{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-226-read-a-ras-gre-benchmark-in-the-context-of-its-tcp-session-count/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260908-226-read-a-ras-gre-benchmark-in-the-context-of-its-tcp-session-count/", "slug": "dse-20260908-226-read-a-ras-gre-benchmark-in-the-context-of-its-tcp-session-count", "url": "https://update.dsesecurity.com/updates/dse-20260908-226-read-a-ras-gre-benchmark-in-the-context-of-its-tcp-session-count/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260908-226-read-a-ras-gre-benchmark-in-the-context-of-its-tcp-session-count.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-226-read-a-ras-gre-benchmark-in-the-context-of-its-tcp-session-count/" }, "title": "Read a RAS GRE benchmark in the context of its TCP session count", "summary": "What does the documented RAS Gateway GRE experiment establish about a single TCP flow?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "network-infrastructure", "label": "Networks & infrastructure", "alt": "Resilient network core with engineered blue and gold data paths.", "card_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-08T18:13:25+00:00", "modified_at": "2026-09-08T18:29:34+00:00", "reviewed_on": "2026-09-08", "reading_minutes": 2, "word_count": 237, "potentially_affected": "Administrators interpreting Microsoft's documented Windows Server version 1709 RAS GRE performance experiment.", "dse_recommendation": "Write a benchmark plan that records the TCP session count alongside the GRE gateway configuration.", "primary_source": { "name": "RAS Gateway GRE Tunnel Throughput and Performance", "url": "https://learn.microsoft.com/en-us/windows-server/remote/remote-access/ras-gateway/RAS-Gateway-GRE-Perf", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

The cited Microsoft page reports a non-SDN test environment using Windows Server version 1709. Its gateway VMs are configured with ten cores and eight gigabytes of memory, with one active and one passive gateway. When the experiment changes from multiple TCP sessions to one TCP session, Microsoft reports that only one CPU core reaches maximum capacity on the gateway VMs. Microsoft Learn.

\n

Applicability

\n

Treat the page as a versioned experiment rather than a present-day throughput promise. Compare its gateway role, VM resources, tunnel type, and session count with the system being assessed. Identify whether the actual application uses one sustained flow or many independent flows.

\n

DSE recommendation

\n

Write a benchmark plan that records the TCP session count alongside the GRE gateway configuration. Ask the application owner which flow pattern represents normal and peak use. Keep the active and passive gateway observations separate, and collect per-core evidence instead of only an overall CPU average. Use the historical result to shape questions for a current pilot, not to select an obsolete deployment.

\n

Verification

\n

Run the approved single-flow and multi-flow cases on the current supported platform. Compare per-core utilization and completed application traffic with the stated test conditions. Record the operating-system build and resource settings with every result. Explain differences from the historical experiment rather than reporting its numbers as measurements of the new system.

\n

Official references

\n

Microsoft Learn: RAS Gateway GRE Tunnel Throughput and Performance. Source reviewed September 8, 2026.

