Solved

China - routing web/email traffic through Hong Kong bandwidth provider

Posted on 2012-03-12
12
551 Views
Last Modified: 2012-03-31
Hi, we have a small office in mainland china with about 20employees and the speed is awfully slow when connecting to us/european websites, even though our connection is a business "fiber dedicated" line.

We have a sonicwall nsa240 firewall/router.

Could I rent a dedicated 1 or 2mbit line from a hong kong bandwidth provider or a data center, so that my us/european web and email traffic goes through there?

What would this entail from a high level design perspective - renting the line from HK, setting up a vpn connection to them, and setting up rules in the sonicwall?

Please advise, thank you!
0
Comment
Question by:darkbluegr
  • 5
  • 4
  • 3
12 Comments
 
LVL 30

Expert Comment

by:IanTh
ID: 37709013
I dont know if that will help as hk is in china now and I expect their wan is too
0
 

Author Comment

by:darkbluegr
ID: 37709017
as far as I know hong kong traffic isn't getting filtered through the chinese dns firewall, and from my experience when I'm in Hong kong my internet access seems 10x better than when in China..
0
 
LVL 30

Expert Comment

by:IanTh
ID: 37709038
how far are you from hong kong installing fibre is not usually allowed across a border and I know no border really exists between china and hk and I bet the chinese authorities will not allow it if your business is in china as its avoiding their security system and using hk's
0
 

Author Comment

by:darkbluegr
ID: 37709058
about 50 miles (underwater)
0
 
LVL 57

Expert Comment

by:giltjr
ID: 37709206
What is the speed supposed to be on the fiber link?

Can you run speed test from http://www.speetest.net and post the results?

Choose a location close to you, then choose a location in the UK and one in the US.

Now, from HK to the US the latency is high and that can cause slow performance.
0
 

Author Comment

by:darkbluegr
ID: 37712130
it's supposed to be 4M but it's taking forever to load us-hosted websites..especially gmail. china-hosted websites open quickly.

is what I describe technically feasible without a new fiber circuit from the facility? ie. could I just connect to them over the internet and establish a VPN tunnel?

thanks.
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 
LVL 57

Expert Comment

by:giltjr
ID: 37712554
I would run the speed test and look at the ping RTT.

When you are far away from the server, latency kills performance.

A VPN will really not do anything.  You are still 125-175ms one way latency away from us (that is a ping RTT of 250-350 ms).
0
 

Author Comment

by:darkbluegr
ID: 37712579
Thanks for the feedback giltjr, I think that there won't be so many hops though if I vpn into a Hong Kong data center because of the geo proximity?

What would be an acceptable (Ballpark) figure for ping that would allow such a setup as im proposing. (so I can ask them to setup a test server IP that I can ping)
0
 
LVL 57

Expert Comment

by:giltjr
ID: 37712630
First, its not really the number of hops, its the distance.  

Example It's 8,098 miles (13,033 km) from Hong Kong to New York City.  Going through 3 hops or 15 hops, really won't matter that much.

Second, I am assuming when you say VPN, you mean an IP tunnel between two devices.  If that is what you mean, then it still the same number of hops.  It just they are hidden as the VPN tunnel makes it look like there is a single hop between the two end points of the tunnel, but the VPN packets are enclosed in normal IP packets traveling the same path as they always have.
0
 

Author Comment

by:darkbluegr
ID: 37712641
I found an older thread that seems promising:
http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_24956663.html

I will try to contact these companies and see if I can get quotes for this kind of connectivity.

In theory it seems possible, I assume they will have experience from past clients that they can share with me. Will keep updating the question with my findings.
0
 
LVL 57

Assisted Solution

by:giltjr
giltjr earned 250 total points
ID: 37712780
Well, yes, but it will not solve all your problems.

It will not affect the speed accessing web servers.

This will allow you to have some mailboxes on one Exchange Server and others on another one that is local to you.
0
 
LVL 30

Accepted Solution

by:
IanTh earned 250 total points
ID: 37714122
you do know intalling an underwater cable needs government approval in both countries and
like I said thats going to be your major problem and the cost will be very high imho like for instance is the strech of water a shipping lane or fishery its not simply laying a fibre underwater that needs approval from all the stake holders who control that strech of water
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Messaging apps are amazing tools with the power to do a lot of good, but the truth is the process of collaborating with coworkers requires relationships established through meaningful communication - the kind of communication that only happens face-…
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now