Re: [gentoo-user] Re: ssh rekeying slow ?

[Alan McKinnon <alan.mckinnon@gmail.com>]

On 25/06/2014 23:10, Stefan G. Weichinger wrote:
> Am 25.06.2014 21:49, schrieb Alan McKinnon:
> 
>> I've also noticed slowdowns recently, I think it's the new ciphers likes
>> ecdsa. Try this:
>>
>> Connect using ssh -vvv and examine the output to find which of the
>> various ciphers and algorithms are used once connection is achieved. On
>> the client, add those configuration options for the server to
>> ssh_config. You should notice a speed up on the next attempt as unused
>> methods will be skipped
>>
>> man 5 ssh_config
>>
>> has all the details
> 
> ;-)
> 
> thanks, Alan.
> 
> Did you already find out what options to set?

No, only you can do that. You have to run ssh -vvv and eyeball the
output, see what your machines are using. Then add those config settings
to ssh_config

> 
> Aside from that, I wonder why we as users have to do that and why it
> isn't set up "as good as possible" by the coders of openssh.

Because the openssh developers have no idea what you set up and cannot
possibly know. The phrase "as good as possible" has no meaning here as
the options out there in the wild as whatever they happen to be.


> I will see if I can figure out what to do ...

ssh -vvv

then look




-- 
Alan McKinnon
alan.mckinnon@gmail.com