
  3   355 ms   356 ms   357 ms  site1

Trace complete."
      
"4. Bigpond Broadband Speed Test
(http://users.bigpond.net.au/speedtest/)"      Download Speed - 466kbps/ Upload Speed 138 kbps
      
Not Connected through VPN      Average
"2. Oz Broadband Speed Test - Upload Test
(www.ozspeedtest.com)"      "You uploaded 1 MB bytes in 23.37 seconds.

kbps: 359.34
KB/s: 44.92
Mbps: 0.36"
"3. Bigpond Broadband Speed Test
(http://users.bigpond.net.au/speedtest/)"      Download Speed - 1.40mbps/ Upload Speed 360 kbps
0
Comment
Question by:usmansultan
  • 8
  • 8
16 Comments
 
LVL 1

Author Comment

by:usmansultan
ID: 22621807
ISP claimed speeds at both locations are identical and are standard ADSL2+. Actual measured speeds are as per results that i pasted. This is where I note the discrepancy with upload speeds.
and the medium that VPN uses to connect is mostly RDP with a TCP/IP connection to a mainframe machine.
0
 
LVL 23

Expert Comment

by:debuggerau
ID: 22621840
actual speed will depend on the current use of the link, if they are clean (no use) then it appears to be a poor connection for adsl2, I'd check with the ISP..

Else, you'd better stop those torrents...
0
 
LVL 1

Author Comment

by:usmansultan
ID: 22630221
I dont think anyone uses the Torrents at these sites (i.e. site2,site3), and the links are clean,
I have checked with the ISP and they are saying that its fine from there end.
0
 
LVL 23

Expert Comment

by:debuggerau
ID: 22630595
from my adsl1 site in melb:
["Speed Results"]
Download: 120 Kilobytes/s
Upload: 34.2 Kilobytes/s
QOS: 15%
RTT: 41 ms
MaxPause: 287 ms
Test location: Sydney

Which calculates out at 120KB/s = 960kb/s

So you can see why I think the ISP speed is the issue...
P.S. My link has 4 vpn clients/ 5 voice calls and 3 browsers currently using it (active at time of test).

0
 
LVL 1

Author Comment

by:usmansultan
ID: 22630998

I am bit confused about the Speed, because on both the sites there are two ratios for Up and downlink speed, its normally one speed for uplink /downlink.
 
Anyways whenever anyone connects to the site1 network, the VPN chooses the slowest uplink in its routing table, and thats why users feel the pain.
 
As from the spreadsheet for site2 uplink speed its about 50Kbps (I guess) which is the bottleneck speed. I think if i get two people at the same time to open a big file from the
 site1 Network they will feel the effects.
Thats what i am trying to sort out, how to eliminate the Hops between the sites.....
and why its slow...  
0
 
LVL 23

Expert Comment

by:debuggerau
ID: 22674432
should be only one ratio:     download speed:upload speed.

So you have configured least cost routing on the router ey?
Or do you have any bandwidth restrictions maybe?

50kps seems like an old modem speed, hardly broadband!!
Are you sure its not 50KB/s this is about what is standard for bigpond cable upload (256Kb/s actually), as its not meant to house servers, you would need a business account with unrestricted upload speed.

from bigpond:
"* Once you have reached your usage allowance, the speed of your service will slow to 64kps. No additional usage charges apply to BigPond Liberty plans.
## Speeds up to 30Mbps/1000kbps are available in selected areas of Melbourne and Sydney when downloading from capable sites or across multiple sites. Other areas have speeds up to 17Mbps/256kbps."
0
 
LVL 1

Author Comment

by:usmansultan
ID: 22700301
I havent configured any of the sites, and no history of who did it, and how they did it.
We dont have any bandwidth restrictions (not what i am aware of)
Both of the sites are in UK, not in Australia, and these sites are facing a low connectivity issue, when ever they try to connect to the site in Australia.
I am trying to find out the cause of slow network connection between the sites in Australia and UK.
 
 
0
 
LVL 23

Expert Comment

by:debuggerau
ID: 22707515
The only way to check each ISP is to use a local test point for bandwidth testing, not stretching it internationally..

If your testing the international speed, it should vary from provider to provider, we use business grade, but for others, the quality just isnt there..

