-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Did you fix the MSS? Is the MTU on the tunnel correct? Did you maybe break PMTU discovery?
On 19.09.2017 15:53, Turbo Fredriksson wrote: > I’m not sure if this is a Strongswan problem, but I see some indications > > that it might be, so I’m posting it here. If this is not the right place, let > me > know and I’ll take it elsewhere. > > > I have setup a new region > (London) in our AWS environment and are > trying to connect one of instances > in there to our ElastiCache (Redis3.2) > cluster which is located in London. > > > > I get latencies of 20ms (not sure if that’s to much of it’s just a > fluke). > > EC2 Instance (Redis client London) -> EC2 Instance (London VPN) > -> VPN -> EC2 Instance (Ireland VPN) -> Redis > > From any instance in > Ireland, I get a latency of less than 1ms… > > EC2 Instance (Redis client > Ireland) -> Redis > > If I try it from my laptop at work, it’s about 15ms. > > > Laptop (Redis client Office) -> VPN -> EC2 Instance (Ireland VPN) -> Redis > > > > > If I strace the redis-cli command on ‘Redis client London’, I see > that the > initial connect completes without any (noticeable) delay. However, > GET > on a value (~14kb), never completes. If I do it from a telnet session > directly > to the Redis cluster, the GET eventually completes (one or two minutes). > > -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEENSSTvrX3jmMTcq8t9U7kCwc5rWwFAlnBIk0ACgkQ9U7kCwc5 rWygng/+PEUtF1qrULNV1E6qWaF0oP8OdH2Mw5ydiK+LayuqB2w+bAv3hEolZuob h+5uh/oaem2XnXWoEMDWJP+LcE5JWZDZr1RlNZ7aXEdihEAVlmLDle+8trRNFlp0 AxF0kh45x/oUyZsLGFjNSwPm7qnJzQ5bOGghXP9b4eih8JHDtF0seCzbh+kWCkd0 Z4DU7fbnFWJJv9wMGCLJSPcrMtNVcJ7oHcLCvTXkRfL+YEt1PjA6mQ/FMTBKPpCP eJm4WQ/1T8WFcod8Zp6FzSzLqAeD9ni+O7IlzQ1GhZ868nsLGgMFgQFaPkWy/L6I FEWtslTbkaBd5qXUSd8bWL+KS+Y72jAFOX9vRfiJFdQyZqaNCGzjSGLqzNbL7IB+ 8d6U1suF3gW+uQrWU/zQVNbDfg/bjyrsKypufu2f/M4rkRhh+x/RZp+FB6LwdSA/ ew/G20746wmwOEbf0qjptlOMiDA+PQFqIAFptpiagmo1pPtGgIUR9ntgunvs3b70 oMnuaHO732UsO+2TfadjiM9RxamiXF61xzBnbirhlmQetyYN8SGW3yastU1Dv2Q9 NQwSOPi9fmFkjKx73fUp7sIxjCS6DlM3gYZS2PbagoOXoFUfe6cBC3H2ck9AUDGy l3R6BxUZvjczIN5z6SRLiMcC4xbJkaJXM3aVsfodORzodyIgLio= =pNvM -----END PGP SIGNATURE-----
