Big surprise…
by Alec Muffett
So how is one supposed to answer the telnet/ssh question if one only telnets or sshes once every few months, but then remains logged in indefinitely? (In other words, aren’t VNC and screen marvellous?)
You use it daily; that counts. Concur re: VNC and Screen.
Now: how many people regularly tunnel SSH over SSH?
..but then I have a life too.. 🙂
There have been reports of that causing problems with TCP handling, e.g. :
ike.room17.com/pipermail/ale/20031217/004418.html
works for me. great for emergency backups.
This is slightly misleading. Normally running SSH over SSH does not cause TCP over TCP. This is beacuse what passes through the tunnel is data and not TCP packages. The TCP connections of the forwards are terminated at the ssh client and server and only the actual data stream is passed in the SSH tunnel.
The linked article talks about the keep-alive stuff inside SSH causing the experienced problems. But assigns that a low probability, which I agree with.
However one mode in the VPN product we make (AppGate) consists of fowarding IP traffic over SSH. So in this case we do forward TCP packets over TCP and may experience the problems. However I have not heard from any customers who experiences any problems with this. So I wonder how real is the threat of TCP meltdown today? Does it really happen under what today passes for normal circumstances (bandwidth at least .5Mbit)? Does anybody have any hard data about this?
I am not worthy.
Leave a Reply