Slow Speed through APM SSL VPN Even With DTLS
Hello everyone! So I'm currently troubleshooting slow speeds through my APM SSL VPN. I ran a bandwidth test for each scenario and got the following results: Client Local Site (No VPN): Down: 837,53 Mbit/s Up: 840,39 Mbit/s MS: 1,12 Client on remote site going through the same BIG-IP but through a forwarding VIP (No VPN) Down: 81,64 MBit/s Up: 76,24 Mbit/s MS: 13,26 Client using F5 APM SSL VPN Down: 20,01 MBit/s Up: 25,15 Mbit/s MS: 29,88 Determined through these tests, the ISP I'm connected to does not have any bandwidth limitation, the BIG-IP I'm sending the traffic through is not limited in bandwidth. I accept that there are some performance loss due to the encrypted tunnel, but these numbers indicate that I have lost: Down: 75% loss Up: 68% loss MS: 100% increase I read some threads on DC regarding this and the solution for many has been DTLS. So I configured it and ran some new tests: Down: 24,95 MBit/s Up: 23,04 Mbit/s MS: 29,88 So the results are pretty much the same. I disregarded the bandwidth test and tried a file download instead. Using my local connection I got 2-3MB/sec but on the VPN (using both TLS 1.2 and DTLS) I got 300KB/sec so around 2,4 Mbit/sec. The BIG-IP I'm using is a VE provisioned with 1Gig license and in that location I'm running a 100Mbit ISP line. Getting a 2,4 Mbit/sec download through the tunnel is really bad. I tried to tweak the TCP profiles and play with the compression settings but I still get the same results. I'm running version TMOS 12.1.3.4. Do you have any suggestions?
Slowness experienced after failover.
We currently have 2 VCMP guests in the environment configured as an HA pair. When a failover occurs to the standby, the network experiences extreme slowness after an hour or so. Has anyone else had this experience and if so what was the root cause. just a brief synopsis will do as I really just need a direction to head in for troubleshooting. this is for version 11.5.3.
Multiple TCP Retransmission and Out-of-order packets with SNAT disabled
I have a unique setup that requires SSL VPN users to get an ip from a pool based on an Active Directory membership. This IP pool then has various firewall rules it is assigned to on a Checkpoint firewall. Users are complaining of slow speed, and after setting up an IP forwarding VS I'm seeing better speeds, but am still seeing a tcp retransmit or out-of-order packet for every packet going through the VS.
F5 LTM VE 11.4.1 HF5 - File transfers slow and timeouts from node behind f5 to any destination.
HI I have hit a strange issue with F5 LTM VE 11.4.1 , it was working fine for the past months, i have a 10Gb license on it so throughput is not a problem. However I have noticed that in the ESX cluster we have Virtual Machines who's gateway is either a Layer 3 device or F5 as its gateway. When i do a test from the VM (virtual machine ) from behind the F5 i consistantly fail have issues transferring, the speed goes down to 0 kbps and then picks it up again after a short pause and this is repeatedly happening. Dev's are unable to even see the logs as these timeouts are happening often. As a test i have a virtual machine who's gateway is not the F5 and that seems to work fine from the same ESX Cluster. Any ideas please advise. we have not set any connection limit etc everything is set to 0 to turn off the limit/rate. Is there any other setting that i am missing here to look at ?
