Re: [OmniOS-discuss] Apache for OmniOS r151016?

[Martin Waldenvik]

Hi Bob

Why not use joyents pkgsrc. Install only apache. 

Regards
Martin

Sent from my iPhone

> On 19 Nov 2015, at 21:58, Bob Friesenhahn  
> wrote:
> 
> What is the best way to obtain and install Apache for OmniOS r151016 which 
> works properly and will survive the regular upgrade process?  I am really 
> surprised to not find Apache in the standard OmniOS packages.
> 
> I spotted "group/feature/amp" but it does not work since the packages it 
> depends on do not exist.  I do not want this whole group anyway since I have 
> no use for MySQL and PHP.
> 
> Bob
> -- 
> Bob Friesenhahn
> bfrie...@simple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/
> GraphicsMagick Maintainer,http://www.GraphicsMagick.org/
> ___
> OmniOS-discuss mailing list
> OmniOS-discuss@lists.omniti.com
> http://lists.omniti.com/mailman/listinfo/omnios-discuss
___
OmniOS-discuss mailing list
OmniOS-discuss@lists.omniti.com
http://lists.omniti.com/mailman/listinfo/omnios-discuss

Re: [OmniOS-discuss] Slow ssh transfers

[Martin Waldenvik]

On 10/11/2016 09:14 PM, Dan McDonald wrote:

Dumb question - is your FreeBSD frame size jumbo?

Also, try this on OmniOS:

ipadm set-prop -p send_buf=1048576 tcp
ipadm set-prop -p recv_buf=1048576 tcp

And see if that helps if the frame size isn't smaller on OmniOS.

Dan

Sent from my iPhone (typos, autocorrect, and all)


On Oct 11, 2016, at 1:53 PM, Martin Waldenvik <walden...@gmx.com> wrote:

Hi

I'm wondering if anyone can shed some light on a problem I have. I'm using lftp 
sftp a lot and it is very slow.  I can work around that sometimes by using 
another server. But I am also using zrep (using ssh) to replicate my pool to a 
backup server. This is also slow. Transfer is about 40 megabyte (omnios  to 
omnios). When doing this on freebsd it is about 100 megabyte and it saturates 
my gigabit link (freebsd to freebsd). Same hardware.

I'm using the latest Omios LTS release and openssh. Is there any way to speed 
this up on Omnios?

Regards
Martin


___
OmniOS-discuss mailing list
OmniOS-discuss@lists.omniti.com
http://lists.omniti.com/mailman/listinfo/omnios-discuss


Hi Dan

Thanks for your input. I have had this problem for a long time, then i 
thought is was the old SunSSH but the problem seems to persist with OpenSSH.


I have not touched the frame size, the only thing i have is LACP with 
L3,L4. Intel NIC on a supermicro board.


Tried to set send and recv buffer but there was no difference. It's 
about the same speed with both sending and recieving ~40-45M/s.


I have found that zrep is simple enough for me that manually replicates 
my system on an irregular basis. Maybe there is something that simple 
around that works with netcat.


Regards
Martin
___
OmniOS-discuss mailing list
OmniOS-discuss@lists.omniti.com
http://lists.omniti.com/mailman/listinfo/omnios-discuss

[OmniOS-discuss] Slow ssh transfers

[Martin Waldenvik]

Hi

I'm wondering if anyone can shed some light on a problem I have. I'm using 
lftp sftp a lot and it is very slow.  I can work around that sometimes by 
using another server. But I am also using zrep (using ssh) to replicate my 
pool to a backup server. This is also slow. Transfer is about 40 megabyte 
(omnios  to omnios). When doing this on freebsd it is about 100 megabyte 
and it saturates my gigabit link (freebsd to freebsd). Same hardware.


I'm using the latest Omios LTS release and openssh. Is there any way to 
speed this up on Omnios?


Regards
Martin


___
OmniOS-discuss mailing list
OmniOS-discuss@lists.omniti.com
http://lists.omniti.com/mailman/listinfo/omnios-discuss

Re: [OmniOS-discuss] Slow ssh transfers

[Martin Waldenvik]

On 10/12/2016 04:53 PM, Dale Ghent wrote:



On Oct 12, 2016, at 10:45 AM, Martin Waldenvik <walden...@gmx.com> wrote:

On 10/12/2016 04:37 PM, Dan McDonald wrote:



On Oct 12, 2016, at 10:21 AM, Martin Waldenvik <walden...@gmx.com> wrote:



Thank you so much Guo-Rong for your help. When i changed from:
Ciphers 
chacha20-poly1...@openssh.com,aes256-...@openssh.com,aes128-...@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr

to Ciphers 
aes256-...@openssh.com,aes128-...@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr

I get full speed. I am so happy for this.


