slow access with China

slow access with China
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Networking Firewalls    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
slow access with China phil7269 04-29-2008
Posted by on April 29, 2008, 12:36 am
If you were  Registered and logged in, you could reply and use other advanced thread options
not sure if this is the right group to post in, so please let me know
if there is a more appropriate group.

We have our corp HQ in Los Angeles and an office in Shenzhen China.
Users in China are constantly complaining that their Citrix and VPN
connections to our office are extremely slow. I know from testing that
when they report slow connectivity I am able to access Citrix and VPN
at fast speeds, so I know the issue is not with our circuit or
hardware.

I have found from running traceroutes in LA and China that the
connection slows to a crawl when it gets to asia. I believe on the
china side once the route hits Hong Kong it slows down tremendously.

My question is if this is the expected performance for connectivity
between the US and China? I know that the chinese goverment filters
all traffic, is this the cause of the slow down? If anyone out there
has such connections between the US and China I would like to know if
you experience the same issues. If not, what kind of solution do you
have in place? I am planning on implementing a site to site VPN with a
cisco pix 515 in LA and a Cisco 5505 in China.

TIA

PT

Posted by mak on April 29, 2008, 1:58 am
If you were  Registered and logged in, you could reply and use other advanced thread options
phil7269@gmail.com wrote:

> I have found from running traceroutes in LA and China that the
> connection slows to a crawl when it gets to asia. I believe on the
> china side once the route hits Hong Kong it slows down tremendously.

if the traceroute slows down, I doubt there is any filtering going on.
icmp is not of interest for any filtering software (yes you could hide
alternative traffic in it, but that would be
overkill)- http,ftp,smtp are interesting for nosy governments.

i assume the answer is simple: they have a slow ISP connection at your site,
(56k analog modem?) check that out first.

then a site2site tunnel would not be of any help.
upgrade your connection.

(still, there could be a bottleneck somewhere before your site)

M


Posted by Alan Strassberg on April 29, 2008, 1:50 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
>We have our corp HQ in Los Angeles and an office in Shenzhen China.
>Users in China are constantly complaining that their Citrix and VPN
>connections to our office are extremely slow. I know from testing that
>when they report slow connectivity I am able to access Citrix and VPN
>at fast speeds, so I know the issue is not with our circuit or
>hardware.

        This could be anything from a desktop issue to misconfigured
        routers/switches/firewalls. What I would do is get a PC in
        China running VNC (or some other remote access software) and
        look at the problem from their perspective.

        But China is the other side of the world from L.A. and
        you may just be up against latency and bandwidth. We don't
        have enough info here. I would start by doing some benchmarks
        (iperf is good & free) and looking at all the interfaces of
        any equipment (duplex mismatch will cause poor performance).

>I have found from running traceroutes in LA and China that the
>connection slows to a crawl when it gets to asia. I believe on the
>china side once the route hits Hong Kong it slows down tremendously.

        Log in your routers and see if there are errors.
>
>My question is if this is the expected performance for connectivity
>between the US and China? I know that the chinese goverment filters

        200-250ms is typical latency. A site-to-site VPN won't fix
        this.

                                alan


Posted by Chilly8 on April 30, 2008, 6:17 am
If you were  Registered and logged in, you could reply and use other advanced thread options

X-No-Archive: Yes



> My question is if this is the expected performance for connectivity
> between the US and China? I know that the chinese goverment filters
> all traffic, is this the cause of the slow down? If anyone out there

I doubt it. If you are using a VPN network, The Chinese
government cannot analyse, crack, monitor, or sniff your
connection. Anything on VPN cannot be monitored by
the local auhorities, becuase it is encrypted.

I know from my exeperience of having gone to China
to broadcast the Winter Asian Games, back in 2007,
on my radio station. I used a VPN, so the local authorities
could not eavesdrop on the connection.



Posted by Burkhard Ott on April 30, 2008, 9:24 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Am Wed, 30 Apr 2008 03:17:11 -0700 schrieb Chilly8:


> I doubt it. If you are using a VPN network, The Chinese
> government cannot analyse, crack, monitor, or sniff your
> connection. Anything on VPN cannot be monitored by
> the local auhorities, becuase it is encrypted.

They can't read it does not mean they don't filter. Every filter slows
traffic down and if ther is enough traffic ....

cya

Similar ThreadsPosted
ZA causes very slow boot November 11, 2004, 5:43 am
internet speed browsing slow February 9, 2005, 4:33 am
Does IPS in sonicwall slow download speed down? February 16, 2005, 10:26 pm
Shared printer very slow with Windows Firewall March 11, 2005, 7:42 am
[ IPCOP ] slow smtp flow from GREEN to ORANGE April 7, 2005, 12:55 am
Think that China is reading here to. April 6, 2005, 1:35 pm
IPSEC tunnel in China April 12, 2005, 11:22 pm
VPN to China between Cisco Pix 515 and Netgear FVS318 March 8, 2005, 8:48 am
Incoming port accesses from China January 8, 2006, 4:34 pm
Trouble - Strange behaviour on VPN to China May 4, 2006, 10:29 am

The site map in XML format XML site map

Contact Us | Privacy Policy