Is it a bigpond advance connection in Australia your trying to connect to from the UK? Or another provider?

Some ISP's have upload restrictions, and they are rarely utilized compared with downloads...

If you provide the providers and plans, I could look further into it..
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 1

Author Comment

by:usmansultan
ID: 22708001
The connection that they are using in UK is;
http://www.demon.net/demon/products/internetaccess/businessbroadband/business8000
Let me know if you need any more info.
Thanks.
0
 
LVL 23

Expert Comment

by:debuggerau
ID: 22708050
yes, I would need more info like the connection here for starters..

But there is something of interest from your link:
* Refers to maximum downstream line speeds only. The actual speed you experience will be subject to certain conditions and depends on a number of factors, including your distance from the telephone exchange and the quality of the wiring in between.

I think this could be your problem...

0
 
LVL 1

Author Comment

by:usmansultan
ID: 22708540
I am not sure if that would be the problem or not, because i have ask from the people who did the testing from UK and they told me that the exchange was in Crondall which is less than a mile from the office and they using ADSL, as the exchange is not enabled for ADSL2 or SDSL...
I am attaching the speed test results from Australia to UK.....

BNE01-061WS.speed.xls
0
 
LVL 23

Expert Comment

by:debuggerau
ID: 22708995
why the different speeds now from the original rates above?

It appears to be much better results in the spreadsheet that what is listed above..

I suspect the delays you talk of with the VPN may be related either to your contention ratios or the Australian providers speeds, can you run a test for that site?
0
 
LVL 1

Author Comment

by:usmansultan
ID: 22709193
The spreadsheet that i have pasted now show the connection speed from Australia to UK.
The speedtest that i have pasted above (in the start of the question) shows the speed from UK to Australia.
0
 
LVL 23

Accepted Solution

by:
debuggerau earned 500 total points
ID: 22716956
Sure, but how is it from your connection to this customers in Australia..
So, Australia to Australia, and UK to UK..

Then you should know what the best case senarios for each site is.
Any differences from that are basically internet delays and you may need a new provider to better those speeds..

The speed is still very different, I would think that doesn't matter which way your going,  50.4 kbps upload is going to be inadequate.

Since the new test indicates an 5 times increase, how can we explain the difference still?
0
 
LVL 1

Author Comment

by:usmansultan
ID: 22737073
I have some test results which are run from UK to UK....

C:\Users\User>ping qaserver
Pinging qaserver [134.183.135.50] with 32 bytes of data:
Reply from 134.183.135.50: bytes=32 time=47ms TTL=128
Reply from 134.183.135.50: bytes=32 time=66ms TTL=128
Reply from 134.183.135.50: bytes=32 time=57ms TTL=128
Reply from 134.183.135.50: bytes=32 time=33ms TTL=128
Ping statistics for 134.183.135.50:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 33ms, Maximum = 66ms, Average = 50ms

C:\Users\User>ping -n 30 qaserver
Pinging qaserver [134.183.135.50] with 32 bytes of data:
Reply from 134.183.135.50: bytes=32 time=37ms TTL=128
Reply from 134.183.135.50: bytes=32 time=35ms TTL=128
Reply from 134.183.135.50: bytes=32 time=54ms TTL=128
Reply from 134.183.135.50: bytes=32 time=37ms TTL=128
Reply from 134.183.135.50: bytes=32 time=35ms TTL=128
Reply from 134.183.135.50: bytes=32 time=35ms TTL=128
Reply from 134.183.135.50: bytes=32 time=36ms TTL=128
Reply from 134.183.135.50: bytes=32 time=49ms TTL=128
Reply from 134.183.135.50: bytes=32 time=44ms TTL=128
Reply from 134.183.135.50: bytes=32 time=33ms TTL=128
Reply from 134.183.135.50: bytes=32 time=35ms TTL=128
Reply from 134.183.135.50: bytes=32 time=59ms TTL=128
Reply from 134.183.135.50: bytes=32 time=34ms TTL=128
Reply from 134.183.135.50: bytes=32 time=38ms TTL=128
Reply from 134.183.135.50: bytes=32 time=35ms TTL=128
Reply from 134.183.135.50: bytes=32 time=78ms TTL=128
Reply from 134.183.135.50: bytes=32 time=39ms TTL=128
Reply from 134.183.135.50: bytes=32 time=57ms TTL=128
Reply from 134.183.135.50: bytes=32 time=65ms TTL=128
Reply from 134.183.135.50: bytes=32 time=44ms TTL=128
Reply from 134.183.135.50: bytes=32 time=35ms TTL=128
Reply from 134.183.135.50: bytes=32 time=47ms TTL=128
Reply from 134.183.135.50: bytes=32 time=56ms TTL=128
Reply from 134.183.135.50: bytes=32 time=39ms TTL=128
Reply from 134.183.135.50: bytes=32 time=44ms TTL=128
Reply from 134.183.135.50: bytes=32 time=34ms TTL=128
Reply from 134.183.135.50: bytes=32 time=48ms TTL=128
Reply from 134.183.135.50: bytes=32 time=37ms TTL=128
Reply from 134.183.135.50: bytes=32 time=46ms TTL=128
Reply from 134.183.135.50: bytes=32 time=35ms TTL=128
Ping statistics for 134.183.135.50:
    Packets: Sent = 30, Received = 30, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 33ms, Maximum = 78ms, Average = 43ms
 
 

C:\Users\User>tracert qaserver
Tracing route to qaserver [134.183.135.50]
over a maximum of 30 hops:
  1    36 ms    47 ms    35 ms  QASERVER [134.183.135.50]
Trace complete.
C:\Users\User>tracert 80.176.133.34
Tracing route to respsys1-adsl.demon.co.uk [80.176.133.34]
over a maximum of 30 hops:
  1     1 ms     1 ms     1 ms  192.168.0.1
  2     8 ms     9 ms     8 ms  10.129.140.1
  3    11 ms     9 ms    18 ms  glfd-t2cam1-b-v104.network.virginmedia.net [80.4.30.145]
  4    29 ms     8 ms    23 ms  glfd-t3core-1b-ge-011-0.network.virginmedia.net [195.182.175.253]
  5    47 ms     9 ms    11 ms  gfd-bb-b-ge-220-0.network.virginmedia.net [213.105.175.89]
  6     9 ms     9 ms    31 ms  gfd-bb-a-ae0-0.network.virginmedia.net [213.105.172.5]
  7    12 ms    14 ms    28 ms  nth-bb-b-so-230-0.network.virginmedia.net [213.105.175.138]
  8    14 ms    15 ms    15 ms  tele-ic-1-as0-0.network.virginmedia.net [62.253.184.2]
  9    18 ms    15 ms    15 ms  ldn-b4-link.telia.net [213.248.70.29]
 10   114 ms    51 ms    38 ms  thus-106917-ldn-b4.c.telia.net [213.248.100.162]
 11    23 ms    14 ms    19 ms  anchor-inside-4-g6-0-5.router.demon.net [193.195.25.69]
 12    22 ms    14 ms    13 ms  anchor-access-4-g1-2.router.demon.net [194.159.161.85]
 13    23 ms    16 ms    15 ms  anchor-hg-4-g8-0-0-s156.router.demon.net [194.159.161.197]
 14     *        *        *     Request timed out.
 15     *        *        *     Request timed out.
 16     *        *        *     Request timed out.
 17     *        *        *     Request timed out.
 18     *        *        *     Request timed out.
 19     *        *        *     Request timed out.
 20     *        *        *     Request timed out.
 21     *        *        *     Request timed out.
 22     *        *        *     Request timed out.
 23     *        *        *     Request timed out.
 24     *        *        *     Request timed out.
 25     *        *        *     Request timed out.
 26     *        *        *     Request timed out.
 27     *        *        *     Request timed out.
 28     *        *        *     Request timed out.
 29     *        *        *     Request timed out.
 30     *        *        *     Request timed out.
Trace complete.
 
 
Let me know what you think....
0
 
LVL 23

Expert Comment

by:debuggerau
ID: 22754192
I can only see ICMP latency readings and some trace route hops, but not exactly helpful..

Are you having fun yet?


0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Suggested Solutions

Secure VPN Connection terminated locally by the Client.  Reason 442: Failed to enable Virtual Adapter. If you receive this error on Windows 8 or Windows 8.1 while trying to connect with the Cisco VPN Client then the solution is a simple registry f…
I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now