On Tue, 2018-11-13 at 13:56 -0800, Tom Rodriguez wrote: > Thanks, I wasn't aware of that command. That does indeed fix the > throughput problem on linux though I'll have to rework some things to > take advantage of it. Unfortunately it's not available for the Mac. I > can work with it though. Having a partial solution is better than none. > > So that suggests that the bottleneck is really in ocproxy. Clearly > openconnect can communicate with the tunnel process efficiently enough > to support the throughput. I've investigated ocproxy before to see if > there was something wrong with the LWIP configuration that was limiting > throughput but didn't see anything. Anyway, thanks for the vpnns tip. Does LWIP support SACK yet? Are you seeing packet loss? Do you see SACK being used when you use vpnns and the kernel's stack? Or maybe it's just TCP congestion algorithms and window sizing... -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 5213 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20181113/bc0ee080/attachment.bin>