ssh.com v3.2.9.1 slow performance with ftp over ssh port forwarding?

From: Thorsten Peter (peter_at_rz-zw.fh-kl.de)
Date: 12/29/03

  • Next message: Rajesh: "ssh using plink.exe giving "Unable to open connection: gethostbyname :unknown error""
    Date: Mon, 29 Dec 2003 17:45:53 +0100
    
    

    Hi,

    i am using a ssh port forwarded tunnel to secure a ftp connection between 2
    linux boxes.
    both run the same ssh version, mentioned in subject.

    what i do is:

    ssh -l username remotehost -L ftp/10001:localhost:21

    ftp/ should ensure that the data channel is encrypted via the tunnel as
    well, not only the control channel.

    anyways, i got a 3 mbit dsl line here, and am not able to get more than
    210KByte/sec over the forwarded ftp connection. i treid the same setup to
    other machines as well, same results. i tried changing the ciphers,
    performance stays the same. i mean i would expect some overhead, but not
    anything near 100%, cause if i do regular ftp transfer to that remote box i
    get a constant speed of around 355 KByte/sec.
    i also tried using SFTP, which also gives me about 350 Kbyte/sec.....
    anyways, for certain reasons, i need the ftp connect through a port forward
    tunnel, otherwise i'd stick with SFTP.
    can anyone tell me if there are certain tweaks or config settings for port
    forwarding that improve performance? or is it really a simple overhead
    problem, and nothing can be done about it?

    thanks for any help ...

    Thorsten


  • Next message: Rajesh: "ssh using plink.exe giving "Unable to open connection: gethostbyname :unknown error""

    Relevant Pages

    • Re: SSH Port forwarding
      ... But what happens is it directly logged into the remotehost which I ... I want the user to get only the info through the port 5566 ... that tunnel to connect, then use the -g option while forwarding. ...
      (comp.security.ssh)
    • Re: Configure ISA to allow ISA Server to make external FTP Connection
      ... > They know IP, protocol, direction and port. ... > allow the FTP connection but only to a particular domain? ... I am trying to configure ISA to allow the ISA Server itself to make ...
      (microsoft.public.isa.configuration)
    • Re: Configure ISA to allow ISA Server to make external FTP Connection
      ... They know IP, protocol, direction and port. ... allow the FTP connection but only to a particular domain? ... the FTP server should be making the data connections to your ISA ...
      (microsoft.public.isa.configuration)
    • Re: SFTP Limited Availability
      ... I made was for it to use port 21 instead of port 22, ... Network error: Connection reset by peer ... In order to handle it most firewalls need to inspect the content of the control channel in order to know what other ports a given FTP connection needs. ... I suspect that your firewall is inspecting the connection on port 21 and waiting for it to behave like an FTP connection and eventually gives up and kills the connection. ...
      (SSH)
    • Re: SFTP Limited Availability
      ... The paperwork is in for getting port 22 opened. ... On Nov 6, 2006, at 5:23 PM, Darren Tucker wrote: ... In order to handle it most firewalls need to inspect the content of the control channel in order to know what other ports a given FTP connection needs. ... I suspect that your firewall is inspecting the connection on port 21 and waiting for it to behave like an FTP connection and eventually gives up and kills the connection. ...
      (SSH)