Site-to-site VPN that survives NAT, CGNAT and MTUTanveer Ahmed
Most VPN problems are decided before the tunnel is configured: the path MTU, how the NAT in the middle behaves, which ports actually cross, and how long a quiet mapping survives. Skip that and you get a tunnel that comes up in the lab and drops every four minutes in production.
I measure the path first — MTU in both directions, NAT mapping behaviour, which ports and protocols get through, idle-mapping lifetime, loss and jitter at tunnel-sized packets — then build the tunnel around what's actually there. IPsec, WireGuard or OpenVPN.
Deliverables
Path measurement report, both directions
Tunnels built and verified, up to 4 sites
Routing and DNS working from inside the tunnel as well as outside
Configuration handover document
Starting at$900
Duration7 days
Tags
Bash
Linux
Nginx
Python
Wireshark
Service provided by
Tanveer Ahmed Dhaka, Bangladesh
- 1
- Followers
Site-to-site VPN that survives NAT, CGNAT and MTUTanveer Ahmed
Starting at$900
Duration7 days
Tags
Bash
Linux
Nginx
Python
Wireshark
Most VPN problems are decided before the tunnel is configured: the path MTU, how the NAT in the middle behaves, which ports actually cross, and how long a quiet mapping survives. Skip that and you get a tunnel that comes up in the lab and drops every four minutes in production.
I measure the path first — MTU in both directions, NAT mapping behaviour, which ports and protocols get through, idle-mapping lifetime, loss and jitter at tunnel-sized packets — then build the tunnel around what's actually there. IPsec, WireGuard or OpenVPN.
Deliverables
Path measurement report, both directions
Tunnels built and verified, up to 4 sites
Routing and DNS working from inside the tunnel as well as outside
Configuration handover document
$900