Agreed. I have run IPsec over MPLS with no problem in China on several carriers. Internet connectivity also worked but performance was spotty due to overloaded firewall or circuits in and out of the country. Steven Naslund -----Original Message----- From: Tom Paseka [mailto:tom@cloudflare.com] Sent: Wednesday, December 05, 2012 1:27 PM To: Christopher Morrow Cc: nanog@nanog.org Subject: Re: China Telecom VPN problems (again) On Wed, Dec 5, 2012 at 11:25 AM, Christopher Morrow <morrowc.lists@gmail.com
wrote:
On Wed, Dec 5, 2012 at 2:19 PM, Tom Paseka <tom@cloudflare.com> wrote:
Its quite easy to get MPLS-VPN connectivity into China (Pacnet, Singtel, CPCNet, etc, will offer), but at a price.
mpls != ipsec ... perhaps the OP wants some privacy and authentication
and such?
run IPSEC over the MPLS-VPN. It'll be a lot more stable than over public internet.