Re: Compile libssl or make ssh not slow
On Tue, Sep 10, 2002 at 07:05:59AM -0600, Mark Zimmerman wrote: > In addition to the other suggestions that were made in this thread, it > is useful to specify the blowfish cipher to speed things up on slower > machines. Here is a sample .ssh/config entry that helps: I will consider that. Btw the new deb is now installed and I notice a considerable speed improvement. Thanks to all who jumped in and helped. Bob
Re: Compile libssl or make ssh not slow
In addition to the other suggestions that were made in this thread, it is useful to specify the blowfish cipher to speed things up on slower machines. Here is a sample .ssh/config entry that helps: Host dog-slow Cipher blowfish Compression no I have found that the initial connection time is cut in half by using these settings. -- Mark
Re: Compile libssl or make ssh not slow
* Roger Burton West <[EMAIL PROTECTED]> [020910 02:39]: > http://lists.debian.org/debian-sparc/2002/debian-sparc-200203/msg00189.html > > gives the details and a pre-built unofficial package. An official change > will mean cutting off support for those older machines... And in case anyone needs it, I'm keeping the stuff also at http://sparclinux.net/pub/debian/ these days...
Re: Compile libssl or make ssh not slow
On Tue, Sep 10, 2002 at 10:39:19AM +0100, Roger Burton West wrote: > Read the archives! Robert was entirely correct in his initial diagnosis: > libssl is slower than it needs to be, through retaining compability with > older architectures. > > http://lists.debian.org/debian-sparc/2002/debian-sparc-200203/msg00189.html Thanks, that is just what I needed. In fact I had gotten as far as finding the debian-sparc stanza in Configure myself. However that line looked rather evil to me, with all the different gcc options. Since I wasn't sure if it mattered where exactly on the line I'd put the -mv8 flag, I turned to the lists. I'll apt-get a new source tree and compile it later today. By the way, I did search the archives but I never manage to find information quickly in them. The search engine or its interface is just not very friendly. Unfortunately using Google, the message you refer to didn't come up in the first couple of hundred results. Bob
Re: Compile libssl or make ssh not slow
Zitiere Bert Lindner <[EMAIL PROTECTED]>: > Hi Robert, > > On Tue, 10 Sep 2002, Robert Ian Smit wrote: > > > > > What is the easy solution to make ssh a bit faster on sun4m? > > > > > > Use the -C when opening an ssh session. > > > ssh -C -l user host. > > > > The -C option deals with compression if I am not mistaken. Perhaps I > > wasn't clear in my original message, but once the session is > > established I have no problem at all. It's the process of logging in > > that takes 10 seconds or so. > > This is probably a DNS resolve-issue: sshd cannot find a hostname for > the > IP address you connect from. The resolving process slows your > inititial > connection. Try adding the IP-address and some (bogus) hostname for > the > machine you connect /from/ (client) to /etc/hosts on the machine you > connect /to/ (server). Or have reverse DNS fixed. This could be a reason, too. But it is true that that connecting to/from a sparc machine tooks very long with ssh. To get it faster it is possible to recompile some packages with v8 or v9 flags. The exact details are somewhere on this list. I tried it and had improvements about 5x - 10x faster. Bye > I thought it was also possible to disable reverse name lookups for > sshd > but can't find it quickly in the man pages. > > Regards, > > -Bert > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > -- Hakan Kuecuekyilmaz, University of Applied Sciences Esslingen Germany <[EMAIL PROTECTED]> - This mail sent through IMP: webmail.fht-esslingen.de
Re: Compile libssl or make ssh not slow
On or about Tue, Sep 10, 2002 at 11:33:37AM +0200, Bert Lindner typed: >This is probably a DNS resolve-issue: sshd cannot find a hostname for the >IP address you connect from. The resolving process slows your inititial >connection. Try adding the IP-address and some (bogus) hostname for the >machine you connect /from/ (client) to /etc/hosts on the machine you >connect /to/ (server). Or have reverse DNS fixed. Read the archives! Robert was entirely correct in his initial diagnosis: libssl is slower than it needs to be, through retaining compability with older architectures. http://lists.debian.org/debian-sparc/2002/debian-sparc-200203/msg00189.html gives the details and a pre-built unofficial package. An official change will mean cutting off support for those older machines... Roger
