openssh unix dev - Jun 2024 - An Analysis of the DHEat DoS Against SSH in Cloud Environments

On Tue, 25 Jun 2024, Joseph S. Testa II wrote:
>the way down to 6%!  Additionally, I noticed that the systemd-journal
You should test without that thing as well. It?s reportedly a
known bottleneck (someone on, I think, IRC said that regarding
a different problem some days ago, incidentally).

Just use a real syslogd (inetutils-syslogd is nice, for example,
and rsyslogd and syslog-ng both have fans), (importantly) without
message routing through systemd-journald.

bye,
//mirabilos
-- 
Infrastrukturexperte ? Qvest Digital AG
Am Dickobskreuz 10, D-53121 Bonn ? https://www.qvest-digital.com/
Telephon +49 228 54881-393 ? Fax: +49 228 54881-235
HRB AG Bonn 18196 ? USt-ID (VAT): DE274355441
Vorstand: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg
Vorsitzender Aufsichtsrat: Peter N?then

On Wed, 2024-06-26 at 02:58 +0200, Thorsten Glaser
wrote:
> On Tue, 25 Jun 2024, Joseph S. Testa II wrote:
> 
> > the way down to 6%!  Additionally, I noticed that the systemd-
> > journal
> 
> You should test without that thing as well. It?s reportedly a
> known bottleneck (someone on, I think, IRC said that regarding
> a different problem some days ago, incidentally).
> 
> Just use a real syslogd (inetutils-syslogd is nice, for example,
> and rsyslogd and syslog-ng both have fans), (importantly) without
> message routing through systemd-journald.

I'm primarily interested in the performance of the default case, since
the overwhelming majority of sysadmins don't modify any options in sshd
nor syslog.