High RDP latency thought NSa 4650

jess_gagne

I,

Since we buy our NSa 4650, we have a issue with RDP. (This is not related to Bookmark) Latency is instable and so high then its really annoying to use RDP. Although, latency from ping is always under 3ms. No VPN, No WiFi, Only Cooper and LAN network. I really think there is something in the NSa 4650. There is my test:

Setup 1:

RDP Client -> Router -> NSa 4650 -> RDP server

High Latency on RDP, ping Latency under 3ms. No other services seams impact.

Setup 2 :

RDP Client -> Router ->RDP server

Everything Fine, RDP working just like I was on My computer

Setup 3

RDP Client -> Router -> Router -> RDP Server

same result as Setup 2

In the NSa 4650, everything look ok (CPU, interface throughput, Memory, etc) I also try to disable security feature and put them on ''Performance optimized''. I route from LAN zone to LAN zone. I tried to lower MSS and MTU on router, Serveur, Client and NSa 4650, but nothing better... Throughput test with Iperf3 show almost 1Gbps.

My ''Router'' (Ubiquiti ER-8XG) are Basic configured, no active Firewall in them.

Saravanan

Hi @JESS_GAGNE,

Thank you for visiting SonicWall Community.

I would like to try one more setup if possible for you to narrow down further.

Setup 4:

RDP Client -> NSa 4650 -> RDP server

Could you please try this setup and try the RDP access? Please initiate pings to NSa 4650's LAN interface IP and to the RDP server's IP from the RDP client and make a note of the ping response time. Please let me know.

jess_gagne

Thanks for the quick reply and sorry if my English is not that good.

Setup 4 : Result

RDP Client -> NSa 4650 -> RDP server

Works perfectly... But, for this test, there something different on Layer 3.

Setup 1 to 3 have the same Layer 3 configuration :

Client in 10.7.0.0/16 -> Routeur -> 10.0.0.0/26 -> NSa 4650 -> 10.0.0.0/26 -> RDP Server in 10.0.0.0/26

I'm doing this in first place for security reason and easy configuration/understanding for non high level networking guys. I think, routing like OSPF is to hard to understand and configure for our network size. I also want to send "all" trafic to the NSa 4650 for security inspection and control. So I don't want to add route to bypass the Firewall.

In Setup 4, I had to make a new Network in My NSa 4650. So the Layer 3 Result look like this:

Client in 10.253.0.0/16 -> NSa 4650 -> Server in 10.0.0.0/26

Its look like the NSa 4560 doesn't like routing/redirect trafic from 10.0.0.0/26 to 10.0.0.0/26.... If it can Help, when I make Traceroute, the NSa 4650 never Reply but I can ping it :

 1   *    *    *   Request timed out. (Should be 10.0.0.37)

 2   3 ms   2 ms   2 ms 10.0.0.33 (router)

 3  21 ms   4 ms   4 ms 10.7.15.3 (My PC)

Réponse de 10.0.0.37 : octets=32 temps=3 ms TTL=63