Skip to content

Comment on Spiped + SSH = Secure Proxy

Comments

Why use the -f switch:

  -f Use fast/weak handshaking: This reduces the CPU time spent in the
     initial connection setup, at the expense of losing perfect forward
     secrecy.

Good catch. I'd been using the -f flag while troubleshooting (to speed up the initial connection), but have removed it now.

Maybe I'm missing something here...

On my FreeBSD and Linux systems, the ssh -f parameter sends the process to the background, and the -N prevents remote command execution.

He's talking about the -f option to spiped.

Maybe he wants perfect forward secrecy?

EDIT: I read the question backwards.

I thought adding `-f` meant that you lost PFS?

Oops, I read the question backwards. In that case, maybe because he wants higher performance? ;-)

Wouldn't -C (compression) help to speed an ssh connection?

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.