Re: subversion over ipsec

On Thu, Dec 04, 2008 at 09:30:16PM +0100, parashkev.penev_at_mimoon.de wrote:
> I have set up a subversion repository, which is being served with
> apache (mod_dav_svn no encryption). Recently we have extended our
> network to another part of the building. the network is 1GB/s with an
> ipsec tunnel ( 70 Mb/s).
>
> When I browse the repository with a browser it is quite speedy, but
> when I try to check out/list a repository with the svn client it takes
> 30-40 seconds initially and then the transfer speed itself is rather
> crappy. I tried also listing a new (empty) repository with the same
> results. Is there anything that I need to set up so that the svn over
> ipsec get faster.

A properly set up IPSEC tunnel does behave just like a network cable,
so there should not be a noticeable performance penalty.

I'd first check whether it's actually the tunnel causing the bad
performance, and then check the firewalls (and routing tables) so that
all ICMP "fragmentation needed" packets originating on _any_ of the
routers and gateways in questions are properly passed on to their
destination. This is vital for PMTU discovery which could - if broken
by inappropriately configured firewalls - give you a substantial
performance penalty.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 3221 2323190
------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=980517
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].