[17532] in North American Network Operators' Group
Re: PPP over Ethernet?
daemon@ATHENA.MIT.EDU (Phillip Vandry)
Thu Jun 4 10:44:00 1998
Date: Thu, 4 Jun 1998 10:34:52 -0400 (EDT)
From: Phillip Vandry <vandry@Mlink.NET>
To: "Roeland M.J. Meyer" <rmeyer@mhsc.com>
cc: nanog@merit.edu
In-reply-to: Your message of "Thu, 04 Jun 1998 07:05:13 EDT."
<199806041405.HAA00659@condor.mhsc.com>
> Nah, They never heard of virtual circuits.
>
> Seriously, PPP over IP is a way of building a cheap VPN. The thing is that
> SSH already does that job much better.
The SSH FAQ or docs or whatever mentions that there is a big problem with
this type of tunelling: If TCP traffic goes through the tunnel and
congestion is encountered, both the TCP traffic being tunelled and the
tunnel itself (which is a TCP connection) will retransmit, causing, at
the very least, a waste of bandwidth. Maybe other kinds of havoc
could result from this?
That is why I thought protocols like GRE which encapsulate one packet in
one packet were much better.
-Phil
