nanog mailing list archives

Re: VPN over satellite


From: PC <paul4004 () gmail com>
Date: Mon, 30 Apr 2012 20:58:55 -0600

Most satellite modems offer built in TCP acceleration options heavily
optimized for VSAT use and an encryption option (proprietary to their
hardware only) which is probably your best bet.  You can then use
traditional encryption to your satellite provider (or take Ethernet handoff
at the satellite earth station with co-located equipment, if appropriate).

Otherwise, if this is not adequate you can use any traditional acceleration
solution at the end sites, just check with the vendor for how optimized
they are for your latency scenario.

For various reasons, you're best not bonding.  Just obtain a bigger space
segment.  It's literally scalable to at least ~35 megabit with ease by
buying the appropriate sized pipe.  Otherwise if you must bond I suggest
you consider traditional ip routing mechanisms to do so on a per-flow basis.



On Mon, Apr 30, 2012 at 3:42 AM, Rens <rens () autempspourmoi be> wrote:

Dear,



Could anybody recommend any hardware that can build a VPN that works well
over satellite connections? (TCP enhancements)

I want to setup a L3 VPN between 2 satellite connections



Even additionally if that hardware would also support WAN bonding even
better because I also have a scenario to connect 2 times 2 satellites to
have more capacity for my L3 VPN



Regards,



Rens








Current thread: