<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Linux tip of the day: Super fast SCP file copies.</title>
	<atom:link href="http://www.convolutedtheory.com/tech/linux/linux-tip-day-super-fast-scp-file-copies/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.convolutedtheory.com/tech/linux/linux-tip-day-super-fast-scp-file-copies/</link>
	<description>Nerdy. Deal with it. Or go away.</description>
	<lastBuildDate>Fri, 09 Sep 2011 17:01:12 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
	<item>
		<title>By: saad</title>
		<link>http://www.convolutedtheory.com/tech/linux/linux-tip-day-super-fast-scp-file-copies/comment-page-1/#comment-389</link>
		<dc:creator>saad</dc:creator>
		<pubDate>Tue, 08 Mar 2011 04:56:07 +0000</pubDate>
		<guid isPermaLink="false">http://www.convolutedtheory.com/?p=60#comment-389</guid>
		<description>thanks!</description>
		<content:encoded><![CDATA[<p>thanks!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mediocre-Ninja.blogSpot.com</title>
		<link>http://www.convolutedtheory.com/tech/linux/linux-tip-day-super-fast-scp-file-copies/comment-page-1/#comment-322</link>
		<dc:creator>Mediocre-Ninja.blogSpot.com</dc:creator>
		<pubDate>Sun, 10 Oct 2010 17:15:19 +0000</pubDate>
		<guid isPermaLink="false">http://www.convolutedtheory.com/?p=60#comment-322</guid>
		<description>I&#039;ve tried SSH with &quot;-c arcfour&quot; and it showed a significant improvement, but adding &quot;-C&quot; didn&#039;t help, if not to say it slowed down. Manpage says -C can improve the performance, but from my tests I think it can be a burden if the CPU/network is not balance.</description>
		<content:encoded><![CDATA[<p>I&#8217;ve tried SSH with &#8220;-c arcfour&#8221; and it showed a significant improvement, but adding &#8220;-C&#8221; didn&#8217;t help, if not to say it slowed down. Manpage says -C can improve the performance, but from my tests I think it can be a burden if the CPU/network is not balance.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Derek</title>
		<link>http://www.convolutedtheory.com/tech/linux/linux-tip-day-super-fast-scp-file-copies/comment-page-1/#comment-311</link>
		<dc:creator>Derek</dc:creator>
		<pubDate>Mon, 20 Sep 2010 00:00:17 +0000</pubDate>
		<guid isPermaLink="false">http://www.convolutedtheory.com/?p=60#comment-311</guid>
		<description>First off, don&#039;t be a jerk. If your mileage varies from the posted, then you probably are running on crappy hardware/network/something or you&#039;ve got sunspots/earthquakes/emf/stupidity. The following is verified by neuhalfen.name. It&#039;s down at the moment, but google cache is here: http://webcache.googleusercontent.com/search?q=cache:_4zYEhpHEW4J:www.neuhalfen.name/2009/02/04/scp_performance_gain_by_using_right_algorithm/+openssh+scp+arcfour+vs+blowfish&amp;hl=en&amp;client=firefox-a&amp;gl=us&amp;strip=1

-- Begin shamelessly copied from googlecache content --
&quot;No explicit cipher (aes128-cb)

Merkur:jens jens$ scp jens@helios:/export/home/jens/XXXXX /dev/null
XXXXX    6%  143MB  23.7MB/s   01:22 ETA^CKilled by signal 2.

This is the default behaviour on my machines. Other setups might choose a different default algorithm. According to the OpenSSH homepage the list of availabe candidates is (cited from the man page):

    Ciphers
    Specifies the ciphers allowed for protocol version 2 in order of
    preference. Multiple ciphers must be comma-separated. The default is
    “aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,
    aes192-cbc,aes256-cbc”

Using 3des

I expected 3des to be quite slow, and I wasn’t disappointed:

Merkur:~ jens$ scp -c 3des jens@helios:/export/home/jens/XXXXX /dev/null
XXXXX    3%   82MB  11.7MB/s   02:51 ETA^CKilled by signal 2.

As expected, 3des will not be our performance king today.
Using Blowfish

The next candidate was Blowfish. I expected at least aes performance from it. Let’s see, how it worked out:

Merkur:jens jens$ scp -c blowfish jens@helios:/export/home/jens/XXXXX /dev/null
XXXXX    29%  615MB  36.0MB/s   00:40 ETA^CKilled by signal 2.

Final candidate: RC4

The final candidate is the only stream cipher in the suit: arcfour.

Merkur:~ jens$ scp   -c arcfour jens@helios:/export/home/jens/XXXXX /dev/null
XXXXX    9%  202MB  51.7MB/s   00:36 ETA^Killed by signal 2.

