Site to Site Slow

I have a site to site VPN setup using to instances of Sophos UTM 9. Everything works fine except I find it is a bit slow. Copying from site B NAS to Site A I get just under 1 MB/s usually more in the 700-900 KB/s range which isn't awful but opening directories takes forever -- like if I click on a folder it can take 30 seconds or more before it even opens and then it takes forever to populate. I have decent internet at both ends so I expected better.

I'm using IPsec -- Auto Firewall rules and strick routing on -- I've lowered the policy to AES-128 PFS to see if that would help but no change. Neither Sophos instances show any significant resource spike (CPU is 2-9% and RAM is the mid-60s on one instance and under 50% on the other which is where it typically is).

Are there any typical issues I should be looking at or testing to determine why the VPN has so much lag?

  • Hey  

    Have you checked if you are experiencing any fragmented packets? Did you have Support Path MTU Discovery enabled in your remote gateways > advanced ?

    Here's a related article to help you troubleshoot.

    Regards,

  • Carlos, try the following to ping from one "Internal (Address)" [10.10.10.1] to the other [172.30.0.1]:

     ping -I 10.1.1.34 172.30.0.20 -s 1500 -M do

    Lower the 1500 to find the maximum message length and then set the MTU of the Internal interfaces to that value.

    Also, if you've selected 'Support Path MTU Discovery', note that that requires that ICMP type 3 code 4 be allowed between the devices.  If that doesn't seem to be working, you might challenge your ISP.

    Cheers - Bob

  • In reply to FloSupport:

    Thank you for responding. I finally had a chance to return to this and yes I do have Support Path MTU Discovery enabled.

    That said the problem seems to have resolved itself. At least sort of. Most remote files when I right click on them the menu opens up right away. The spinning timer thing only happens on a small percentage of files -- it seems to be correlated with larger files and application files but not always. The far worst is the Media Download application for setting up Windows 10 but there is a small to medium delay on most application files. I can live with this as the vast majority of the time I just want to access my own files at the office and there seems to be no delay for PDFs or any other file created by productivity apps.

  • In reply to BAlfson:

    Thank you for the response. I was too busy to deal with this and when I returned to it I made the happy discovery that the issue is limited to a small percentage of files. It happened to be the files I needed when I made the post but for everyday use, I just need to access my files created by various productivity apps and those there is no delay. It would be nice to figure out why right-clicky on some application apps leads to a huge delay in the menu opening but not essential. I can live with this.