Multi-part TCP connection over VPN

A system, comprising:

• one or more memories;
• and
• one or more processors, the one of more processors configured to execute instructions stored in the one or more memories to:
• based on an initiation request received at a VPN concentrator for a first connection from a Virtual Private Network (VPN) user device intended for a target:
• establish a second connection between the VPN concentrator and the VPN user device across a VPN tunnel, wherein the second connection is established with a first Maximum Segment Size (MSS) used for transmitting first data packets between the VPN concentrator and the VPN user device;
• and
• establish a third connection between the VPN concentrator and the target, wherein the third connection is established with a second MSS used for transmitting second data packets between the VPN concentrator and the target;
• measure a first round trip time (RTT) for the second connection;
• measure a second RTT for the third connection;
• and
• optimize first parameters of the second connection and second parameters of the third connection, wherein the first parameters of the second connection are optimized based on the first RTT, and wherein the second parameters of the third connection are optimized based on the second RTT, and wherein to optimize comprises to set one of the first parameters or one of the second parameters to compensate for encryption-related packet expansion in the VPN tunnel.

One or more non-transitory computer readable media storing instructions operable to cause one or more processors to perform operations comprising:

• based on an initiation request received at a VPN concentrator for a first connection from a Virtual Private Network (VPN) user device intended for a target:
• establishing a second connection between the VPN concentrator and the VPN user device across a VPN tunnel, wherein the second connection is established with a first Maximum Segment Size (MSS) used for transmitting first data packets between the VPN concentrator and the VPN user device;
• and
• establishing a third connection between the VPN concentrator and the target, wherein the third connection is established with a second MSS used for transmitting second data packets between the VPN concentrator and the target;
• measuring a first round trip time (RTT) for the second connection;
• measuring a second RTT for the third connection;
• and
• optimizing first parameters of the second connection and second parameters of the third connection, wherein the first parameters of the second connection are optimized based on the first RTT, and wherein the second parameters of the third connection are optimized based on the second RTT, and wherein the optimizing sets one of the first parameters or one of the second parameters to compensate for encryption-related packet expansion in the VPN tunnel.