Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 0 down vote favorite

I am forced to use SSH tunneling to access many servers (over 100) via one gateway server. To keep connection alive I am using autossh. Everything works pretty well until there is high traffic (people are connecting to most of the servers at once). then ssh process reaches 12% of cpu (which is configured maximum for separate process) and no connection is working anymore - i have to restart autossh script. What could be the possible reason for that?

share|improve this question
Well, I can image that the SSH-inception, causes a lot of encryption/compression overhead, once you reach the threshold of 12%, I think the system doesn't handle it nice enough for SSH to keep working. – Bart De Vos Jun 22 '12 at 8:38

2 Answers

up vote 0 down vote

Another option is to multiplex the connections to the gateway server on a single one. OpenSSH supports this: you'll need to use the ControlMaster configuration option. Here's a review on its pros and cons.

share|improve this answer
up vote 3 down vote

The reason is that you have maxed out the amount of CPU you are being allowed to use. SSH requires CPU-intensive cryptographic operations. Basically, you are trying to put ten pounds of flour in a five pound bag.

share|improve this answer
OK it might be that one. So if the 12% max is the requirement... is there some other way to "route" those connections? Except standard network routing, which is impossible in my case. – middleofdreams Jun 25 '12 at 5:40
It depends on your requirements. For example, if you don't need encryption (or have it elsewhere thanks to IPsec or something similar), you could use SSH tunneling without encryption. That will reduce the CPU requirements significantly. – David Schwartz Jun 25 '12 at 13:50

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.