LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   slow ssh and socks? (https://www.linuxquestions.org/questions/linux-networking-3/slow-ssh-and-socks-919553/)

loolooyyyy 12-19-2011 02:10 PM

slow ssh and socks?
 
hi all
ssh is slowed down by ISP therefor socks proxy is slowed down
is there any work around?

if i could do absolutely nothing at all, could i build ssh from source and change it somehow to make it unrecognizable by ISP servers? i mean manipulating both ssh on client and ssh on my server?

by the way, changing the port ssh connected to from 22 to 9999 did not help
how do they actually realize when i'm using ssh to slow it down? it's supposed to be encrypted! ssl (https) is not slow at all, just ssh
someone told me maybe they are sniffing each packet's header sent through network, too see which is ssh, could this be?

evo2 12-20-2011 10:44 PM

You could try tunnelling over https. A google search for "ssh tunnel over https" revealed a number of interesting pages.

HTH,

Evo2.

agentbuzz 12-21-2011 07:54 AM

ssh -D SOCKS tunneling
 
loolooyyyy,
I don't know why you assume that your ISP is pouring molasses in your tunnel. It's more likely that the combination of low throughput and encryption overhead is slowing things down. Do a "man ssh" to read about the options. In particular, the man page describes the compression option and the cipher option. You can experiment with the following.

This command says, "use gzip compression with the Blowfish cipher, and dump debug info to the screen". From the man page: "Compression is desirable on modem lines and other slow connections, but will only slow down things on fast networks."
Code:

[user@host1 ~]$ ssh -vv -C -c blowfish user@host2
This command says "use the Blowfish cipher and dump debug info to the screen". Again, from the man page: "blowfish is a fast block cipher; it appears very secure and is much faster than 3des." Some people have noticed a measurable performance improvement after switching to Blowfish encryption from triple DES or AES.
Code:

[user@host1 ~]$ ssh -vv -c blowfish user@host2
Good luck.

loolooyyyy 12-21-2011 10:43 AM

dear agenbuzz
i'm assuming that because government has ordered all the ISPs to do so,
they actually made it impossible to use VPN ( except sstp which i couldnt get it working on linux), dont know how, does it use a particular port? if so, they have probably closed the port
but i'll try blowfish, i used compression without any luck before
ssh over https seems interesting,

thanks to you both

loolooyyyy 12-21-2011 11:02 AM

oh man! blowfish and big big difference!!!
:D
thanks
but really, what government does is evil!


All times are GMT -5. The time now is 11:29 PM.