<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="City"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=blue>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Depending on what you intend to use the
connectivity for, a simple vpn solution may not be nearly sufficient. What type
of applications are you going to be running across the link?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>We have two links to <st1:City w:st="on"><st1:place
w:st="on">Bangalore</st1:place></st1:City> from SJ. One is a VPN/Internet
connection that is currently running at about 300-330 ms latency, and a dedicated
MPLS line that is at about 265 ms. Latencies in this range will crush the
performance of any chatty protocol. Examples of things that will suck wind at
these latencies are NFS, CIFS, and most GUI’s that are not specifically
optimized for WAN connections. FTP transfers will be dramatically lengthened
with respect to what you would normally expect from a given bandwidth, unless
there is some tuning at the transport layer of things like the TCP transmit
window. Media MTU mismatches along the way can cripple your performance as
well, particularly if the ICMP “can’t fragment” packets that
would inform you of this problem are getting filtered at any step along the
way.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>If you are attempting to maximize your
development dollars by co-developing with offshore contractors, then skimping
on the connectivity is going to be penny-wise and pound-foolish. I would
absolutely recommend some type of WAN traffic accelerator in addition to whatever
VPN solution you pick. Riverbed does this well.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>If you are going to be sharing filesystems
across the WAN, it is going to be tough to beat (or to do without) a Wide Area
Filesystem (WAF) solution. Tacit makes a good product to do this for CIFS and
NFS. Disclaimer: Brocade (my employer) resells Tacit solutions.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>My advice would be to get yourself a WAN
simulator, like the network nightmare box (link below), set it up on your local
network, configure it to the performance characteristics of your WAN
connection, and then test how your applications perform. You may not like the
results at all.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><a href="http://www.networknightmare.com/">http://www.networknightmare.com/</a><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Good luck with your offshore connectivity
project. It is much more complicated than most people initially imagine, particularly
with regard to security and the sharing of software resources once you get
involved in co-development. We wound up having to install some fairly
significant infrastructure in <st1:City w:st="on"><st1:place w:st="on">Bangalore</st1:place></st1:City>
in order to produce an acceptable remote development environment.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>-jimk<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
owner-baylisa@baylisa.org [mailto:owner-baylisa@baylisa.org] <b><span
style='font-weight:bold'>On Behalf Of </span></b>Eyal Traitel<br>
<b><span style='font-weight:bold'>Sent:</span></b> Friday, February 24, 2006
10:06 AM<br>
<b><span style='font-weight:bold'>To:</span></b> baylisa@baylisa.org<br>
<b><span style='font-weight:bold'>Subject:</span></b> Need suggestions for
cheap VPN solution</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>Hi all !<br>
<br>
I need to introduce connectivity between 2 sites - <st1:City w:st="on"><st1:place
w:st="on">Sunnyvale</st1:place></st1:City> and Bangalore/India, and introduce
remote access.<br>
We'll need to be able to scale to 50 users.<br>
I was suggested to look at Nokia boxes - would something like IP40 be a good
combined solution? <br>
<br>
Any tips will be welcomed.<br>
<br>
Eyal Traitel<br>
Orchesys (<a href="http://www.orchesys.com">www.orchesys.com</a>)<o:p></o:p></span></font></p>
</div>
</body>
</html>