openssh unix dev - Jun 2024 - An Analysis of the DHEat DoS Against SSH in Cloud Environments

On Wed, 2024-06-26 at 02:58 +0200, Thorsten Glaser
wrote:
> On Tue, 25 Jun 2024, Joseph S. Testa II wrote:
> 
> > the way down to 6%!  Additionally, I noticed that the systemd-
> > journal
> 
> You should test without that thing as well. It?s reportedly a
> known bottleneck (someone on, I think, IRC said that regarding
> a different problem some days ago, incidentally).
> 
> Just use a real syslogd (inetutils-syslogd is nice, for example,
> and rsyslogd and syslog-ng both have fans), (importantly) without
> message routing through systemd-journald.

I'm primarily interested in the performance of the default case, since
the overwhelming majority of sysadmins don't modify any options in sshd
nor syslog.

On Tue, 25 Jun 2024, Joseph S. Testa II wrote:
>I'm primarily interested in the performance of the default case, since
>the overwhelming majority of sysadmins don't modify any options in sshd
>nor syslog.
If they get under attack, they?d better do. And if you?re ignoring
a known bottleneck, the results will probably not be very useful?
besides, not everyone is systemd-infested.

bye,
//mirabilos
-- 
Infrastrukturexperte ? Qvest Digital AG
Am Dickobskreuz 10, D-53121 Bonn ? https://www.qvest-digital.com/
Telephon +49 228 54881-393 ? Fax: +49 228 54881-235
HRB AG Bonn 18196 ? USt-ID (VAT): DE274355441
Vorstand: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg
Vorsitzender Aufsichtsrat: Peter N?then