We’re an ISP offering web providers to clients utilizing multivendor CPEs (Fortirouter, Juniper, Cisco) put in onsite. These CPEs join over a fiber-optic last-mile to the closest Supplier Edge (PE), the place the gateway is configured.
Often, clients report points resembling excessive latency or not reaching their subscribed bandwidth. To deal with these considerations, we certify the last-mile connection utilizing iPerf3 for site visitors and bandwidth evaluation.
Present Course of:
To carry out this certification, we dispatch a technician to the shopper website. The technician connects a PC operating iPerf3 as a consumer and establishes a connection to our iPerf3 server. We briefly add the shopper’s public IP to our firewall to allow communication between the consumer and server.
Problem:
We wish to get rid of the necessity for dispatching technicians onsite. Ideally, we need to conduct the iPerf3 certification remotely, streamlining the method and lowering operational prices.
Proposed Concept:
One potential answer is organising a number of GRE tunnels between our infrastructure and the shopper CPE. With correct routing, this might allow direct communication between the iPerf3 consumer (on the CPE or customer-side community) and our iPerf3 server, with out requiring a bodily technician presence.
Connected is a topology diagram illustrating the proposed setup.
Request for Suggestions:
Has anybody carried out an analogous setup or overcome an analogous problem?
Are GRE tunnels the perfect answer on this situation, or would one other tunneling or routing protocol be more practical?
Any potential pitfalls or safety considerations we should always think about?
We recognize any insights or strategies to refine this strategy.
Thanks prematurely in your time and experience!
Finest regards,