[pptp-server] PPTP masquerade && MS non-compliance

[ctooley at amoa.org]

Jamin Collins <JaminC at adapt-tele.com> on 06/22/2001 01:18:06 PM
                                                              
                                                              
                                                              
  To:          "'Charlie Brady'" <charlieb at e-smith.com>       
                                                              
  cc:          PPTP LIST <pptp-server at lists.schulte.org>(bcc: 
               Chris Tooley/AMOA)                             
                                                              
                                                              
                                                              
  Subject      RE: [pptp-server] PPTP masquerade && MS        
  :            non-compliance                                 
                                                              








Charlie Brady [mailto:charlieb at e-smith.com] wrote:
> > We need to consider not just whether someone else did something,
> > but whether it is the right thing to do.  For me, it's simple,
> > it's not the right thing to do.
>
> Perhaps you could explain. Supporting multiple concurrent masqueraded
> connections to the same destination would add value to the
> users. Can it be done? Can it be done reliably?

First, what are good reasons to have multiple connections to the same
destination?  Second, each connection has overhead associated with it, on
both ends.  Thus, two client machines routed through a single VPN connection
to a remote network has a better through put to overhead ratio than both
clients making their own connections.  As such it is better for the users to
stick with the current capabilities and look into routing these two systems
through a single connection.

Could multiple connections be done?  Certainly (MS has already done exactly
this).  Can it be done reliably?  I would say yes.  But the true question
is: Should we do this?  Until this is decided the others are irrelevant.



If I can use more than one connection I can have better throughput accounting
for departments.  Is it a waste of overhead?  Yes.  Does it give me the
statistics that my management wants to see?  Yes.  Does my management care
whether it's "the right thing to do"?  No, it can be done the way they want to
do it and that's the way I get to impliment it.  If that means proprietary
software that is non-compliant that isn't really something they are overly
concerned about.  If that is software that is GPL'd, all the better.

Chris Tooley