nanog mailing list archives

Re: Comcast Bussiness Class and GRE Tunnels


From: Matthew Palmer <mpalmer () hezmatt org>
Date: Wed, 27 Jul 2011 19:23:33 +1000

On Wed, Jul 27, 2011 at 12:17:16PM +0300, Denys Fedoryshchenko wrote:
I can recommend you to try to use openvpn, if you are "Mikrotik
only". At least it doesn't have fragmentation issues, as
IPIP/GRE/PPTP has, and also it will run smoothly over NAT/SPI. Cons,
that it is a bit more laggy, because it runs over TCP.

Au contraire, OpenVPN only runs over TCP if you explicitly tell it to;
default configuration, and widespread practice, is to run it over UDP.

- Matt



Current thread: