tinc - Sep 2017 - request for advice to increase throughput and lower latency

Hello everybody,

I am using fairly standard setup with tinc version 1.0.31 on Debian 9.1 
and Windows Pro 7 clients, however the users complain that tinc is very 
slow. (they connect to smb shares and transfer files).

This is my configuration the client host files only have the keys.

http://paste.debian.net/plainh/7a904554

Any advice and options to speed the connections up.

What Cypher will be better, I got CPU power and memory on the tincd 
server side.

Thank you all in advance,

Kind regards,

Jelle de Jong

On Mon, Sep 04, 2017 at 05:24:50PM +0200, Jelle de Jong wrote:
> I am using fairly standard setup with tinc version 1.0.31 on Debian 9.1 and
> Windows Pro 7 clients, however the users complain that tinc is very slow.
> (they connect to smb shares and transfer files).
> 
> This is my configuration the client host files only have the keys.
> 
> http://paste.debian.net/plainh/7a904554
> 
> Any advice and options to speed the connections up.
> 
> What Cypher will be better, I got CPU power and memory on the tincd server
> side.
First try setting ProcessPriority = high on the Windows clients.

I think the fastest Cipher to use is aes-128-cbc. You can also try
changing the Digest, MD5 is not so safe anymore, but it's used in a HMAC
construction so it's not perfect but can be used. I wouldn't recommend
changing the Digest algorithm though.

Also check the traffic to/from the Windows clients and check if you see
fragmented UDP packets. If so, that might also explain why it is slow.

-- 
Met vriendelijke groet / with kind regards,
     Guus Sliepen <guus at tinc-vpn.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL:
<http://www.tinc-vpn.org/pipermail/tinc/attachments/20170904/2494b1f2/attachment.sig>