Slow File Transfer over Cisco VPN with Tomato QoS

I recently upgraded my Linksys E2000 router to Tomato Firmware v1.28.7507 MIPSR2Toastman-RT K26 VLAN-VPN. This includes quite a few default QoS rules.

Today I connected to a customer network using Cisco AnyConnect VPN software, then used Windows Explorer to copy an 40MB file over the VPN. The transfer was extremely slow, averaging under 8 KB/second, which would take over an hour to transfer 40MB.

In Tomato, under QoS > View Details, I saw that there was a lot of data going to UDP port 443. The IP address matched the VPN connection point. The class was Crawl, i.e. the very slowest speed (limited under QoS > Basic Settings to 1% – 5% of outbound bandwidth). Basically, because the traffic was UDP, it was falling through to the very last rule under QoS > Classification:

Tomato QoS 1

Looking up the Classification list a bit, I saw that there was a rule designed to identify file transfers on ports 80, 443, or 8080, but it was restricted to TCP only:

Tomato QoS 2

I changed that rule to include both TCP and UDP:

Tomato QoS 3

After that, the VPN file transfer was correctly classified as FileXfer, which is allowed to use 5% – 70% of the bandwidth:

Tomato QoS 4

This allowed the transfer to zip along at almost 100 KB/sec, or 7 minutes to transfer 40MB.

1 thought on “Slow File Transfer over Cisco VPN with Tomato QoS

  1. Pingback: Complex QOS rules considered harmful | nelsonslog

Leave a Reply

Your email address will not be published. Required fields are marked *

Notify me of followup comments via e-mail. You can also subscribe without commenting.

This site uses Akismet to reduce spam. Learn how your comment data is processed.