[pve-devel] High Performance SSH

Andreas Steinel a.steinel at gmail.com
Fri May 29 00:26:12 CEST 2015


A little bit off-topic, but there is hope:

This week, I almost saturated a 1 Gbit network link between two brand new
Dell Servers with 3.2 GHz Xeon E5-2667v3 CPUs. I got 105 MB/sec using
standard SSH/SCP. So we finally have single-thread-performance that is fast
enough for encryption on gigabit. Parallel encryption in threads would
still be desirable.


On Thu, May 28, 2015 at 12:55 PM, dea <dea at corep.it> wrote:

>
> > I don't think it is wise to play with security-related software in
> > the stack. If OpenBSD and Debian (or for the matter all the other
> > distros) haven't applied those patches, I'm sure there is some
> > reason, although maybe it being only "uncertainty".
>
> Yes, is true.
>
> But I think that from an uncrypted connection (from cluster nodes) and a
> maybe
> insecure ssh patched connection there is a lot of difference.
>
> We can use a patched ssh connection on special port only to connect nodes
> (live migration, etc), than use a standard Debian ssh daemon on standard
> port
> to admin the cluster.
> _______________________________________________
> pve-devel mailing list
> pve-devel at pve.proxmox.com
> http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.proxmox.com/pipermail/pve-devel/attachments/20150529/494720ff/attachment.htm>


More information about the pve-devel mailing list