Re: OpenSSH HPN

On 10-11-2015 10:42, Dag-Erling Smørgrav wrote:
> Some of you may have noticed that OpenSSH in base is lagging far behind
> the upstream code.
>
> The main reason for this is the burden of maintaining the HPN patches.
> They are extensive, very intrusive, and touch parts of the OpenSSH code
> that change significantly in every release.  Since they are not
> regularly updated, I have to choose between trying to resolve the
> conflicts myself (hoping I don't break anything) or waiting for them to
> catch up and then figuring out how to apply the new version.
>
> Therefore, I would like to remove the HPN patches from base and refer
> anyone who really needs them to the openssh-portable port, which has
> them as a default option.  I would also like to remove the NONE cipher
> patch, which is also available in the port (off by default, just like in
> base).

Hi Des,

I know I've installed the ports once to see if, and how I would be able 
to add more IP-address infor to some of the warnings and errors. And 
then to get thos errors recognised by tools like sshguard and fail2ban.

Only to find out that the code in that area in ports is completely 
different from what is in base. And submitting "patches" for that, even 
upstream, would be faily useless. So I understand the trouble you might 
have in getting other stuff in as well

Getting the base version more inline with ports would be a real good thing.

I guess you need to manage the fallout that there is going to be from 
those that expect HPN to be in base, and now suffer preformance issues.

--WjW