[OmniOS-discuss] Slow ssh transfers

[Martin Waldenvik]

On 10/12/2016 04:53 PM, Dale Ghent wrote:
>
>> On Oct 12, 2016, at 10:45 AM, Martin Waldenvik <waldenvik at gmx.com> wrote:
>>
>> On 10/12/2016 04:37 PM, Dan McDonald wrote:
>>>
>>>> On Oct 12, 2016, at 10:21 AM, Martin Waldenvik <waldenvik at gmx.com> wrote:
>>>>>
>>>> Thank you so much Guo-Rong for your help. When i changed from:
>>>> Ciphers chacha20-poly1305 at openssh.com,aes256-gcm at openssh.com,aes128-gcm at openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
>>>>
>>>> to Ciphers aes256-gcm at openssh.com,aes128-gcm at openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
>>>>
>>>> I get full speed. I am so happy for this.
>>>
>>> I'm curious about one thing.  Are your ciphers on FreeBSD pre-set to the reduced list (i.e. no chacha) by default?  Or does chacha20 run faster on FreeBSD?
>>>
>>> Thanks,
>>> Dan
>>>
>>
>> Hi Dan
>>
>> I have used those ciphers in that order on all my servers and it works in full speed i both freebsd and linux but not in Omnios.
>>
>> I have configured my ssh-servers as recommended here:
>>
>> https://stribika.github.io/2015/01/04/secure-secure-shell.html
>
> Can you provide the output of 'ssh -Q cipher' from both your FreeBSD and OmniOS boxes?
>
> /dale
>

Hi

Seems to be the same

Omnios box - ssh -Q cipher
3des-cbc
blowfish-cbc
cast128-cbc
arcfour
arcfour128
arcfour256
aes128-cbc
aes192-cbc
aes256-cbc
rijndael-cbc at lysator.liu.se
aes128-ctr
aes192-ctr
aes256-ctr
aes128-gcm at openssh.com
aes256-gcm at openssh.com
chacha20-poly1305 at openssh.com


FreeBSD box - ssh -Q cipher:
3des-cbc
blowfish-cbc
cast128-cbc
arcfour
arcfour128
arcfour256
aes128-cbc
aes192-cbc
aes256-cbc
rijndael-cbc at lysator.liu.se
aes128-ctr
aes192-ctr
aes256-ctr
aes128-gcm at openssh.com
aes256-gcm at openssh.com
chacha20-poly1305 at openssh.com