Viewing profile — rapier1
rapier1
HN member- Joined
- Mon, Sep 29, 2014, 10:02 PM UTC
- HN karma
- 32
- Public activity
- 19 items
- HN profile
- View on Hacker News ↗
About rapier1
No profile information was provided.
Recent public activity
-
comment
Comment #46316304
I fully understand that. We're using this, along with parsyncfp2 (which you should checkout) to move 1.5PB of data a month across a 40Gb link. Not saying that HPN-SSH is only usefu…
-
comment
Comment #46294087
It's still possible but we only suggest doing it on private known secure networks or when it's data you don't care about. Authentication is still fully encrypted - we just rekey po…
-
comment
Comment #46294017
If you want to see the impact that the flow control buffer size has on OpenSSH I put up a graph based on data collected last week. Basically, it has a huge impact on throughput. ht…
-
comment
Comment #46293968
Keep in mind that SCP/SSH might be faster in some cases than SFTP but in both cases it is still limited to a 2MB application layer receive window which is drastically undersized in…
-
comment
Comment #46292018
to be honest, there was a period of time in about 2010 or 2012 where I simply wasn't maintaining it as well as I should have been. I wouldn't have upstreamed it then either. That's…
-
comment
Comment #46291944
We've been looking at using QUIC as the transport layer in HPN-SSH. It's more of a pain that you might think because it breaks the SSH authentication paradigm and requires QUIC lay…
-
comment
Comment #46291904
Yeah, it's an issue because there is also the per channel application layer flow control. So when you are using SFTP you have the TCP flow control, the SSH layer flow control, and …
-
comment
Comment #46291825
More than 2 decades at this point. The primary reasons is that the full patch set would be a burden for them to integrate and they don't prioritize performance for bulk data transf…
-
comment
Comment #46291751
For Gentoo I should put you in touch with my co-developer. He's active in Gentoo and has been maintaining a port for it. I'll point him at this conversation. That said, documentati…
-
comment
Comment #46291685
Rsync commonly uses SSH as the transport layer so it won't necessarily be any faster than SFTP unless you are using the rsync daemon (usually on port 873). However, the rsync daemo…
-
comment
Comment #46290776
I'm the lead developer. I can go into this a bit more when I get from an appointment if people are interested.
-
comment
Comment #46290767
The parallel ciphers are built using OpenSSL primitives. We aren't reimplementing the cipher itself in anyway. Since counter ciphers use an atomically increasing counter you can pr…
-
comment
Comment #46290730
The bottleneck in SSH is entirely on the receiving side. So as long at the receiver is using HPN-SSH you will see some performance improvements if the BDP of the path exceeds 2MB. …
-
comment
Comment #46290694
Concern about it being less secure is fully justified. I'm the lead developer and have been for the past 20 years. I'm happy to answer any questions you might happen to have.
-
comment
Comment #46290671
I do want to say that HPN-SSH is also well audited; you can see the results of CI tests on the github. We also do fuzz testing, static analysis, extensive code reviews, and functio…
-
comment
Comment #8385644
Honestly, I'm not aware of these connection problems. If you have any further information please send it to hpn-ssh@psc.edu.
-
comment
Comment #8385614
The main problem is that the internal buffer size for OpenSSH is limited to 2MB (actually it's closer to 1.25MB in real world terms). This is pretty good for a lot of home users. H…
-
comment
Comment #8385598
I am the author. Honestly, I initially released them without any sort of license - entirely free from any sort of license restriction. People don't seem to understand that so I sai…
-
comment
Comment #8385584
Could you tell me what sort of problems you were experiencing? I'm more than happy to take bug reports at hpn-ssh@psc.edu.