This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies. For details on cookie usage on our site, read our Privacy Policy
Hello all,
On my firewall I have a VPN tunnel dedicated to VEEAM backup copy to a remote site. I have a throughput problem which is only present with TCP flows.
I don't have any QOS set on the interface of this tunnel. The flow rule is standard just to make allow.
The MTU is 1438 and the adjust tcp mss option is set to 40 for IPv4. With UDP flows I have a throughput of 100Mb/s, with TCP flows I'm down to 10 - 15Mb/s.
How do I know what's restricting the throughput of my TCP flows so much? Thanks
... View more
Hello all, On my firewall I have a VPN tunnel dedicated to VEEAM backup copy to a remote site. I have a throughput problem which is only present with TCP flows. I don't have any QOS set on the interface of this tunnel. The flow rule is standard just to make allow. The MTU is 1438 and the adjust tcp mss option is set to 40 for IPv4. With UDP flows I have a throughput of 100M, with TCP flows I'm down to 10 - 15M. How do I know what's restricting the throughput of my TCP flows so much? Thanks
... View more
Hello, I need to capture what passes through a VPN site-to-site tunnel. I'd like to see the tunnel and not the ESP. With tcpdump you can use the command "tcpdump -i enc0" which decrypts the ESP. On Palo Alto, what is the equivalent command? Because with view-pcap follow yes filter-pcap <filename> I can only see the ESP. Thanks
... View more