Very slow SMB over VPN

Viewed 3701

access to our server via VPN is extremely slow using the Mac Finder. It will take 20-30 seconds just for the directory contents to be listed. File transfers are also excruciatingly slow.

The configuration:

Server: Asustor NAS AS6302T (ADM version: 3.5.2.RAG2) Router: Telekom Digitalisierungsbox Box Premium (firmware version 11.01.03.103) which is the evil twin of the bintec elmeg be.ip plus

Internet connection: Telekom DeutschlandLAN SIP trunk (100 MBit / s download, 40 MBit / s upload)

VPN connection via Digibox via IKEv1 using the following instructions: https: //archive.bintec-elmeg.com/Files/Weiter_Downloads/Documentation/workshops/current_de/ws_be_IP ...

VPN client: Several MacBook Pros with different OS (e.g. 10.15.7, 10.14.6) - Mac's own VPN client (Cisco IPSec IKEv1)

Client router: various routers, etc. Fritz boxes, Vodafone (Unity Media) boxes, mobile phone hot spots

If VPN is established, the connection to the NAS is established via SMB and is painfully slow. If I access the NAS via HTTP with an existing VPN, the connection is fast. Also when I access via FTP.

My guess is this is somehow related to the SMB connection. I had already read that SMB signing has a major impact on performance. However, the SMB connection in the LAN is fast.

Any ideas where to even look?

1 Answers

A couple of things to consider based on my experience with slightly older systems:

Depending on the age of the NAS, it may be defaulting to SMB version 1. This was usually done for backward compatibility a number of years ago. I believe SMB v3 is the default on Windows and Mac systems these days.

The Mac OS finder by default scans folder contents and .DS_Store files before displaying. On a network share with lots of items this can be painful. The scan can be disabled using something like below. Apple support item included.

[https://support.apple.com/en-au/HT208209][1]

defaults write com.apple.desktopservices DSDontWriteNetworkStores -bool TRUE

In general, I rarely use SMB over VPN like because of the same behaviour you have observed. Once you have a VPN connection, it is better to connect to a remote server and access the NAS from it. Alternatively, use a different technology such as FTP or HTTP, as you mention, to get files on your local machine.

Related