Difference between revisions of "Improving openSSH server performance"
m |
m |
||
| Line 1: | Line 1: | ||
[[Main Page|Home]] > [[CentOS]] > [[CentOS 6.x]] > [[OpenSSH server configuration]] > [[Improving openSSH server performance]] | |||
There are various ways of improving SSH server performance. For example on local LAN disabling all types of DNS checks both on server and on client as described on [[Disabling reverse DNS lookup for openSSH]] can improve speed significantly. Other performance improvements possible are described in various sub-sections on this page. | There are various ways of improving SSH server performance. For example on local LAN disabling all types of DNS checks both on server and on client as described on [[Disabling reverse DNS lookup for openSSH]] can improve speed significantly. Other performance improvements possible are described in various sub-sections on this page. | ||
| Line 19: | Line 18: | ||
Please note that this has to be done on SSH client (<tt>/etc/ssh/ssh_config</tt>) on our machine and SSH server on remote machine (<tt>/etc/ssh/sshd_config</tt>). Doing above configuration on SSH server of current machine will not have any effect. | Please note that this has to be done on SSH client (<tt>/etc/ssh/ssh_config</tt>) on our machine and SSH server on remote machine (<tt>/etc/ssh/sshd_config</tt>). Doing above configuration on SSH server of current machine will not have any effect. | ||
[[Main Page|Home]] > [[CentOS]] > [[CentOS 6.x]] > [[OpenSSH server configuration]] > [[Improving openSSH server performance]] | |||
Latest revision as of 09:46, 14 July 2022
Home > CentOS > CentOS 6.x > OpenSSH server configuration > Improving openSSH server performance
There are various ways of improving SSH server performance. For example on local LAN disabling all types of DNS checks both on server and on client as described on Disabling reverse DNS lookup for openSSH can improve speed significantly. Other performance improvements possible are described in various sub-sections on this page.
Disabling GSSAPI Authentication (Kerebros)
GSSAPI authentication is used by systems like Kerebros so that there is some standardization of client / server authentication which is independent of actual implementation. If GSSAPI authentication mechanisms are not used then one can improve SSH speed by using:
GSSAPIAuthentication no
This may be particularly useful if when SSHing to server with -v the output pauses for a while after displaying:
debug1: Unspecified GSS failure. Minor code may provide more information No credentials cache found
Please note that this has to be done on SSH client (/etc/ssh/ssh_config) on our machine and SSH server on remote machine (/etc/ssh/sshd_config). Doing above configuration on SSH server of current machine will not have any effect.
Home > CentOS > CentOS 6.x > OpenSSH server configuration > Improving openSSH server performance
