tech-kern archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: /dev/random is hot garbage

On 22/07/2019 15:08, Havard Eidnes wrote:

Why is it not on, with other bootstrap kits?

Because copying the bootstrap kits takes forever...
I'm in the process of copying them over, but it's a multi-day

Because scp is blocked waiting for random bits? :)


I think there's just some bad network in the middle here.  No
packet loss, though, but the congestion window nearly never opens
up above 64KB.  Then there's the application-window in ssh
itself, but we have the HPN additions on both client and server,
so it *should* be able to scale that higher than 64KB(?)

FWIW I cannot ssh to any NetBSD machine using my HE IPv6 tunnel.

$ traceroute6 -I
traceroute6 to (2001:470:a085:999::21) from 2001:470:690c:1::61, 64 hops max, 16 byte packets
 1  gw  9.377 ms  9.48 ms  9.498 ms
2 40.269 ms 69.627 ms 39.12 ms
 3  29.34 ms  49.477 ms  29.342 ms
 4  99.374 ms  99.314 ms  100.149 ms
 5  158.68 ms  159.794 ms  159.318 ms
 6  170.059 ms  169.074 ms  159.468 ms
 7  169.889 ms  168.744 ms  169.616 ms
 8  159.497 ms  159.266 ms  168.968 ms
9 159.609 ms 158.634 ms 159.788 ms
10  159.498 ms  160.065 ms  159.795 ms

$ ping6
PING6(56=40+8+8 bytes) 2001:470:690c:1::61 --> 2001:470:a085:999::21
16 bytes from 2001:470:a085:999::21, icmp_seq=0 hlim=55 time=166.232 ms
16 bytes from 2001:470:a085:999::21, icmp_seq=1 hlim=55 time=169.547 ms
--- ping6 statistics ---
2 packets transmitted, 2 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 166.232/167.889/169.547/2.344 ms

xenity$ ssh -vvv
OpenSSH_8.0 NetBSD_Secure_Shell-20190418-hpn13v14-lpk, OpenSSL 1.1.1b 26 Feb 2019
debug1: Reading configuration data /home/roy/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 55: Applying options for *
debug2: resolving "" port 22
debug2: ssh_connect_direct
debug1: Connecting to [2001:470:a085:999::21] port 22.

Hangs for a long time before falling back to IPv4 where it works perfectly. Oddly, I can ssh using IPv6 from these NetBSD hosts back to me so I have nfc why this is.

So, try forcing scp over IPv4 maybe?


Home | Main Index | Thread Index | Old Index