Conclusion

Speedwise arcfour wins hands down. I did not expect a more than doubled performance over the default aes128-cbc. Who would have thought that switching the algorithm makes that much of a difference.&quot;
-- End googlecache content --

The default cipher after OpenSSH v4.7 is blowfish, which as you can see is slower than arcfour. Sadly, I am right, and you still have crappy hardware. I will note however that arcfour is MUCH less secure, but if you&#039;re looking for speed it cant be beat. Except by http://www.psc.edu/networking/projects/hpn-ssh/theory.php .</description>
		<content:encoded><![CDATA[<p>First off, don&#8217;t be a jerk. If your mileage varies from the posted, then you probably are running on crappy hardware/network/something or you&#8217;ve got sunspots/earthquakes/emf/stupidity. The following is verified by neuhalfen.name. It&#8217;s down at the moment, but google cache is here: <a href="http://webcache.googleusercontent.com/search?q=cache:_4zYEhpHEW4J:www.neuhalfen.name/2009/02/04/scp_performance_gain_by_using_right_algorithm/+openssh+scp+arcfour+vs+blowfish&#038;hl=en&#038;client=firefox-a&#038;gl=us&#038;strip=1" rel="nofollow">http://webcache.googleusercontent.com/search?q=cache:_4zYEhpHEW4J:www.neuhalfen.name/2009/02/04/scp_performance_gain_by_using_right_algorithm/+openssh+scp+arcfour+vs+blowfish&#038;hl=en&#038;client=firefox-a&#038;gl=us&#038;strip=1</a></p>
<p>&#8211; Begin shamelessly copied from googlecache content &#8211;<br />
&#8220;No explicit cipher (aes128-cb)</p>
<p>Merkur:jens jens$ scp jens@helios:/export/home/jens/XXXXX /dev/null<br />
XXXXX    6%  143MB  23.7MB/s   01:22 ETA^CKilled by signal 2.</p>
<p>This is the default behaviour on my machines. Other setups might choose a different default algorithm. According to the OpenSSH homepage the list of availabe candidates is (cited from the man page):</p>
<p>    Ciphers<br />
    Specifies the ciphers allowed for protocol version 2 in order of<br />
    preference. Multiple ciphers must be comma-separated. The default is<br />
    “aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,<br />
    aes192-cbc,aes256-cbc”</p>
<p>Using 3des</p>
<p>I expected 3des to be quite slow, and I wasn’t disappointed:</p>
<p>Merkur:~ jens$ scp -c 3des jens@helios:/export/home/jens/XXXXX /dev/null<br />
XXXXX    3%   82MB  11.7MB/s   02:51 ETA^CKilled by signal 2.</p>
<p>As expected, 3des will not be our performance king today.<br />
Using Blowfish</p>
<p>The next candidate was Blowfish. I expected at least aes performance from it. Let’s see, how it worked out:</p>
<p>Merkur:jens jens$ scp -c blowfish jens@helios:/export/home/jens/XXXXX /dev/null<br />
XXXXX    29%  615MB  36.0MB/s   00:40 ETA^CKilled by signal 2.</p>
<p>Final candidate: RC4</p>
<p>The final candidate is the only stream cipher in the suit: arcfour.</p>
<p>Merkur:~ jens$ scp   -c arcfour jens@helios:/export/home/jens/XXXXX /dev/null<br />
XXXXX    9%  202MB  51.7MB/s   00:36 ETA^Killed by signal 2.</p>
<p>Conclusion</p>
<p>Speedwise arcfour wins hands down. I did not expect a more than doubled performance over the default aes128-cbc. Who would have thought that switching the algorithm makes that much of a difference.&#8221;<br />
&#8211; End googlecache content &#8211;</p>
<p>The default cipher after OpenSSH v4.7 is blowfish, which as you can see is slower than arcfour. Sadly, I am right, and you still have crappy hardware. I will note however that arcfour is MUCH less secure, but if you&#8217;re looking for speed it cant be beat. Except by <a href="http://www.psc.edu/networking/projects/hpn-ssh/theory.php" rel="nofollow">http://www.psc.edu/networking/projects/hpn-ssh/theory.php</a> .</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anwar</title>
		<link>http://www.convolutedtheory.com/tech/linux/linux-tip-day-super-fast-scp-file-copies/comment-page-1/#comment-288</link>
		<dc:creator>Anwar</dc:creator>
		<pubDate>Fri, 09 Jul 2010 23:00:41 +0000</pubDate>
		<guid isPermaLink="false">http://www.convolutedtheory.com/?p=60#comment-288</guid>
		<description>Fuck you..is this a tip
this is 10 time slower than simple scp without any option</description>
		<content:encoded><![CDATA[<p>Fuck you..is this a tip<br />
this is 10 time slower than simple scp without any option</p>
]]></content:encoded>
	</item>
</channel>
</rss>

