Hacker News new | ask | show | jobs
by kd913 1689 days ago
There are very good reasons why it's a bad idea to run a VPN on top of TCP.

https://www.youtube.com/watch?v=AAssk2N_oPk

1 comments

For those that aren't loading such domains these days: brief (even incomplete) list of points appreciated.
Assuming you’re tunneling TCP inside of TCP, then in the event of non-perfect network conditions, you have two layers of the stack that are now trying to adjust the TCP flow parameters, re-transmit packets, etc. This will frequently end up in a situation where overall performance of the link is significantly worse than it needs to be.