|
|
| linker3000 2006-05-21, 1:11 pm |
| Is anyone here running VoIP traffic across multiple VPNs - specifically
OpenVPN?
Does the VPN's inbuilt compression have any positive or negative effects?
Any gotchas?
Thanks
| |
| PeterW 2006-05-21, 1:11 pm |
| linker3000 <linker3000@google-minushyphenmail.com> wrote in
news:44708c2b$0$683$fa0fcedb@news.zen.co.uk:
> Is anyone here running VoIP traffic across multiple VPNs - specifically
> OpenVPN?
>
> Does the VPN's inbuilt compression have any positive or negative effects?
>
> Any gotchas?
>
> Thanks
>
Yes - I have routed IAX2 down an openVPN tunnel (as well as a bespoke
protocol). SIP could be "interesting".
You may have problems with packet routing and have to use DNAT/SNAT (to
route UDP packets incoming to the openVPN server and send them to the
TUN/TAP adapter to get them to the client)
Compression doesn't help and can make the audio poor unless your openVPN
server has a fast processor that can compress very fast.
Peter
| |
| linker3000 2006-05-21, 7:11 pm |
| PeterW wrote:
> linker3000 <linker3000@google-minushyphenmail.com> wrote in
> news:44708c2b$0$683$fa0fcedb@news.zen.co.uk:
>
>
> Yes - I have routed IAX2 down an openVPN tunnel (as well as a bespoke
> protocol). SIP could be "interesting".
>
> You may have problems with packet routing and have to use DNAT/SNAT (to
> route UDP packets incoming to the openVPN server and send them to the
> TUN/TAP adapter to get them to the client)
>
> Compression doesn't help and can make the audio poor unless your openVPN
> server has a fast processor that can compress very fast.
>
> Peter
Thanks for the insight.
L3K
| |
|
|
"linker3000" <linker3000@google-minushyphenmail.com> wrote in message
news:44708c2b$0$683$fa0fcedb@news.zen.co.uk...
> Is anyone here running VoIP traffic across multiple VPNs - specifically
KPN (old dutch BT) is running VOIP over VPN for security.
No problem.
In general
- VPN is only increasing latency (trough encryption) and latency should be
below 100ms for the best quality.
- VPN is adding compexity trough NAT/NAS, so you have to use STUN servers
|
|
|
|