Using a VPN Clobbers IE 8 Performance

calendarDecember 7, 2009 in Firefox , HttpWatch , Internet Explorer

A significant change in IE 8 was the increase in the number of active connections per hostname from two to six. This allowed pages with many embedded resources (e.g. images, CSS or JavaScript) to be loaded much more quickly because more requests could be executed in parallel; reducing queuing and the amount of Blocked time seen in HttpWatch:

Six connections per host in IE 8

Recently, we noticed that IE 8 sometimes reverts back to the earlier limit of two connections per hostname. The connectivity enhancements in IE 8 are documented as requiring broadband connections:


But we were seeing the number of active connections being reduced over a fast broadband connection.

Eventually, we found that this occurred whenever a VPN connection was active. Suprisingly, the VPN connection was not actually being used by IE 8 because it did not have the default gateway flag set:


Unchecking this option ensures that only traffic for the target network goes over the VPN connection. Other traffic, such as access to public internet web sites, will go through your normal network connection even when the VPN is connected.

It appears that the dialup/broadband detection in IE 8 is too simplistic. If you are using any non-network card based connection, including VPNs or connections through high speed 3G modems, then IE 8 assumes you are using a slow dialup connection. This applies even if no network traffic from IE 8 goes through the connection.

The effect on performance can be significant. For an unoptimized site that requires lots of round-trips, page load time may be increased by 50% or more. Here’s a screen shot from HttpWatch of this blog being loaded in IE 8:


With a Windows VPN client connected the load time nearly doubles due to the change in connection limiting:

IE 8 Page Load with VPN

This is definitely something to watch out for if you are working remotely using a VPN connection into your office. Fortunately, there are some simple workarounds:

  • Use Firefox as it is not affected by connection speed. It always uses up to six connections per hostname.
  • Use a third party VPN client (e.g. OpenVPN) instead of the standard Windows VPN client. IE 8 shouldn’t detect this as a dialup connection.

5 thoughts on “Using a VPN Clobbers IE 8 Performance

  1. HP says:

    Thanks for pointing this issue out!

    I am pretty sure that you can stop the reduction of ports on a slow connection by overwriting the values with the steps from

    If not with the local reg values — perhaps with the Group policy option as it specifically call out http 1.0

    Unfortunately I do not have access to a VPN connection / nor Dialup that I can test with.

    Are you able to confirm and potentially add an extra solution to the blog?



  2. Frank Ober says:

    Microsoft doesn’t have a patch for this condition, but they do provide a Set of Registry fixes…

    Here is what’s needed.

    3) Improve VPN performance by allowing 6 connections
    a. To configure IE8’s HTTP/1.1 connections to use 6 persistent connections per server:
    b. Key: \SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER
    c. Value: iexplore.exe
    d. Type: REG_DWORD
    e. Data: 6
    g. To configure IE8’s HTTP/1.0 connections to use 6 persistent connections per server:
    h. Key: \SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MAXCONNECTIONSPER1_0SERVER
    i. Value: iexplore.exe
    j. Type: REG_DWORD
    k. Data: 6

  3. Mirelyu says:

    Very interesting.Thanks for information.Very useful.Thanks again.

  4. Very exciting.Thanks for details.Very useful.Thanks again.

Got Something to Say?

Your email address will not be published.

Ready to get started? TRY FOR FREE Buy Now