Re: Gigabit Ethernet, and Linux -- first observations

On Thu, 13 Sep 2007 19:07:39 +1000, Darren Tucker <dtucker@xxxxxxxxxxxxxxxx> wrote:
On 2007-09-13, Darren Tucker <dtucker@xxxxxxxxxxxxxxxx> wrote:
Try it by all means, but don't be surprised if it makes little difference
on a LAN.

Oh, one thing that will name a difference: using the patch on the HPN
page that allows the "none" cipher. It will reduce the CPU usage, and
that might or might not make a difference to the throughput depending
on what the limiting factor is at that point.

Some symmetric ciphers are surprisingly cheap on modern hardware.
My four year old laptop (1.3GHz Pentium M) reports ~186 MByte/s for
arcfour (via "openssl speed rc4").


You know, I can get about 50 MegaBYTES per second using arcfour128. I
am tempted to just declare it a victory and move on. So what if I do
not get a full speed. Maybe I will do some hack allowing HTTP
transfers of those files (movies mostly).

I am a little leery of patching SSH for any reason. I have a colocated
web operation that makes money for me, etc, and ssh is central in
managing it, there is also a lot of SSH-ing that goes on behind the
scenes as well, I am very afraid of screwing something up here.

The nice thing about SSH is that "it works", every time. (except for
the annoying port forwarding problem)

i
.

Relevant Pages

  • Re: Gigabit Ethernet, and Linux -- first observations
    ... one thing that will name a difference: using the patch on the HPN ... page that allows the "none" cipher. ... Good judgement comes with experience. ...
    (comp.security.ssh)
  • Re: Gigabit Ethernet, and Linux -- first observations
    ... difference on a LAN. ... one thing that will name a difference: using the patch on the HPN ... page that allows the "none" cipher. ...
    (comp.security.ssh)
  • Re: 30GB file transfers using scp
    ... Do you only get the error message when specifying the Blowfish cipher? ... Which versions of SSH are you talking about, ... I would try to find out what's breaking your scp first. ...
    (SSH)
  • Re: 128 bit WEP
    ... How much security do its owners really have? ... A weak cipher is worse than no ... authentication on the ssh connections and don't allow root access on ssh. ...
    (comp.os.linux.networking)
  • Re: [ANN] Acrypto asynchronous crypto layer 2.6.19 release.
    ... possibility to use software crypto provider, which supports one cipher ... that was with the 2.6.18 patch, no idea if it is different now. ... so while the patch adds new features, it also removes some features - ...
    (Linux-Kernel)