There is no cost effective solution that I've been able to find.

You can buy private lines to HK from China.�DYXNet gave me a quote for a 1M South China/HK 1Mb line, including the router, 1M international in HK and 8IPs at roughly 1000USD setup and 1000USD/mth. �You'd have to find another provider for HK to NZ.

On top of the VPN via HK, the best option so far is�centralizing�shared services to some where like US, HK or Singapore. Or�splitting�into traffic into multiple streams: TLS/SSL, SSH. One trick I used was to package putty with a ssh private key by Xenocode. Running this created a localhost host tunnel, which I trained the users to run once before�accessing�the business app. �

Work in progress, if you figure out a better method I'd be interested.

Nicholas

On Tue, Apr 20, 2010 at 10:46 AM, Stephen Sheehan <Stephen@lostangel.geek.nz> wrote:
Hi Everyone.

Does anyone have experience getting good connectivity out of China to
NZ without breaking the bank.

We are currently bouncing our connection thru a VPN tunnel in HK to
control the egress path out of China, as traffic to our NZ pop
otherwise goes via the US. We are only using commodity DSL internet
connections at our China site so have no influence there.

Looking around the options I am seeing would be going to the likes of
Asia Netcom and Verizon, who can provide connectivity to our Chinese
site and control the egress path and route it via a reasonably direct
path down to NZ.

Are there any other options out there, currently we are seeing around
190ms rtt with the VPN bounce off of HK hack, but would prefer a
simpler way of doing it.


Currently our Chinese office has connections to:
China Telecom AS4134
CNCGROUP � � AS17623


NZ office
Maxnet AS9889
Swizzle AS45181


Cheers

Stephen
_______________________________________________
NZNOG mailing list
NZNOG@list.waikato.ac.nz
http://list.waikato.ac.nz/mailman/listinfo/nznog