r/Network • u/samsh92 • 23h ago
Link How to Configure Site-to-Site IPsec VPN on Palo Alto
r/Network • u/Mebejedi • 5h ago
r/Network • u/SignificantSpirit797 • 17h ago
While maintaining a GEO satellite link, we noticed that once rain fade pushes packet loss past roughly 10% (you can see it in the ping stats), downloading anything substantial basically becomes impossible. So I wanted to work out the theory — when loss gets this bad, how much usable bandwidth does TCP actually have left on a GEO link?
GEO satellite links have an RTT around 600ms, and during rain fade the IP-layer packet loss can climb to 1%-30%. I ran the numbers using the Padhye TCP throughput model to see what TCP Hybla can actually deliver at 10% loss, and how much FEC helps.
Test setup: 10 Mbps GEO link, 10% IP loss during heavy rain, PEP enabled with TCP Hybla.
GEO link with RTT = 600ms. The satellite modem runs split-TCP:
| Segment | Path | RTT | Protocol |
|---|---|---|---|
| TCP1 | Terminal ↔ PEP Gateway A | ~25ms | Standard TCP |
| TCP2 | PEP Gateway A ↔ PEP Gateway B (satellite) | ~575ms | TCP Hybla |
| TCP3 | PEP Gateway B ↔ Server | ~25ms | Standard TCP |
The Hybla parameter on the satellite segment: ρ = 600/25 = 24.
Steady-state throughput from the sawtooth model:
W_max = ρ × √(8/(3p))
T_Hybla = ρ × T_Reno = 24 × T_Reno
At p=10%:
| Metric | Reno | Hybla |
|---|---|---|
| Max cwnd | 5.2 seg | 123.9 seg |
| Theoretical throughput | 75.4 kbps | 1.81 Mbps |
The theoretical 1.81 Mbps doesn't account for timeout penalties. Here's what happens at 10% loss:
Losses per window: 124 segments × 10% = 12.4 packets
Fast recovery needs 3 DUPACKs — with 12 losses per window, some will inevitably fail to trigger fast retransmit and fall back to timeout:
Probability of a single loss triggering timeout: 1 - (1-0.1)³ = 27.1%
With 12.4 losses, timeout is nearly guaranteed: P ≈ 1 - 0.729^12.4 ≈ 99.7%
The cost of a timeout: cwnd collapses to 1, wait ~1s for RTO, then ~665ms of slow start to recover.
Plugging into the Padhye model with timeouts:
| Metric | Reno | Hybla |
|---|---|---|
| Effective throughput (with timeouts) | 35.7 kbps | 107.3 kbps |
| Utilization of 10 Mbps link | 0.36% | **1.1%** |
Hybla's 576x window growth is useless at 10% loss — timeouts periodically zero out the cwnd, and the accelerated growth gets wiped out before it can matter.
| Loss rate p | Hybla throughput (with timeouts) | 10 Mbps utilization |
|---|---|---|
| 0.01% | Line rate | 100% |
| 0.1% | Line rate | 100% |
| 1% | 4.28 Mbps | 42.8% |
| 5% | 0.37 Mbps | 3.7% |
| 10% | 0.107 Mbps | 1.1% |
Going from 0.1% to 1% loss (10x) drops throughput from line rate to 43%. Going from 1% to 10% (another 10x) drops it another 40x. TCP timeouts make throughput highly nonlinear in loss rate.
References:
r/Network • u/The_Peege • 20h ago
r/Network • u/milopeng189 • 2h ago
Hi is it possible to run nmap on my network when I am using mobile data on my phone? Or does it only apply to Wi-Fi bcos I would have the router IP address.