First, I am not very knowledgable about networking, but I’m hoping some network tooling can solve a problem I’m having.
I have two internet connections in my home, a satellite connection, and Verizon wireless. My verizon is low latency but is data capped to 15GB, my satellite is, of course, high latency, but is not data capped, and runs about 25mb. My VPN into work, from my home over satellite, is very slow (not PepVPN… I don’t know what it is). I read this article ( https://www.slingshot6.com/blog/how-to-reduce-vpn-latency-over-satellite-links/ ) and I understand that even though the satellite connection has high bandwidth, the low latency causes slow ACK responses to TCP traffic causing the server to continually throttle the rate at which it sends TCP packets.
The article talks about using Asymetric routing to route the upload traffic (ACK packets) over the low latency connection, while routing the download over the high bandwidth connection, to effectively cut the latency in half. The context of the article was PepVPN, though, so I’m wondering, can one configure this kind of asymmetric routing using the balancing router, but using a different VPN provider?
I’m considering buying this product, if this is something it can do: https://www.amazon.com/gp/aw/d/B0042210U6
Thanks
Steve
Ha! Good to know that at least one person has read my blog post 
Asymmetrical routing is a feature of PepVPN / SpeedFusion. likely your best approach would be to use a Cloud Hosted Virtual Fusionhub Appliance to act as the ‘other end’ of your Peplink VPN connection. Then you would be able to use the Asymmetrical routing feature.
The other approach is to use UDP encapsulated IPSEC VPN. Since its UDP the issue of TCP ACK responses is minimised and you can get higher throughput that way over the satellite with somewhat reduced latency.
If you want to use Asymmetrical routing you’ll need another Peplink device, if you want to try UDP IPSEC encapsulation then I expect there will be cloud VPN providers that will support IPSEC.
Obviously with IPSEC you won’t be able to bring your cellular connection into the mix as easily though - so that’s something to think about.
1 Like
Thank you for the quick response! Is UDP encapsulation something I’d have to ask the network/security team at my place of employment to enable or is that something I could enable on my router? Specifically, how would I do it on the Peplink Balance 20. I still think it would be useful for controlling which IP addresses in my house are allowed to go across my Verizon internet link.
I think you should just be able to turn it on in Network > VPN | IPsec VPN → New profile
2 Likes
