360 It, Uab

Uab 360 It

Tomas Okmanas

Emanuelis Norbutas

Marijus Briedis

Based on an initiation request for a first connection from a Virtual Private Network (VPN) user device intended for a target, a second connection is established between a VPN concentrator and the VPN user device across a VPN tunnel and a third connection is established between the VPN concentrator and the target. The second connection is established with a first Maximum Segment Size (MSS) and the third connection is established with a second MSS. A first round trip time (RTT) for the second connection is measured. A second RTT for the third connection is measured. Parameters of at least one of the second connection or the third connection are optimized, where first parameters of the second connection are optimized based on the first RTT and second parameters of the third connection are optimized based on the second RTT.

Multi-part TCP connection over VPN

Transmitting data over a VPN connection includes receiving, at a VPN concentrator, from a VPN user device, an initiation request of a first connection, initialized to have an initial MSS, from the VPN user device to a target. The first connection is terminated at the VPN concentrator. A second connection is established across a VPN tunnel between the VPN concentrator and the VPN user device. A third connection is established between the VPN concentrator and the target. A first MSS for the second connection and a second MSS for the third connection are set. One of the first MSS or the second MSS are set to prevent packet fragmentation due to VPN-related encapsulation. First data packets are transmitted between the VPN concentrator and the VPN user device using the first MSS. Second data packets are transmitted between the VPN concentrator and the target using the second MSS.

An encrypted tunnel is established between a virtual private network (VPN) server and a VPN user device. A request to establish a connection with a target device is received from the VPN user device. The request uses initial connection parameters. The connection the converted into a first connection between the VPN user device and the VPN server and a second connection between the VPN server and the target device. The first connection uses first connection parameters and the second connection uses second connection parameters. At least one parameter of the first connection parameters or of the second connection parameters is different from a corresponding parameter of the initial connection parameters. First network packets received from the VPN user device according to the first connection parameters are converted into second network packets according to the second connection parameters. The second network packets are transmitted to the target device.

A method for improving VPN service transmission quality is disclosed where end-to-end TCP connections, occurring over a VPN tunnel, are terminated at the VPN concentrator and converted into multi-part TCP connections with MSS parameter set independently for each part of the connectivity. To facilitate the termination and multi-part connection management a packet processing software may be implemented as part of the VPN concentrator functionality or as an independent component.

Growing community of inventors

Vilnius, Lithuania

Tomas Okmanas