Therefore, we need to know what is the MTU value of the VA and what is the max allowed size of unencrypted traffic to avoid fragmentation. The actual traffic then goes over the physical adapter. This VA will receive unencrypted traffic and emulates Ethernet to forward traffic after encryption. ![]() Now the value of unencrypted TCP segment can be more which leads to MTU more than 1500-bytes but this will cause the networking devices to fragment the packet which is bad and should be avoided.Īn圜onnect client builds Virtual Adapter (VA) during installation on the clients machine. The 80-bytes difference are utilized by encryption overhead. With encryption, for Ethernet and MTU of 1500, the unencrypted TCP segment can't be more 1380 (can be different value). This means that the actual size of the unencrypted TCP segment or UDP datagram which holds the application will be reduced because the MTU of the adapter is still same.įor example with Ethernet and MTU of 1500-bytes, the unencrypted TCP segment can't be more than 1460-bytes. ![]() During encryption, additional overhead will be added to the packets made by new headers and features.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |