Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
SSH connections WITHOUT encryption
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
el3ktro
Tux's lil' helper
Tux's lil' helper


Joined: 06 Dec 2005
Posts: 115
Location: Cologne, Germany

PostPosted: Tue Dec 20, 2005 4:46 pm    Post subject: SSH connections WITHOUT encryption Reply with quote

This may sound weird, but I'm searching for a way to establish UNencrypted SSH connections (which makes the first 'S' obsolete ;-) ). The reason is: I'm often using X11/SSH connections at home between my girlfriend's iBook and my desktop machine (this is a neat way for my gf to view flash animations while in Linux on her iBook, she can launch Konqueror on my desktop 8) . I'm afraid that due to the fact that this connection is encrypted, it is slower than it has to be (Flash animations are actually pretty smooth, but sounds lacks a bit sometimes). Also I'm currently using NFS o share files, but I'd prefer SHFS for this simply because I wouldn't need to run portmap+nfsd on both machines, but shfs is pretty slow compared to nfs.

Thanks for your replies!
Tom
Back to top
View user's profile Send private message
nevynxxx
Veteran
Veteran


Joined: 12 Nov 2003
Posts: 1123
Location: Manchester - UK

PostPosted: Tue Dec 20, 2005 4:54 pm    Post subject: Reply with quote

Loose the ssh entirely??

X11 is itself a network protocol. People only use ssh for the secuity of an encrypted connection.

On the other hand, I wouldn't expect the encryption to even register on a modern computer, sshd is currently using 1% of the cpu on my 400MHz server at home, and 0.0% on my server at work that has a VNC X session running (VNC is using 0.3% and thats on a 1.4GHz Petium 4)
_________________
My Public Key

Wanted: Instructor in the art of Bowyery
Back to top
View user's profile Send private message
toralf
Developer
Developer


Joined: 01 Feb 2004
Posts: 3943
Location: Hamburg

PostPosted: Tue Dec 20, 2005 5:02 pm    Post subject: Reply with quote

Use telnet and export DISPLAY variable ?
Back to top
View user's profile Send private message
Jrauch
n00b
n00b


Joined: 19 Dec 2005
Posts: 20

PostPosted: Tue Dec 20, 2005 5:11 pm    Post subject: Reply with quote

Try high performance ssh, they have a patch that uses no encryption after the conection is established.
That patch isn't in portage, but it's easy to copy the existing ebuild and make it happen.

http://www.psc.edu/networking/projects/hpn-ssh/

oh, and it's the hpn use flag, if you didn't get that from the project name.
Back to top
View user's profile Send private message
allucid
Veteran
Veteran


Joined: 02 Nov 2002
Posts: 1314
Location: atlanta

PostPosted: Tue Dec 20, 2005 5:49 pm    Post subject: Reply with quote

You can't disable encryption with ssh (at least not without a patch). You can use a faster cipher though -- such as blowfish. It shouldn't make much of a noticable difference on a modern compter, though.
Back to top
View user's profile Send private message
Catch-22
Apprentice
Apprentice


Joined: 22 Oct 2004
Posts: 244

PostPosted: Tue Dec 20, 2005 11:01 pm    Post subject: Reply with quote

Most people here are talking about cpu load but what about network load?
I think I remember my old g3 laptop managing 700KB/s via ftp but 500KB/s via scp
I'm no expert but I would've thought that there would be (a bit) more overhead with a secure transfer. I have no idea how much overhead it would be.
Back to top
View user's profile Send private message
nevynxxx
Veteran
Veteran


Joined: 12 Nov 2003
Posts: 1123
Location: Manchester - UK

PostPosted: Wed Dec 21, 2005 9:27 am    Post subject: Re: SSH connections WITHOUT encryption Reply with quote

el3ktro wrote:
The reason is: I'm often using X11/SSH connections at home between my girlfriend's iBook and my desktop machine (this is a neat way for my gf to view flash animations while in Linux on her iBook, she can launch Konqueror on my desktop 8)


Catch-22 wrote:
Most people here are talking about cpu load but what about network load?


I would expect this to be either 10Mb or 100Mb, possibly even 1Gb dependin on the Desktop involved and any switches involved.

Not really likely to be bandwidth problems displaying flash!
_________________
My Public Key

Wanted: Instructor in the art of Bowyery
Back to top
View user's profile Send private message
el3ktro
Tux's lil' helper
Tux's lil' helper


Joined: 06 Dec 2005
Posts: 115
Location: Cologne, Germany

PostPosted: Wed Dec 21, 2005 10:27 am    Post subject: Reply with quote

Thanks for your answers so far. Well I tried it again, I launched the Konqueror installed on the desktop via SSH on the iBook, and opened a website with a flash movie, and top showed that on the desktop machine, ssh would go up to something like 30%. This is on an AMD64 3000+. How exactly would I have to do this with telnet? Is there a way to do this without SSH/Telnet etc. at all?


Tom

I have a 100MBit LAN btw.
Back to top
View user's profile Send private message
ruben
Guru
Guru


Joined: 04 Jul 2003
Posts: 462

PostPosted: Wed Dec 21, 2005 11:23 am    Post subject: Reply with quote

Catch-22 wrote:
Most people here are talking about cpu load but what about network load?
I think I remember my old g3 laptop managing 700KB/s via ftp but 500KB/s via scp
I'm no expert but I would've thought that there would be (a bit) more overhead with a secure transfer. I have no idea how much overhead it would be.

Connections with ssh can use compression, but i don't know whether that feature is by default on or off.
In any case, transferring a file >1GB between a G3 800Mhz laptop and a 1.7Ghz P4 desktop over a 100Mb ethernet cable did use a noticeable amount of cpu time, on both.

There is a way to do it without ssh/telnet, and that is by using XDMCP. But if you do this, then the ibook would only be running the Xserver, and all applications would be running on the desktop. This is probably not what you want. (if you use GDM on both machines, you can easily configure XDMCP in the GDM settings)
In any case, just using telnet and remote X will give you the least amount of overhead for just running Konqueror remotely. Just make sure that you have firewall rules in place to only accept telnet connections from the ibook. Telnet is insecure because it transmits all data unencrypted, but if you're using it on a local network which is not accessible from outside, then it's fine. So, you just install the telnet daemon on the AMD64, and from the ibook you login on the AMD64 and export the right DISPLAY (ibook:0.0), then you probably also need to use xhost locally on the ibook to accept connections from the AMD64, and that's all.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum