Live data from Hacker News

Viewing profile — rapier1

rapier1

HN member
Joined
Mon, Sep 29, 2014, 10:02 PM UTC
HN karma
32
Public activity
19 items

About rapier1

No profile information was provided.

Recent public activity

  1. comment
    Comment #46316304

    I fully understand that. We're using this, along with parsyncfp2 (which you should checkout) to move 1.5PB of data a month across a 40Gb link. Not saying that HPN-SSH is only usefu…

  2. comment
    Comment #46294087

    It's still possible but we only suggest doing it on private known secure networks or when it's data you don't care about. Authentication is still fully encrypted - we just rekey po…

  3. comment
    Comment #46294017

    If you want to see the impact that the flow control buffer size has on OpenSSH I put up a graph based on data collected last week. Basically, it has a huge impact on throughput. ht…

  4. comment
    Comment #46293968

    Keep in mind that SCP/SSH might be faster in some cases than SFTP but in both cases it is still limited to a 2MB application layer receive window which is drastically undersized in…

  5. comment
    Comment #46292018

    to be honest, there was a period of time in about 2010 or 2012 where I simply wasn't maintaining it as well as I should have been. I wouldn't have upstreamed it then either. That's…

  6. comment
    Comment #46291944

    We've been looking at using QUIC as the transport layer in HPN-SSH. It's more of a pain that you might think because it breaks the SSH authentication paradigm and requires QUIC lay…

  7. comment
    Comment #46291904

    Yeah, it's an issue because there is also the per channel application layer flow control. So when you are using SFTP you have the TCP flow control, the SSH layer flow control, and …

  8. comment
    Comment #46291825

    More than 2 decades at this point. The primary reasons is that the full patch set would be a burden for them to integrate and they don't prioritize performance for bulk data transf…

  9. comment
    Comment #46291751

    For Gentoo I should put you in touch with my co-developer. He's active in Gentoo and has been maintaining a port for it. I'll point him at this conversation. That said, documentati…

  10. comment
    Comment #46291685

    Rsync commonly uses SSH as the transport layer so it won't necessarily be any faster than SFTP unless you are using the rsync daemon (usually on port 873). However, the rsync daemo…

  11. comment
    Comment #46290776

    I'm the lead developer. I can go into this a bit more when I get from an appointment if people are interested.

  12. comment
    Comment #46290767

    The parallel ciphers are built using OpenSSL primitives. We aren't reimplementing the cipher itself in anyway. Since counter ciphers use an atomically increasing counter you can pr…

  13. comment
    Comment #46290730

    The bottleneck in SSH is entirely on the receiving side. So as long at the receiver is using HPN-SSH you will see some performance improvements if the BDP of the path exceeds 2MB. …

  14. comment
    Comment #46290694

    Concern about it being less secure is fully justified. I'm the lead developer and have been for the past 20 years. I'm happy to answer any questions you might happen to have.

  15. comment
    Comment #46290671

    I do want to say that HPN-SSH is also well audited; you can see the results of CI tests on the github. We also do fuzz testing, static analysis, extensive code reviews, and functio…

  16. comment
    Comment #8385644

    Honestly, I'm not aware of these connection problems. If you have any further information please send it to hpn-ssh@psc.edu.

  17. comment
    Comment #8385614

    The main problem is that the internal buffer size for OpenSSH is limited to 2MB (actually it's closer to 1.25MB in real world terms). This is pretty good for a lot of home users. H…

  18. comment
    Comment #8385598

    I am the author. Honestly, I initially released them without any sort of license - entirely free from any sort of license restriction. People don't seem to understand that so I sai…

  19. comment
    Comment #8385584

    Could you tell me what sort of problems you were experiencing? I'm more than happy to take bug reports at hpn-ssh@psc.edu.