[Openswan Users] Latency with Openswan?

[Paul Wouters]

On Mon, 10 Jul 2006, Joost Kraaijeveld wrote:

> > I am not sure if I understand the question entirely. Are you talking about
> > the latency of IPsec in general, or the difference between PSK and RSA?
> A customer of mine has several ipsec tunnels ( > 100) through which
> Citrix ICA session run. The users experience latency (long response
> times), which makes typing really awkward experience. I want to rule out
> that the OpenSwan ipsec tunnels are responsible for the latency (I
> actually suspect the upstream provider's way of handling the
> connection).

I am not aware how slow Citrix normally is supposed to be in such situations,
but IPsec shouldn't be adding much latency at all. Perhaps you need to look
at the packet sizes and see if there is fragmentation happening.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155