[pve-devel] [PATCH] qemu-server: add support for unsecure migration (setting in datacenter.cfg)

Stefan Priebe - Profihost AG s.priebe at profihost.ag
Fri Dec 28 11:14:53 CET 2012


Am 28.12.2012 um 09:33 schrieb Dietmar Maurer <dietmar at proxmox.com>:

>> I don't see a special risk here. Network security can't be handled by ssh. A
>> much lower level is needed ip/ mac filter per port on switch.
> 
> Any attacker inside the same network can read that traffic because it is not encrypted.
But if I have a physically separated network how could an attacker attached to it?


> 
> Anyways, how much faster is it compared to AESl hardware chipher?

42 Mb/s ssh
76 Mb/s ssh aes-ni
1050 Mb/s direct tcp

Stefan


More information about the pve-devel mailing list