Hello,
After tearing my deployment config into pieces I can tell only one thing
.... TLS Cipher List does not work at all! I do even tried disabling tls in
all components (with tls psk also disabled). The only thing i got was
director crashes ...
Is this feature at least in a basic production shape ?
Regards,
Bart
niedz., 30 gru 2018 o 17:24 Bartek R <bojle...@gmail.com> napisał(a):
> Good afternoon !
>
>
> Yesterday i have installed a small home deployment of Bareos 18.4.1. I
> have found that there is a new feature called TLS-PSK so we do have
> encription enabled by default right now.
>
> Since i run this small home deployment i can afford more liberal security
> approach. Currently jobs are able to generate ~30MB/s of network traffic ,
> while using PSK-AES256-CBC-SHA. I have inspected both sides and Bareos
> server (running dir,sd and catalog) is idle. The second side is
> problematic. It looks like bareos-fd is singlethreaded and this one thread
> is saturating one cpu core.
>
> Since there are couple of components involved i'd like to decrease
> encription strength for data channel only so i can acchieve 1GBit/s once
> again.
>
>
> Could i ask you for advice ?
>
> Is it a right way of finding supported ciphers ?
>
> [root@bareos ~]# openssl ciphers | tr ':' '\n' | grep PSK
> PSK-AES256-CBC-SHA
> PSK-AES128-CBC-SHA
> PSK-3DES-EDE-CBC-SHA
> PSK-RC4-SHA
>
>
> Which configuration option should i change: "TLS Cipher List" or "Pki
> Cipher" ?
>
> I am not using passive communication mode (unless default was changed
> since Bareos 16). Should I put this parameter into Director Client{}
> section ? I have tried this once and director was unable to start ...
>
> Thank You !
> Regards
> Bart
>
> --
> You received this message because you are subscribed to the Google Groups
> "bareos-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to bareos-users+unsubscr...@googlegroups.com.
> To post to this group, send email to bareos-users@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>
--
You received this message because you are subscribed to the Google Groups
"bareos-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to bareos-users+unsubscr...@googlegroups.com.
To post to this group, send email to bareos-users@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
