For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Patrik_Jonsson's avatar
Patrik_Jonsson
Icon for MVP rankMVP
Sep 06, 2012

Optimizing tcp between China and Malta

We've got a site in China and one in Malta and the China site need to contact resources in Malta (pretty small requests in terms of size, but many). Up until now we've been using the VPN for this but obviously, it's quite slow.

 

I suggested that it might be faster using the F5's so I created a standard Virtual server with tcp-wan-optimized profile and a lan-optimized profile but it turns out that it was actually slower.

 

MRT graphs shows that there's little to no packe loss between the two locations.

 

Any ideas on how to increase the speed between the two sites?

 

Kind regards,

 

Patrik

 

 

config
design

2 Replies

  • Michael_Yates's avatar
    Michael_Yates
    Icon for Nimbostratus rankNimbostratus
    Sep 06, 2012
    Hi Patrik,

     

     

    Depending on what you are transferring have you considered enabling Compression and Caching?

     

     

    Depending on how many connections you are establishing you might get some benefit out of a OneConnect profile as well.

     

  • Patrik_Jonsson's avatar
    Patrik_Jonsson
    Icon for MVP rankMVP
    Sep 07, 2012
    Hi Michael

     

    Thanks for your answer. We're transferring encrypted uid's. The size of the responses are between 0,5kb and 8 kb.

     

    Compression is turned on and caching is not necessary since each request is more or less unique.

     

    I tried OneConnect too, but it did not make any difference.

     

     

    Here's what we've done so far:

     

    1. Wan-optimized and lan-optimized tcp profiles. Slow.

     

    2. Regular TCP profiles on both client and server side. OK speed.

     

    3. Performance HTTP. Very fast.

     

     

    What I can't figure out though is how the https can be terminated with the Performance HTTP server since there's no option to specify an HTTPS profile. I even changed browsers in between to rule out caching but they all show the correct certificate.

     

    I'd be happy to use the Performance HTTP type, but only if I can figure out exactly how the SSL termination works.

     

     

    Any ideas?