performance issue within VNET jail

[Eugene Grosbein]

22.12.2017 4:42, Michael Grimm wrote:

> Well I prepared on of my webservers running at hostB/jailX to serve a sample file for local downloading tests:
> 
> 1) hostA	wget from hostB/jailX sample file: about  30 MB/s
> 2) hostA/jailY	wget from hostB/jailX sample file: about  30 MB/s
> 3) hostB	wget from hostB/jailX sample file: about 190 MB/s
> 4) hostB/jailY	wget from hostB/jailX sample file: about 190 MB/s
> 
> Hmm. At least tests 3) and 4) omit the pf firewall. Tests 1) qnd 2) include passing two firewalls, one at each host. BUT: Both hosts are connected via an IPSec tunnel, and that's esp not tcp.
> 
> Can anyone draw conclusions from this test? 
> I cannot ;-)

Make sure and double check that your ESP packets do not get fragmented.