Unless you are suggesting that I reprogram all my apps that now go through the PPP to use L3 proxying, then I don't think that you are addressing the question I asked (or I didn't ask properly?) Anyway, it is the kernel code which decides that a particular TCP connection didn't receive (a response ACK) packet for a period of time (the timeout), and so it chooses to requeue the (request) packet into the VPN (PPP) interface again for re-transmission. The (re-stated) question : ------------------------ Isn't there a way to tell kernel "do not requeue packets going out through interface ppp0" ? Or, equivalently: "the re-send timeout for these packets (that are going out through interface ppp0) is a very long timeout (e.g. 3 hours, or 5 days or something similar)" Thx, JV On Sat, 27 Oct 2001, Andi Kleen wrote: > > How can I tell the TCP stack for the PPP interface that media for the > > PPP connection is SLOW (because the primary TCP times out often) but > > LOSSLESS (since it *is* a TCP conection which guarrantees delivery), *so > > that the PPP TCP stack prevents timeouts and never resends a packet* ?! > > You can't. Your VPN is broken by design. either switch to UDP as the carrier > or use L3 proxying: a transparent proxy that speaks a non TCP protocol > without retransmits and sits at the entry point and another at the exit > point that speaks real TCP again (this seem to be the tricks used by > wireless networks which have similar problems) Using UDP is better because > it'll work for non TCP protocols. > > -Andi -- Gospel of Jesus is the saving power of God for all who believe -- ## To some, nothing is impossible. ## http://Honza.Vicherek.com/ - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html