How can I speed up file transfers over VPN?

24,980

Solution 1

This is most likely due to the SMB protocol being very "chatty", and requring many requests/acknowledgements before and during transfer. Here a couple of things that may help:

  • Adjust TCP windowing to be optimal for your network. A google search will bring up many tutorials
  • Upgrade to Server 2008 AND Vista machines (requires both to take advantage), as they use SMB2.0 which specifically targets this issue.
  • Install a WAN accelerator on either end, be it a dedicated device like a Riverbed device, or the BranchCache feature in Server 2008 R2.

Solution 2

We had problems in the past because the VPN system used UDP as its underlying protocol. The problem with that is the routers between the VPN user and the network would depriortize/drop UDP packets.

Switching the underlying connection to TCP seemed to solve this issue for us.

Share:
24,980

Related videos on Youtube

Admin
Author by

Admin

Updated on February 17, 2020

Comments

  • Admin
    Admin over 2 years

    Our VPN users experience very slow file transfers (50MB can take 20 minutes with a 20Mbps FiOS connection on each side). If the file is transferred over HTTP or FTP, it's just as fast as you expect. I suspect this has something to do with how Windows handles file transfers, as it probably doesn't expect any latency. Is there some way to tweak this?

    The VPN is SafeNet IPSec and the clients are XP.

  • Dominic Cronin
    Dominic Cronin about 13 years
    I'm glad to hear Vista/2008 has addressed this!
  • tomjedrz
    tomjedrz about 13 years
    I advise care here. This attribute is called "split tunneling", and opens a vulnerability where the client machine can be accessed from the internet, then the internal network accessed over the tunnel. Don't do it unless you are very confident about the state of the client.
  • Commander Keen
    Commander Keen about 13 years
    The poster said IPSec. That is the underlying protocol.
  • Simon Johnson
    Simon Johnson about 13 years
    Many VPN providers run IPSec over another transmission protocol. For example, our Cisco router provides IPSec / UDP and IPSec / TCP.