<div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Feb 17, 2023 at 8:39 AM Adam Thompson via Starlink <<a href="mailto:starlink@lists.bufferbloat.net">starlink@lists.bufferbloat.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<div dir="auto">Sorry, forgot to answer the first part: yes, absent the tunnel, we get ~200/8 consistently, occasionally bursting higher.</div></div></blockquote><div><br></div><div>you really should test more deeply, and for longer periods than 15 seconds.</div><div><br></div><div>I keep hoping someone with business class service will repeat these 2 year old benchmarks.</div><div><br></div><div><a href="https://docs.google.com/document/d/1puRjUVxJ6cCv-rgQ_zn-jWZU9ae0jZbFATLf4PQKblM/edit#heading=h.fwv7fw3aeaz">https://docs.google.com/document/d/1puRjUVxJ6cCv-rgQ_zn-jWZU9ae0jZbFATLf4PQKblM/edit#heading=h.fwv7fw3aeaz</a><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div>
<div dir="auto">-Adam</div>
<div dir="auto"><br>
</div>
<div id="m_-346914594817751312ms-outlook-mobile-signature" dir="auto">
<div><br>
</div>
Get <a href="https://aka.ms/AAb9ysg" target="_blank">Outlook for Android</a></div>
<hr style="display:inline-block;width:98%">
<div id="m_-346914594817751312divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Daniel C. Eckert <<a href="mailto:eckertd@gmail.com" target="_blank">eckertd@gmail.com</a>><br>
<b>Sent:</b> Friday, February 17, 2023 10:36:24 AM<br>
<b>To:</b> Adam Thompson <<a href="mailto:athompson@merlin.mb.ca" target="_blank">athompson@merlin.mb.ca</a>><br>
<b>Cc:</b> <a href="mailto:starlink@lists.bufferbloat.net" target="_blank">starlink@lists.bufferbloat.net</a> <<a href="mailto:starlink@lists.bufferbloat.net" target="_blank">starlink@lists.bufferbloat.net</a>><br>
<b>Subject:</b> Re: [Starlink] VPN woes, recommendations?</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div dir="ltr">
<div style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(0,0,0)">
Interesting scenario. This reply only addresses a small part of your message: While I see you've done the math and checked the specs for the Aruba devices -- have you already conducted a few non-VPN tests between direct-wire-connected laptops/devices at those
two locations to know what "baseline" bandwidth you're starting from when considering the max potential bandwidth for the encrypted traffic? For example, since you're on a business plan, you should have a direct public IP to target with iperf traffic from
either end, even if not encrypted.</div>
<div style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(0,0,0)">
Dan</div>
</div>
<br>
<div>
<div dir="ltr">On Fri, Feb 17, 2023 at 11:30 AM Adam Thompson via Starlink <<a href="mailto:starlink@lists.bufferbloat.net" target="_blank">starlink@lists.bufferbloat.net</a>> wrote:<br>
</div>
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<div dir="auto">Hi, all.</div>
<div dir="auto">We've been trying to develop a plug-and-play L2 VPN over Starlink, using Aruba Hospitality-series Remote APs like their RAP-505H.</div>
<div dir="auto">It's not going great, and I'm wondering about several Starlink-specific issues.</div>
<div dir="auto"><br>
</div>
<div dir="auto">First, having multiple devices in serial is generally not a great idea for reliability. Can we realistically plug our remote AP directly into the dish, still? (This is using Starlink Business, FWIW.). I know we lose access to the Starlink
app, but we also lose a NATing router and an unwanted wifi AP, so that's probably a net zero. I just don't know what other dangers/problems that topology might cause.</div>
<div dir="auto"><br>
</div>
<div dir="auto">Secondly, we're only able to push about 30Mbps through the (magical Aruba-proprietary GRE+IPsec) tunnel. The bandwidth-delay equations suggest we should be seeing around 100Mbps, not 30. (The Aruba devices are rated for ~2Gbps encrypted at
the site end, and ~7Gbps at the head end, so presumably that's not the bottleneck.)</div>
<div dir="auto"></div>
<div id="m_-346914594817751312x_m_5417424941266097326m_6961121106673671900ms-outlook-mobile-signature" dir="auto">
<div><br>
</div>
<div dir="auto">So:</div>
<div dir="auto">* does anyone have corroborating *or* contradicting evidence of VPN performance over Starlink's particular flavor of Long Fat Pipe, and</div>
<div dir="auto">* does anyone have any positive (or negative, I guess!) recommendations for cloud-managed VPN devices that can do at least 100M and magically work from behind double-NAT/CGNAT like we see with Starlink? Bonus points if it does L2 tunnels or
can run a dynamic routing protocol.</div>
<div dir="auto">* Other comments or suggestions welcome, too.</div>
<div dir="auto"><br>
</div>
<div dir="auto">Thanks,</div>
<div dir="auto">-Adam</div>
<div dir="auto"><br>
</div>
Get <a href="https://streaklinks.com/BZdCYXLz80mmcz4jWATVEg7r/https%3A%2F%2Faka.ms%2FAAb9ysg" target="_blank">
Outlook for Android</a></div>
</div>
_______________________________________________<br>
Starlink mailing list<br>
<a href="mailto:Starlink@lists.bufferbloat.net" target="_blank">Starlink@lists.bufferbloat.net</a><br>
<a href="https://lists.bufferbloat.net/listinfo/starlink" rel="noreferrer" hspace="streak-track" target="_blank">https://lists.bufferbloat.net/listinfo/starlink</a><br>
</blockquote>
</div>
<div hspace="streak-pt-mark" style="max-height:1px"><img alt="" src="https://mailfoogae.appspot.com/t?sender=aZWNrZXJ0ZEBnbWFpbC5jb20%3D&type=zerocontent&guid=c1c31836-4d3e-4aad-a576-c28cbc6172cb" style="width: 0px; max-height: 0px; overflow: hidden;"><font color="#ffffff" size="1">ᐧ</font></div>
</div>
<div hspace="streak-pt-mark" style="max-height:1px"><img alt="" src="https://mailfoogae.appspot.com/t?sender=aZWNrZXJ0ZEBnbWFpbC5jb20%3D&type=zerocontent&guid=5fd7792d-7b29-429a-9e08-ab57de655a75" style="width: 0px; max-height: 0px; overflow: hidden;"><font color="#ffffff" size="1">ᐧ</font></div>
</div>
</div>
_______________________________________________<br>
Starlink mailing list<br>
<a href="mailto:Starlink@lists.bufferbloat.net" target="_blank">Starlink@lists.bufferbloat.net</a><br>
<a href="https://lists.bufferbloat.net/listinfo/starlink" rel="noreferrer" target="_blank">https://lists.bufferbloat.net/listinfo/starlink</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div>Surveillance Capitalism? Or DIY? Choose: <a href="https://blog.cerowrt.org/post/an_upgrade_in_place/" target="_blank">https://blog.cerowrt.org/post/an_upgrade_in_place/</a></div><div>Dave Täht CEO, TekLibre, LLC <br></div></div></div></div>