[143066] in North American Network Operators' Group
Re: Comcast Bussiness Class and GRE Tunnels
daemon@ATHENA.MIT.EDU (Matthew Palmer)
Wed Jul 27 05:24:39 2011
Date: Wed, 27 Jul 2011 19:23:33 +1000
From: Matthew Palmer <mpalmer@hezmatt.org>
To: nanog@nanog.org
Mail-Followup-To: nanog@nanog.org
In-Reply-To: <7780129e5ef3d30f1421ca9bad638be0@visp.net.lb>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Wed, Jul 27, 2011 at 12:17:16PM +0300, Denys Fedoryshchenko wrote:
> I can recommend you to try to use openvpn, if you are "Mikrotik
> only". At least it doesn't have fragmentation issues, as
> IPIP/GRE/PPTP has, and also it will run smoothly over NAT/SPI. Cons,
> that it is a bit more laggy, because it runs over TCP.
Au contraire, OpenVPN only runs over TCP if you explicitly tell it to;
default configuration, and widespread practice, is to run it over UDP.
- Matt
