LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 09-27-2009, 02:36 AM   #1
viktor_smk
LQ Newbie
 
Registered: Aug 2008
Posts: 4

Rep: Reputation: 0
PPTP traffic - how much?


Hi there,

Recently I notice that when I'm connected to an vpn server (pptpd) and I'm using it as a default gateway my download and upload speed decreases almost to the half of the usual speed. I made a test using iptables in order to count how much GRE packets are generated (except the real traffic itself) in that way:

Code:
iptables -I INPUT -p gre -j ACCEPT
iptables -I OUTPUT -p gre -j ACCEPT

iptables -I FORWARD -s 172.16.10.101 -j ACCEPT
iptables -I FORWARD -d 172.16.10.101 -j ACCEPT
The first 2 rules match all GRE packets between the pptpd server and client, and the next rules - the traffic between the server and the client.

When I turn the counters to zero and begin to generate traffic (to browse, to download etc.) I see that the GRE packets are even more than these in the FORWARD chain.

So, my question is first of all is my test correct and is it true that so much gre traffic is being generated during the browsing (it becames clear that the traffic is double than if the pptpd wasn't used as a gateway) and if yes - can that traffic be reduced?

Thanks a lot for the answer!

Kind regards,
Viktor

Last edited by viktor_smk; 09-27-2009 at 02:36 AM. Reason: notification type change
 
Old 10-01-2009, 06:34 PM   #2
lwoos
LQ Newbie
 
Registered: Jan 2008
Distribution: Slackware
Posts: 6

Rep: Reputation: 0
Is the PoPToP service running on the same box as the firewall?
 
Old 10-02-2009, 02:39 AM   #3
viktor_smk
LQ Newbie
 
Registered: Aug 2008
Posts: 4

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by lwoos View Post
Is the PoPToP service running on the same box as the firewall?
yes!
 
Old 10-06-2009, 08:25 PM   #4
lwoos
LQ Newbie
 
Registered: Jan 2008
Distribution: Slackware
Posts: 6

Rep: Reputation: 0
Sorry I am taking so long to get back.
I have had this same issue on slackware 10.1 (kernel 2.4.29). Though I did not find the time to diagnose the problem to its fullest, I did work around it by moving the PoPToP service to another box behing the firewall and add a port forwarding rule to the firewall startup script. In trouble shooting the issue as much as I did, I was working on the theory that there is some conflict in the netfilter and mppe portions of the kernel code (in that one runs just fine with out the other). Unfortunately, once the issue was worked around life and work came back into being the priority.

Last edited by lwoos; 10-06-2009 at 08:30 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Linux PPTP client fails to connect to Microsoft ISA PPTP server dCriminal Linux - Networking 1 10-27-2009 12:33 PM
Traffic shaping (limiting outgoing bandwidth of all TCP-traffic except FTP/HTTP) ffkodd Linux - Networking 3 10-25-2008 12:09 AM
PPTP/PPP Can't get further than pptp server fishy Linux - Networking 2 07-02-2007 11:20 AM
LXer: Linux Configure point to point tunneling PPTP VPN client for Microsoft PPTP vpn server LXer Syndicated Linux News 0 06-13-2007 08:46 AM
IPTABLES and PPTP Traffic pssst_yeah_you Linux - Security 2 07-27-2004 05:31 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 06:18 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration