Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I understand that web sites which run https may use SSL Accelerator to speed up the expensive public/private key encryption/decryption computations. So if I have a server that needs to support a lot of SSH connections using public key authentication, does it make sense to use an SSL Accelerator? I have never heard anyone doing it. Is it because the encryption/decryption computation is much simpler in SSH?

share|improve this question

migrated from Jan 24 '10 at 17:26

This question came from our site for professional and enthusiast programmers.

Besides Christian's answer, I suspect it's more an issue of scale. How many interactive SSH sessions/connections can one server have active? How many Web Request connections? I think you'll find web requests being orders of magnitude greater than ssh.

For ssh though, it may improve security (and speed) if you can add dedicated RNG device. Key negotiations need lots of randomness, and if your in a situation where your making a lot of ssh sessions rapidly, you may find your entropy pool exhausted. Crypto accelerators typically have High-quality RNG devices too ....

share|improve this answer

you can't use an ssl accelerator for ssh. these protocols are different.

but you don't have to use acceleration for ssh, because ssh uses symmetric encryption after establishing a connection with asymmetric encryption.

share|improve this answer
"because ssh uses symmetric encryption after establishing a connection with asymmetric encryption" -- SSL does exactly the same. – grawity Jan 24 '10 at 18:46
Actually, not necessarily... if your SSL accelerator can accelerate OpenSSL 'Engine mode', then it will also accelerate SSH. – Andrew McGregor Jan 25 '10 at 4:45

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.