", "content_text": "Source facts\nThe cited Microsoft page reports a non-SDN test environment using Windows Server version 1709. Its gateway VMs are configured with ten cores and eight gigabytes of memory, with one active and one passive gateway. When the experiment changes from multiple TCP sessions to one TCP session, Microsoft reports that only one CPU core reaches maximum capacity on the gateway VMs. Microsoft Learn.\nApplicability\nTreat the page as a versioned experiment rather than a present-day throughput promise. Compare its gateway role, VM resources, tunnel type, and session count with the system being assessed. Identify whether the actual application uses one sustained flow or many independent flows.\nDSE recommendation\nWrite a benchmark plan that records the TCP session count alongside the GRE gateway configuration. Ask the application owner which flow pattern represents normal and peak use. Keep the active and passive gateway observations separate, and collect per-core evidence instead of only an overall CPU average. Use the historical result to shape questions for a current pilot, not to select an obsolete deployment.\nVerification\nRun the approved single-flow and multi-flow cases on the current supported platform. Compare per-core utilization and completed application traffic with the stated test conditions. Record the operating-system build and resource settings with every result. Explain differences from the historical experiment rather than reporting its numbers as measurements of the new system.\nOfficial references\nMicrosoft Learn: RAS Gateway GRE Tunnel Throughput and Performance. Source reviewed September 8, 2026.", "content_markdown": "## Source facts\n\nThe cited Microsoft page reports a non-SDN test environment using Windows Server version 1709. Its gateway VMs are configured with ten cores and eight gigabytes of memory, with one active and one passive gateway. When the experiment changes from multiple TCP sessions to one TCP session, Microsoft reports that only one CPU core reaches maximum capacity on the gateway VMs. [Microsoft Learn](https://learn.microsoft.com/en-us/windows-server/remote/remote-access/ras-gateway/RAS-Gateway-GRE-Perf).\n\n## Applicability\n\nTreat the page as a versioned experiment rather than a present-day throughput promise. Compare its gateway role, VM resources, tunnel type, and session count with the system being assessed. Identify whether the actual application uses one sustained flow or many independent flows.\n\n## DSE recommendation\n\nWrite a benchmark plan that records the TCP session count alongside the GRE gateway configuration. Ask the application owner which flow pattern represents normal and peak use. Keep the active and passive gateway observations separate, and collect per-core evidence instead of only an overall CPU average. Use the historical result to shape questions for a current pilot, not to select an obsolete deployment.\n\n## Verification\n\nRun the approved single-flow and multi-flow cases on the current supported platform. Compare per-core utilization and completed application traffic with the stated test conditions. Record the operating-system build and resource settings with every result. Explain differences from the historical experiment rather than reporting its numbers as measurements of the new system.\n\n## Official references\n\n[Microsoft Learn: RAS Gateway GRE Tunnel Throughput and Performance](https://learn.microsoft.com/en-us/windows-server/remote/remote-access/ras-gateway/RAS-Gateway-GRE-Perf). Source reviewed September 8, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260908-226-read-a-ras-gre-benchmark-in-the-context-of-its-tcp-session-count/", "url": "https://update.dsesecurity.com/updates/dse-20260908-226-read-a-ras-gre-benchmark-in-the-context-of-its-tcp-session-count/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-08" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260908-226-read-a-ras-gre-benchmark-in-the-context-of-its-tcp-session-count/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Read a RAS GRE benchmark in the context of its TCP session count", "item": "https://update.dsesecurity.com/updates/dse-20260908-226-read-a-ras-gre-benchmark-in-the-context-of-its-tcp-session-count/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260908-226-read-a-ras-gre-benchmark-in-the-context-of-its-tcp-session-count/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260908-226-read-a-ras-gre-benchmark-in-the-context-of-its-tcp-session-count/", "url": "https://update.dsesecurity.com/updates/dse-20260908-226-read-a-ras-gre-benchmark-in-the-context-of-its-tcp-session-count/", "headline": "Read a RAS GRE benchmark in the context of its TCP session count", "description": "What does the documented RAS Gateway GRE experiment establish about a single TCP flow?", "abstract": "What does the documented RAS Gateway GRE experiment establish about a single TCP flow?", "articleBody": "Source facts\nThe cited Microsoft page reports a non-SDN test environment using Windows Server version 1709. Its gateway VMs are configured with ten cores and eight gigabytes of memory, with one active and one passive gateway. When the experiment changes from multiple TCP sessions to one TCP session, Microsoft reports that only one CPU core reaches maximum capacity on the gateway VMs. Microsoft Learn.\nApplicability\nTreat the page as a versioned experiment rather than a present-day throughput promise. Compare its gateway role, VM resources, tunnel type, and session count with the system being assessed. Identify whether the actual application uses one sustained flow or many independent flows.\nDSE recommendation\nWrite a benchmark plan that records the TCP session count alongside the GRE gateway configuration. Ask the application owner which flow pattern represents normal and peak use. Keep the active and passive gateway observations separate, and collect per-core evidence instead of only an overall CPU average. Use the historical result to shape questions for a current pilot, not to select an obsolete deployment.\nVerification\nRun the approved single-flow and multi-flow cases on the current supported platform. Compare per-core utilization and completed application traffic with the stated test conditions. Record the operating-system build and resource settings with every result. Explain differences from the historical experiment rather than reporting its numbers as measurements of the new system.\nOfficial references\nMicrosoft Learn: RAS Gateway GRE Tunnel Throughput and Performance. Source reviewed September 8, 2026.", "datePublished": "2026-09-08T18:13:25+00:00", "dateModified": "2026-09-08T18:29:34+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260908-226-read-a-ras-gre-benchmark-in-the-context-of-its-tcp-session-count/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260908-226-read-a-ras-gre-benchmark-in-the-context-of-its-tcp-session-count/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Read a RAS GRE benchmark in the context of its TCP session count" }, "articleSection": [ "IT", "Networks & Infrastructure" ], "keywords": [ "IT", "Networks & Infrastructure", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 237, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "RAS Gateway GRE Tunnel Throughput and Performance", "url": "https://learn.microsoft.com/en-us/windows-server/remote/remote-access/ras-gateway/RAS-Gateway-GRE-Perf" } } ] } }