openssh unix dev - Jun 2024 - An Analysis of the DHEat DoS Against SSH in Cloud Environments

On Tue, 25 Jun 2024, Joseph S. Testa II wrote:
>I'm primarily interested in the performance of the default case, since
>the overwhelming majority of sysadmins don't modify any options in sshd
>nor syslog.
If they get under attack, they?d better do. And if you?re ignoring
a known bottleneck, the results will probably not be very useful?
besides, not everyone is systemd-infested.

bye,
//mirabilos
-- 
Infrastrukturexperte ? Qvest Digital AG
Am Dickobskreuz 10, D-53121 Bonn ? https://www.qvest-digital.com/
Telephon +49 228 54881-393 ? Fax: +49 228 54881-235
HRB AG Bonn 18196 ? USt-ID (VAT): DE274355441
Vorstand: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg
Vorsitzender Aufsichtsrat: Peter N?then

On Wed, 2024-06-26 at 04:32 +0200, Thorsten Glaser
wrote:
> If they get under attack, they?d better do. And if you?re ignoring
> a known bottleneck, the results will probably not be very useful?
> besides, not everyone is systemd-infested.

The primary responsibility falls on system designers to choose
reasonable default settings.