High Latency Observed with FortiClient IPSec (EMS) over Starlink

Hello AfsanehRostami, 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Hello,

We are still looking for an answer to your question.

We will come back to you ASAP.

Hi again AfsanehRostami,

I found a solution, can you tell us if it helps, please?

Understanding High Latency with FortiClient IPSec over Starlink

High latency can significantly affect the performance of VPN connections, including those established using FortiClient IPSec. When users experience high latency over Starlink, several factors could be contributing to this issue:

Factors Contributing to High Latency

1. Physical Distance: The distance between the user and the VPN gateway can introduce latency. This is particularly relevant for satellite internet services like Starlink, where signals must travel to and from satellites in orbit.

2. Routing and ISP Factors: The routing path taken by the data through various ISPs can add to the latency. Starlink's network architecture and the routing decisions made by intermediate ISPs can impact latency.

3. Network Congestion: High usage periods or network congestion on Starlink's network can lead to increased latency.

4. VPN Configuration: The configuration of the FortiClient IPSec VPN, including encryption settings and gateway location, can also affect latency.

Evaluating VPN Performance

To assess and potentially mitigate the high latency, consider the following steps:

• Ping and Traceroute: Use tools like ping, traceroute, or mtr to test the latency to the VPN gateway IP address or FQDN. This can help identify where the latency is being introduced.

• Latency Thresholds:

  • Ideal: < 20 ms
  • Acceptable: 20-60 ms
  • High: 60-100 ms
  • Extreme: > 100 ms

  Compare your observed latency against these thresholds to determine the impact on performance.

Potential Solutions

• Optimize VPN Configuration: Review and optimize the VPN settings for performance. This might include adjusting encryption levels or selecting a closer VPN gateway.

• Network Optimization: Work with Starlink or your ISP to understand and potentially optimize the routing paths.

• Load Balancing: Consider using multiple internet connections to balance the load and reduce latency.

Follow-ups and Clarification Questions

• Have you performed any latency tests using ping, traceroute, or mtr? This information can help pinpoint where the latency is occurring.

• What are the typical latency values observed? Knowing the specific latency values can help in assessing the severity of the issue.

• Have there been any recent changes to the VPN configuration or network setup? Changes might have inadvertently affected performance.

• Is the high latency consistent across all users on Starlink, or does it vary? This can help determine if the issue is network-wide or user-specific.