Community discussions

MikroTik App
 
millenium7
Long time Member
Long time Member
Topic Author
Posts: 539
Joined: Wed Mar 16, 2016 6:12 am

EoIP over VPN - Help with packet overhead and MSS calculation

Wed Apr 11, 2018 9:51 am

I'm having a hard time finding all the values to calculate exactly how much overhead is used, and also the optimal TCP MSS value

Essentially I want to run PPPoE over EoIP over one of the VPN options so that it works behind NAT
I know that fragmentation will occur but I want to calculate the overhead losses for the biggest possible frame size and at least try and mitigate some fragmentation with the correct TCP MSS size

I still don't know which is the best way to go about it. I need the data to be encrypted as well, should I be using...
- PPTP + EoIP/IPsec
- L2TP/IPsec + EoIP
- L2TP + EoIP/IPSec
- SSTP + EoIP
- IPSec/IKEv2 + EoIP
 
User avatar
Anumrak
Forum Guru
Forum Guru
Posts: 1174
Joined: Fri Jul 28, 2017 2:53 pm

Re: EoIP over VPN - Help with packet overhead and MSS calculation

Wed Apr 11, 2018 4:13 pm

What network exactly you want to connect? Layer 2 or 3? If 2, use EoIP + IPsec. If 3 use L2TP + IPsec.
 
User avatar
amt
Long time Member
Long time Member
Posts: 529
Joined: Fri Jan 16, 2015 2:05 pm

Re: EoIP over VPN - Help with packet overhead and MSS calculation

Thu Apr 12, 2018 2:31 pm

What network exactly you want to connect? Layer 2 or 3? If 2, use EoIP + IPsec. If 3 use L2TP + IPsec.
Hi Anumrak,

Layer 2 mean bridged network and Layer 3 for routed network.. why you prefer to use pppoe over L2TP ( if mean carrying pppoe_client customer to pppoe_server over l2tp )connection on Layer 3 network ?
I am interested in this topic and I wonder which one might be better and why. can you share some experience ? :)

Thanks...
 
User avatar
Anumrak
Forum Guru
Forum Guru
Posts: 1174
Joined: Fri Jul 28, 2017 2:53 pm

Re: EoIP over VPN - Help with packet overhead and MSS calculation

Thu Apr 12, 2018 3:04 pm

What network exactly you want to connect? Layer 2 or 3? If 2, use EoIP + IPsec. If 3 use L2TP + IPsec.
Hi Anumrak,

Layer 2 mean bridged network and Layer 3 for routed network.. why you prefer to use pppoe over L2TP ( if mean carrying pppoe_client customer to pppoe_server over l2tp )connection on Layer 3 network ?
I am interested in this topic and I wonder which one might be better and why. can you share some experience ? :)

Thanks...
Just run pppoe over EoIP+IPsec and you'll be happy :)
 
sindy
Forum Guru
Forum Guru
Posts: 10206
Joined: Mon Dec 04, 2017 9:19 pm

Re: EoIP over VPN - Help with packet overhead and MSS calculation

Thu Apr 12, 2018 3:19 pm

I'm having a hard time finding all the values to calculate exactly how much overhead is used, and also the optimal TCP MSS value

Essentially I want to run PPPoE over EoIP over one of the VPN options so that it works behind NAT
I know that fragmentation will occur but I want to calculate the overhead losses for the biggest possible frame size and at least try and mitigate some fragmentation with the correct TCP MSS size

I still don't know which is the best way to go about it. I need the data to be encrypted as well, should I be using...
- PPTP + EoIP/IPsec
- L2TP/IPsec + EoIP
- L2TP + EoIP/IPSec
- SSTP + EoIP
- IPSec/IKEv2 + EoIP
The less encapsulations the better. So let's translate your list to highlight this:
  • PPTP + EoIP/IPsec => EoIP over IPsec over PPTP
  • L2TP/IPsec + EoIP => EoIP over L2TP over IPsec (causing issues if two such clients are NATed to the same public address, see the reason and the solution)
  • L2TP + EoIP/IPSec => EoIP over IPsec over L2TP
  • SSTP + EoIP => EoIP over SSTP
  • IPSec/IKEv2 + EoIP => EoIP over IPsec
So the real choice should be among the last two. SSTP is somewhat simpler to understand and configure but it uses TCP as transport which makes it a bad choice for any UDP based real-time application (such as VoIP or video streaming using UDP); it has its drawbacks also for TCP applications, and I'm afraid that PPPoE is closer to UDP in terms of preferred handling of packet loss.

So my choice would definitely be the last one.
 
User avatar
nichky
Forum Guru
Forum Guru
Posts: 1281
Joined: Tue Jun 23, 2015 2:35 pm

Re: EoIP over VPN - Help with packet overhead and MSS calculation

Wed Jun 13, 2018 9:20 am

@millenium7 Just watch out of MTU.Set up correct MTU because any single interface has own MTU

Who is online

Users browsing this forum: Bing [Bot], Laxity and 244 guests