SSH连接build立缓慢:可能的原因?

我最近升级了我的桌面到Windows 7,并从其他盒子(使用Cygwin安装OpenSSH)打开它的ssh

一切正常 – 然而,当我第一次尝试build立连接时(在请求input密码之前),即使是有线连接,也会有很长的延迟(有时会达到30秒)。 当我在工作中对我的箱子进行远程遥控时,没有这种延迟。

我将非常感谢您对我能做些什么来进行debugging的见解。 我认识到有很多东西影响build立ssh连接的速度,但是这看起来非常糟糕,以至于一定会有一些重大的错误。

ssh -vvv输出如下(警告:长) – 一个长暂停是在列出身份文件( identity file /Users/Arkaaito/... )之后,然后在列出键之后还有另一个长暂停( key: /Users/Arkaaito... )。 我想这可能是因为我没有设置基于密钥的身份validation。 (具有讽刺意味的是,在内部networking上,我想等待,直到我使用基于密码的身份validation。

 Arkas-MacBook-Pro:~ Arkaaito$ ssh -vvv [email protected] OpenSSH_5.2p1, OpenSSL 0.9.8l 5 Nov 2009 debug1: Reading configuration data /etc/ssh_config debug2: ssh_connect: needpriv 0 debug1: Connecting to 192.168.0.196 [192.168.0.196] port 22. debug1: Connection established. debug1: identity file /Users/Arkaaito/.ssh/identity type -1 debug1: identity file /Users/Arkaaito/.ssh/id_rsa type -1 debug1: identity file /Users/Arkaaito/.ssh/id_dsa type -1 debug1: Remote protocol version 2.0, remote software version OpenSSH_5.1 debug1: match: OpenSSH_5.1 pat OpenSSH* debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_5.2 debug2: fd 3 setting O_NONBLOCK debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 debug2: kex_parse_kexinit: ssh-rsa,ssh-dss debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,[email protected] debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,[email protected] debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,[email protected],hmac-ripemd160,[email protected],hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,[email protected],hmac-ripemd160,[email protected],hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: none,[email protected],zlib debug2: kex_parse_kexinit: none,[email protected],zlib debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: first_kex_follows 0 debug2: kex_parse_kexinit: reserved 0 debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 debug2: kex_parse_kexinit: ssh-rsa,ssh-dss debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes192-cbc,aes256-cbc,[email protected],aes128-ctr,aes192-ctr,aes256-ctr debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes192-cbc,aes256-cbc,[email protected],aes128-ctr,aes192-ctr,aes256-ctr debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,[email protected],hmac-ripemd160,[email protected],hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,[email protected],hmac-ripemd160,[email protected],hmac-sha1-96,hmac-md5-96 debug2: kex_parse_kexinit: none,[email protected] debug2: kex_parse_kexinit: none,[email protected] debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: first_kex_follows 0 debug2: kex_parse_kexinit: reserved 0 debug2: mac_setup: found hmac-md5 debug1: kex: server->client aes128-ctr hmac-md5 none debug2: mac_setup: found hmac-md5 debug1: kex: client->server aes128-ctr hmac-md5 none debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP debug2: dh_gen_key: priv key bits set: 127/256 debug2: bits set: 521/1024 debug1: SSH2_MSG_KEX_DH_GEX_INIT sent debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY debug3: check_host_in_hostfile: filename /Users/Arkaaito/.ssh/known_hosts debug3: check_host_in_hostfile: match line 16 debug1: Host '192.168.0.196' is known and matches the RSA host key. debug1: Found key in /Users/Arkaaito/.ssh/known_hosts:16 debug2: bits set: 522/1024 debug1: ssh_rsa_verify: signature correct debug2: kex_derive_keys debug2: set_newkeys: mode 1 debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug2: set_newkeys: mode 0 debug1: SSH2_MSG_NEWKEYS received debug1: SSH2_MSG_SERVICE_REQUEST sent debug2: service_accept: ssh-userauth debug1: SSH2_MSG_SERVICE_ACCEPT received debug2: key: /Users/Arkaaito/.ssh/identity (0x0) debug2: key: /Users/Arkaaito/.ssh/id_rsa (0x0) debug2: key: /Users/Arkaaito/.ssh/id_dsa (0x0) debug1: Authentications that can continue: publickey,password,keyboard-interactive debug3: start over, passed a different list publickey,password,keyboard-interactive debug3: preferred publickey,keyboard-interactive,password debug3: authmethod_lookup publickey debug3: remaining preferred: keyboard-interactive,password debug3: authmethod_is_enabled publickey debug1: Next authentication method: publickey debug1: Trying private key: /Users/Arkaaito/.ssh/identity debug3: no such identity: /Users/Arkaaito/.ssh/identity debug1: Trying private key: /Users/Arkaaito/.ssh/id_rsa debug3: no such identity: /Users/Arkaaito/.ssh/id_rsa debug1: Trying private key: /Users/Arkaaito/.ssh/id_dsa debug3: no such identity: /Users/Arkaaito/.ssh/id_dsa debug2: we did not send a packet, disable method debug3: authmethod_lookup keyboard-interactive debug3: remaining preferred: password debug3: authmethod_is_enabled keyboard-interactive debug1: Next authentication method: keyboard-interactive debug2: userauth_kbdint debug2: we sent a keyboard-interactive packet, wait for reply debug1: Authentications that can continue: publickey,password,keyboard-interactive debug3: userauth_kbdint: disable: no info_req_seen debug2: we did not send a packet, disable method debug3: authmethod_lookup password debug3: remaining preferred: debug3: authmethod_is_enabled password debug1: Next authentication method: password [email protected]'s password: 

我敢打赌,这是缺乏反向DNS。 尝试在服务器中禁用反向DNS查找,看看是否有帮助。

看看ssh_config并查找GSSAPIAuthentication 。 确保该值设置为“否”。 在openssh的新软件包中的Ubuntu中,默认情况下启用了这个function,而且我经历了10秒钟的连接到SSH主机的延迟,直到我禁用了这个选项。

我不知道这是否是原因,但也许是Autotuning? 您可以暂时禁用它进行testing。

http://www.kombitz.com/2009/01/09/windows-7-auto-tuning/