|
Oct 22nd, 2008 at 6:48pm
Note that acceleration is only required for TCP protocols such as HTTP, SMTP, FTP, telnet, etc. TCP is a guaranteed transport protocol that requires ACKnowledgments from the remote side of the circuit to confirm that packets were received error free. Because satellite delay slows these ACKnowledgments, performance is significantly reduced, since the sender won't send any additional packets till it gets the ACK back from the receiver. TCP Acceleration provides local ACKs so that the TCP packets can flow at full speed over the VSAT circuit. TCP is generally data such as browsing, email, file transfer, etc. This type of data must be delivered accurately.
UDP is a "spray and pray" protocol. It does not have Acknowledgments. If a packet is lost, it shows up as pixelation, noise, static, etc., but since UDP is typically voice/video traffic, it doesn't make sense to stop the transmission and retransmit corrupt or lost data.
iDirect helped pioneer TCP and HTTP Acceleration integrated into the modem. So you have this already built in. The problem comes when you add a VPN. The integrated TCP Acceleration process can't see the TCP headers because they have been encrypted/encapsulated, thus the acceleration features are unavailable. The solution is to use an external acceleration appliance sitting in between the LAN and the VPN appliance to provide pre-acceleration and QoS prior to the encryption/encapsulation process. So it fits together like this at the remote site:
LAN - Pre-Acceleration Appliance - VPN Appliance - VSAT modem - VSAT link. The central site or data center must also have the same setup. Typically the data center appliance can be sized to support a large number of smaller remote appliances.
The iDirect Network Accelerator is being supplemented by the new SkyCelerator.
It integrates with SCPS-TP (Standards-based Space Communications Protocol Standard-Transport Protocol), provides automatic peer discovery, supports mesh networks, high ratio, real time data compression, enables HTTP Acceleration, fast start technology, fail to wire capability and/or hot backup. It can be configured as bridge or router and provide one or two-way acceleration. It's much easier to set up than the original Network Accelerator.
It's designed for networks with VPN encryption devices that require stand-alone TCP Accleration and advanced compression.
Note: SSL does not require accleration as the TCP headers are not hidden through encapsulation/encryption as they are in VPNs such as IPSec and PPTP. SSL VPNs only encrypt the data and leave the headers alone, so they can still be accelerated.
The SkyCelerator provides IP QoS and TCP weighted fair queuing QoS. This is important because you can't prioritize data that is already encapsulated/encrypted, so you have to apply QoS before it gets encrypted.
So in response to the original question - it isn't going to enhance performance of a network using 3100s or X3s UNLESS there are VPN requirements. It is not necessary for SSL VPNs such as Citrix.
I'm not positive, but I believe the original Network Accelerator was designed to be used only on iDirect networks with some 'hooks' into the iDirect modems, but I believe the SkyCelerator can be used on any VSAT service including SCPC.
Pat Gannon Business Satellite Solutions, LLC
|