On 10/12/2016 04:53 PM, Dale Ghent wrote:


On Oct 12, 2016, at 10:45 AM, Martin Waldenvik <walden...@gmx.com> wrote:

On 10/12/2016 04:37 PM, Dan McDonald wrote:

On Oct 12, 2016, at 10:21 AM, Martin Waldenvik <walden...@gmx.com> wrote:

Thank you so much Guo-Rong for your help. When i changed from:
Ciphers 
chacha20-poly1...@openssh.com,aes256-...@openssh.com,aes128-...@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr

to Ciphers 
aes256-...@openssh.com,aes128-...@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr

I get full speed. I am so happy for this.

I'm curious about one thing.  Are your ciphers on FreeBSD pre-set to the 
reduced list (i.e. no chacha) by default?  Or does chacha20 run faster on 
FreeBSD?

Thanks,
Dan


Hi Dan

I have used those ciphers in that order on all my servers and it works in full 
speed i both freebsd and linux but not in Omnios.

I have configured my ssh-servers as recommended here:

https://stribika.github.io/2015/01/04/secure-secure-shell.html

Can you provide the output of 'ssh -Q cipher' from both your FreeBSD and OmniOS 
boxes?

/dale


Hi

Seems to be the same

Omnios box - ssh -Q cipher
3des-cbc
blowfish-cbc
cast128-cbc
arcfour
arcfour128
arcfour256
aes128-cbc
aes192-cbc
aes256-cbc
rijndael-...@lysator.liu.se
aes128-ctr
aes192-ctr
aes256-ctr
aes128-...@openssh.com
aes256-...@openssh.com
chacha20-poly1...@openssh.com


FreeBSD box - ssh -Q cipher:
3des-cbc
blowfish-cbc
cast128-cbc
arcfour
arcfour128
arcfour256
aes128-cbc
aes192-cbc
aes256-cbc
rijndael-...@lysator.liu.se
aes128-ctr
aes192-ctr
aes256-ctr
aes128-...@openssh.com
aes256-...@openssh.com
chacha20-poly1...@openssh.com

_______________________________________________
OmniOS-discuss mailing list
OmniOS-discuss@lists.omniti.com
http://lists.omniti.com/mailman/listinfo/omnios-discuss

Reply via email to