There is no cost effective solution that I've been able to find. You can buy private lines to HK from China. DYXNet gave me a quote for a 1M South China/HK 1Mb line, including the router, 1M international in HK and 8IPs at roughly 1000USD setup and 1000USD/mth. You'd have to find another provider for HK to NZ. On top of the VPN via HK, the best option so far is centralizing shared services to some where like US, HK or Singapore. Or splitting into traffic into multiple streams: TLS/SSL, SSH. One trick I used was to package putty with a ssh private key by Xenocode. Running this created a localhost host tunnel, which I trained the users to run once before accessing the business app. Work in progress, if you figure out a better method I'd be interested. Nicholas On Tue, Apr 20, 2010 at 10:46 AM, Stephen Sheehan <Stephen(a)lostangel.geek.nz
wrote:
Hi Everyone.
Does anyone have experience getting good connectivity out of China to NZ without breaking the bank.
We are currently bouncing our connection thru a VPN tunnel in HK to control the egress path out of China, as traffic to our NZ pop otherwise goes via the US. We are only using commodity DSL internet connections at our China site so have no influence there.
Looking around the options I am seeing would be going to the likes of Asia Netcom and Verizon, who can provide connectivity to our Chinese site and control the egress path and route it via a reasonably direct path down to NZ.
Are there any other options out there, currently we are seeing around 190ms rtt with the VPN bounce off of HK hack, but would prefer a simpler way of doing it.
Currently our Chinese office has connections to: China Telecom AS4134 CNCGROUP AS17623
NZ office Maxnet AS9889 Swizzle AS45181
Cheers
Stephen _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog