asterisk users - Jul 2006 - Connecting branch offices through IPsec tunnel -- latency effects?

Hi:

If I connect two offices through an IPsec tunnel, what is the impact on
latency, and does it noticeably affect calls?

Has anyone out there tried this? What were the effects?

Cheers,

-Stephen-

Make sure you have enough CPU bandwidth on both sides IPsec has to
encrypt every little packet. 

-----Original Message-----
From: asterisk-users-bounces@lists.digium.com
[mailto:asterisk-users-bounces@lists.digium.com] On Behalf Of Stephen
Bosch
Sent: Tuesday, July 25, 2006 11:25 AM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: [asterisk-users] Connecting branch offices through IPsec tunnel
--latency effects?

Hi:

If I connect two offices through an IPsec tunnel, what is the impact on
latency, and does it noticeably affect calls?

Has anyone out there tried this? What were the effects?

Cheers,

-Stephen-
_______________________________________________
--Bandwidth and Colocation provided by Easynews.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

On Tue, 25 Jul 2006, Stephen Bosch wrote:
> Hi:
> 
> If I connect two offices through an IPsec tunnel, what is the impact on
> latency, and does it noticeably affect calls?
There should be no change compared to a non IPsec tunnel.
 
> Has anyone out there tried this? What were the effects?
We have IPsec and openvpn tunnels running without any problems.
Just make sure that the TOS value of the original packet is used for
the IPsec packet too. Of course, this only is needed, when you have
traffic-shaping/Qos/... at all.

Armin

Ive done it with a tunnel set with OpenVPN,  and works quite good,  
there is a slight increase of lattency but not noticeable to humans.   
that is doing it via UDP tunnel,  we also tried via a TCP tunnel and 
results weren't good,  lattency increased more than desired and voice 
quality was poor.
other than that enough CPU is very advisable

 

Stephen Bosch escribi?:
> Hi:
>
> If I connect two offices through an IPsec tunnel, what is the impact on
> latency, and does it noticeably affect calls?
>
> Has anyone out there tried this? What were the effects?
>
> Cheers,
>
> -Stephen-
> _______________________________________________
> --Bandwidth and Colocation provided by Easynews.com --
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
>
>

Hi Stephen,

+99 ms via IPSec FreeSWan
But good protection and no NAT issue.

Francois BERGERET,
France.

-----Message d'origine-----
De : asterisk-users-bounces@lists.digium.com
[mailto:asterisk-users-bounces@lists.digium.com] De la part de Stephen Bosch
Envoy? : mardi 25 juillet 2006 17:25
? : Asterisk Users Mailing List - Non-Commercial Discussion
Objet : [asterisk-users] Connecting branch offices through IPsec tunnel
--latency effects?


Hi:

If I connect two offices through an IPsec tunnel, what is the impact on
latency, and does it noticeably affect calls?

Has anyone out there tried this? What were the effects?

Cheers,

-Stephen-
_______________________________________________
--Bandwidth and Colocation provided by Easynews.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Stephen Bosch wrote:
> Hi:
> 
> If I connect two offices through an IPsec tunnel, what is the impact on
> latency, and does it noticeably affect calls?
> 
> Has anyone out there tried this? What were the effects?
Yes, I've done it through cisco's vpn, sonicwall vpn, and MS non-ipsec 
tunnels. Works fine "if" the underlying transport is reasonable.
Latency
is generally not an issue; jitter seems to be a hotter issue.