A little bit off-topic, but there is hope: This week, I almost saturated a 1 Gbit network link between two brand new Dell Servers with 3.2 GHz Xeon E5-2667v3 CPUs. I got 105 MB/sec using standard SSH/SCP. So we finally have single-thread-performance that is fast enough for encryption on gigabit. Parallel encryption in threads would still be desirable.
On Thu, May 28, 2015 at 12:55 PM, dea <d...@corep.it> wrote: > > > I don't think it is wise to play with security-related software in > > the stack. If OpenBSD and Debian (or for the matter all the other > > distros) haven't applied those patches, I'm sure there is some > > reason, although maybe it being only "uncertainty". > > Yes, is true. > > But I think that from an uncrypted connection (from cluster nodes) and a > maybe > insecure ssh patched connection there is a lot of difference. > > We can use a patched ssh connection on special port only to connect nodes > (live migration, etc), than use a standard Debian ssh daemon on standard > port > to admin the cluster. > _______________________________________________ > pve-devel mailing list > pve-devel@pve.proxmox.com > http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel >
_______________________________________________ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