I'm curious about one thing.  Are your ciphers on FreeBSD pre-set to the 
reduced list (i.e. no chacha) by default?  Or does chacha20 run faster on 
FreeBSD?

Thanks,
Dan



Hi Dan

I have used those ciphers in that order on all my servers and it works in full 
speed i both freebsd and linux but not in Omnios.

I have configured my ssh-servers as recommended here:

https://stribika.github.io/2015/01/04/secure-secure-shell.html


Can you provide the output of 'ssh -Q cipher' from both your FreeBSD and OmniOS 
boxes?

/dale



Hi

Seems to be the same

Omnios box - ssh -Q cipher
3des-cbc
blowfish-cbc
cast128-cbc
arcfour
arcfour128
arcfour256
aes128-cbc
aes192-cbc
aes256-cbc
rijndael-...@lysator.liu.se
aes128-ctr
aes192-ctr
aes256-ctr
aes128-...@openssh.com
aes256-...@openssh.com
chacha20-poly1...@openssh.com


FreeBSD box - ssh -Q cipher:
3des-cbc
blowfish-cbc
cast128-cbc
arcfour
arcfour128
arcfour256
aes128-cbc
aes192-cbc
aes256-cbc
rijndael-...@lysator.liu.se
aes128-ctr
aes192-ctr
aes256-ctr
aes128-...@openssh.com
aes256-...@openssh.com
chacha20-poly1...@openssh.com

___
OmniOS-discuss mailing list
OmniOS-discuss@lists.omniti.com
http://lists.omniti.com/mailman/listinfo/omnios-discuss

Re: [OmniOS-discuss] Slow ssh transfers

[Martin Waldenvik]

On 10/12/2016 04:37 PM, Dan McDonald wrote:



On Oct 12, 2016, at 10:21 AM, Martin Waldenvik <walden...@gmx.com> wrote:



Thank you so much Guo-Rong for your help. When i changed from:
Ciphers 
chacha20-poly1...@openssh.com,aes256-...@openssh.com,aes128-...@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr

to Ciphers 
aes256-...@openssh.com,aes128-...@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr

I get full speed. I am so happy for this.


I'm curious about one thing.  Are your ciphers on FreeBSD pre-set to the 
reduced list (i.e. no chacha) by default?  Or does chacha20 run faster on 
FreeBSD?

Thanks,
Dan



Hi Dan

I have used those ciphers in that order on all my servers and it works 
in full speed i both freebsd and linux but not in Omnios.


I have configured my ssh-servers as recommended here:

https://stribika.github.io/2015/01/04/secure-secure-shell.html

Regards
Martin
___
OmniOS-discuss mailing list
OmniOS-discuss@lists.omniti.com
http://lists.omniti.com/mailman/listinfo/omnios-discuss

Re: [OmniOS-discuss] Slow ssh transfers

[Martin Waldenvik]

On 10/12/2016 06:34 PM, Dale Ghent wrote:



On Oct 12, 2016, at 12:05 PM, Martin Waldenvik <walden...@gmx.com> wrote:

omnios - ./openssl speed -elapsed -evp aes-256-gcm

The 'numbers' are in 1000s of bytes per second processed.
type16 bytes 64 bytes256 bytes   1024 bytes   8192 bytes
aes-256-gcm 36546.42k39239.49k39289.51k39519.91k  39613.78k

freebsd - ./openssl speed -elapsed -evp aes-256-gcm

The 'numbers' are in 1000s of bytes per second processed.
type16 bytes64 bytes256 bytes   1024 bytes   8192 bytes
aes-256-gcm 222688.71k  638351.04k  889610.92k  993149.57k   1017445.72k



That's still quite slow on the OmniOS box. On a 3.5GHz Haswell-E (E3-1241 v3) I 
get:

type 16 bytes 64 bytes256 bytes   1024 bytes   8192 bytes
aes-256-gcm 394656.68k  1001238.31k  2094818.99k  2407235.93k  2689916.93k

Perhaps you may want to check the BIOS settings of your OmniOS box and ensure that 
"AES-NI Instructions" are turned on. Your hardware vendor might have that 
termed differently - AES Acceleration and such.

/dale

Must be someting wrong with what i did. Used libressl to test chacha. 
This is with built in openssl:


type16 bytes 64 bytes256 bytes   1024 bytes   8192 bytes
aes-256-gcm 309921.38k   784682.82k  1614856.62k 1867160.92k  2117028.52k

Looks a lot better.

Martin
___
OmniOS-discuss mailing list
OmniOS-discuss@lists.omniti.com
http://lists.omniti.com/mailman/listinfo/omnios-discuss