Live data from Hacker News

High Performance SSH/SCP

psc.edu

1–10 of 75 posts

Re: High Performance SSH/SCP

#2
Any chance this work can be upstreamed into mainline SSH? I'd love to have better performance for SSH, but I'm probably not going to install and remember to use this just for the few times it would be relevant.

Re: High Performance SSH/SCP

#3
post #2

Any chance this work can be upstreamed into mainline SSH? I'd love to have better performance for SSH, but I'm probably not going to install and remember to use this just for the few times it would be relevant.

Also upstream is extremely well audited. That's a huge benefit i don't want to loose by using fork.

Re: High Performance SSH/SCP

#4
post #2

Any chance this work can be upstreamed into mainline SSH? I'd love to have better performance for SSH, but I'm probably not going to install and remember to use this just for the few times it would be relevant.

OpenSSH is from the people at OpenBSD, which means performance improvements have to be carefully vetted against bugs, and, judging by the fact that they're still on fastfs and the lack of TRIM in 2025, that will not happen.

Re: High Performance SSH/SCP

#5
post #3
post #2

Any chance this work can be upstreamed into mainline SSH? I'd love to have better performance for SSH, but I'm probably not going to install and remember to use this just for the few times it would be relevant.

Also upstream is extremely well audited. That's a huge benefit i don't want to loose by using fork.

this, I'm not going to start using a random ssh fork with modified ciphers.

Re: High Performance SSH/SCP

#6
post #2

Any chance this work can be upstreamed into mainline SSH? I'd love to have better performance for SSH, but I'm probably not going to install and remember to use this just for the few times it would be relevant.

Unlikely. These patches have been carried out-of-tree for over a decade precisely because upstream OpenSSH won't accept them.

Re: High Performance SSH/SCP

#7
post #2

Any chance this work can be upstreamed into mainline SSH? I'd love to have better performance for SSH, but I'm probably not going to install and remember to use this just for the few times it would be relevant.

Depending on your hardware architecture and security needs, fiddling with ciphers in mainline might improve speed.

Re: High Performance SSH/SCP

#8
post #5
post #3

Earlier quoted context omitted.

Also upstream is extremely well audited. That's a huge benefit i don't want to loose by using fork.

this, I'm not going to start using a random ssh fork with modified ciphers.

It may still be sensible if you only expose it to private networks.

Re: High Performance SSH/SCP

#9
post #8
post #5

Earlier quoted context omitted.

this, I'm not going to start using a random ssh fork with modified ciphers.

It may still be sensible if you only expose it to private networks.

So could this safely be used on Tailscale then ? I’m very curious though also a bit paranoid.

Re: High Performance SSH/SCP

#10
post #9
post #8

Earlier quoted context omitted.

It may still be sensible if you only expose it to private networks.

So could this safely be used on Tailscale then ? I’m very curious though also a bit paranoid.

It could safely be used on public internet, all this fearmongering has no basis under it.

Better question is 'does it have any actual improvements in day-to-day operations'? Because it seems like it mostly changes up some ciphering which is already very fast.

Post reply on HN