Patent ID: 11956099
Assignee: 360 IT, UAB
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method for transmitting data over a VPN connection, the method comprising:
receiving, at a VPN concentrator, from a VPN user device, an initiation request of a first connection from the VPN user device to a target communicably coupled to the VPN concentrator, wherein the first connection is initialized to have an initial maximum segment size (MSS) that the VPN user device accepts;
terminating the first connection at the VPN concentrator;
establishing a second connection between the VPN concentrator and the VPN user device, the second connection being across a VPN tunnel between the VPN concentrator and the VPN user device;
establishing a third connection between the VPN concentrator and the target;
setting, by the VPN concentrator, a first MSS for the second connection, wherein the first MSS is set to prevent packet fragmentation that is due to VPN-related encapsulation overhead, wherein the first MSS is different from the initial MSS, and wherein the first MSS is used for transferring data over the second connection;
transmitting the first MSS to the VPN user device;
negotiating, by the VPN concentrator and with the target, a second MSS for transferring data over the third connection;
transmitting, between the VPN concentrator and the VPN user device, first data packets using the first MSS over the second connection;
transmitting, between the VPN concentrator and the target, second data packets using the second MSS over the third connection; and
optimizing transmissions of data packets between the VPN user device and the target, wherein the optimizing comprises:
independently measuring, by the VPN concentrator, a first round trip time (RTT) for the second connection and a second RTT for the third connection;
optimizing parameters of the second connection based on the first RTT; and
optimizing parameters of the third connection based on the second RTT.