Re: Compile libssl or make ssh not slow
Hi Robert, On Tue, 10 Sep 2002, Robert Ian Smit wrote: > > > What is the easy solution to make ssh a bit faster on sun4m? > > > > Use the -C when opening an ssh session. > > ssh -C -l user host. > > The -C option deals with compression if I am not mistaken. Perhaps I > wasn't clear in my original message, but once the session is > established I have no problem at all. It's the process of logging in > that takes 10 seconds or so. This is probably a DNS resolve-issue: sshd cannot find a hostname for the IP address you connect from. The resolving process slows your inititial connection. Try adding the IP-address and some (bogus) hostname for the machine you connect /from/ (client) to /etc/hosts on the machine you connect /to/ (server). Or have reverse DNS fixed. I thought it was also possible to disable reverse name lookups for sshd but can't find it quickly in the man pages. Regards, -Bert
Re: Compile libssl or make ssh not slow
On Tue, Sep 10, 2002 at 09:59:35AM +0200, Daniel K. Gebhart wrote: > > Using ssh to login to my Sun SS4 is really slow. I have found some > > information here and there that makes me want to recompile libssl. > > I've also got a SS4. But there is NetBSD running on it. (SSH runs quit > fast on it.) I tried OpenBSD and although I liked it, the SS4 is too slow for me having to deal with source distribution for everything. Besides since I use the Sparc as a gateway, I like to use Debian for it's easier and hence in my case safer and more secure admininstration. > > What is the easy solution to make ssh a bit faster on sun4m? > > Use the -C when opening an ssh session. > ssh -C -l user host. The -C option deals with compression if I am not mistaken. Perhaps I wasn't clear in my original message, but once the session is established I have no problem at all. It's the process of logging in that takes 10 seconds or so. As I understand it, Debian compiles ssl to work on very old hardware as well. This disables support for some features on newer hardware. Crypto seems to suffer from that. I did compile libssl but I believe I have basically the same binary because of not supplying the right parms (or in the right place). Ofcourse I forgot to exactly time before and after installing a new version of libssl, so I can't be sure. Maybe this is the best possible performance I can get. How long does it take to establish a session on a local network using ssh? I compare to i386 systems and there is a world of difference. Bob
Re: Compile libssl or make ssh not slow
Robert Ian Smit <[EMAIL PROTECTED]> schrieb am Tue, Sep 10, 2002 at 09:48:09AM
+0200:
> Using ssh to login to my Sun SS4 is really slow. I have found some
> information here and there that makes me want to recompile libssl.
I've also got a SS4. But there is NetBSD running on it. (SSH runs quit
fast on it.)
> What is the easy solution to make ssh a bit faster on sun4m?
Use the -C when opening an ssh session.
ssh -C -l user host
hth,
#dkg
--
# Schwanzlaengenvergleich ;)
echo `uptime|grep days|sed 's/.*up \([0-9]*\) day.*/\1\/10+/'; \
cat /proc/cpuinfo|grep MHz|awk '{print $4"/30 +";}'; free|grep '^Mem' \
|awk '{print $3"/1024/3+"}'; df -P -k -x nfs | grep -v 1k \
| awk '{if ($1 ~ "/dev/(scsi|sd)"){ s+= $2} s+= $2;} END \
{print s/1024/50"/15+70";}'`|bc|sed 's/\(.$\)/.\1cm/'
Compile libssl or make ssh not slow
Using ssh to login to my Sun SS4 is really slow. I have found some information here and there that makes me want to recompile libssl. I gave it a try and asked some questions, as documented in debian-user. Alas, nobody there seemed to be able to help me. What is the easy solution to make ssh a bit faster on sun4m? I have found some unofficial debs but I'd rather stick to official sources. Grepping the source package has given me some clues, but most of it is above me. I believe adding an -mv8 flag to gcc would help me a lot, but I am not sure where to put it to have all "layers of magic" work. I'd be happy to repost my original questions here if someone is willing to lend a hand. Bob
