[Proftpd-user] mod_sftp slowness - how can I track this down

All,

I recently upgraded a machine to RedHat 8 and used the provided
proftpd rpm. This installs version 1.3.6e with some patches. I
use the mod_sftp module to provide access to a small number of
people. Prior to this version of the OS, on RedHat 7, this worked
just fine (version 1.3.5e). However, on this version, browsing
directories and accessing file using the OpenSSH_8.4 sftp client
is dreadfully slow.

I tried bunch of things, such as FSCachePolicy, FSOptions,
turning off SFTPExtensions, different advertized SFTPDigests and
SFTPCiphers, changed channelWindowSize, channelPacketSize, but
nothing seems to help. I turned on the Tracelog but that did not
tell *me* anything, though there's information there that
I don't understand.

I then created an updated rpm for version 1.3.7a and I get the
same thing.

Before I go off and downgrade to 1.3.5e (which I'd have to
recreate an RPM) I'm curious to know if there's anything I can
do to track this down. Of course I'm also curious if downgrading
would fix this anyway, or if there's something else that's
getting in the way.

I'll attach my current WIP configuration below. Any insights on how to
track this down would be much appreciated.

Thanks!

ServerName		"REDACTED"
ServerIdent		on "FTP Server ready."
ServerAdmin		help@REDACTED
DefaultServer		off
MaxInstances		20

# FSCachePolicy size 4096 maxAge 120
# FSOptions IgnoreExtendedAttributes
# TraceLog /var/log/sftp-trace.log
# Trace scp:20 sftp:20 ssh2:20

UseReverseDNS		off
IdentLookups		off
ScoreboardFile		/var/run/proftpd/scoreboard
PidFile			/run/proftpd/proftpd.pid

TimeoutLogin		60
TimeoutStalled		600
TimeoutSession		7200
TimeoutIdle		300
TimeoutNoTransfer	1860

LogFormat sshlog "%{%c}t %h %u sftp(%P) \"%r\" %s %b"

LoadModule		mod_sftp.c
SFTPEngine		on
DefaultAddress		130.91.210.143
Port			22
SFTPExtensions -checkFile -copyFile -fsync -vendorID -versionSelect -posixRename -spaceAvailable -statvfs -hardlink -xattr
SFTPDigests hmac-md5 hmac-sha1 hmac-sha2-256 hmac-sha2-512 \
     hmac-ripemd160 hmac-sha1-96 hmac-md5-96 [email protected] \
     [email protected]
SFTPCiphers aes128-cbc 3des-cbc blowfish-cbc cast128-cbc arcfour128 \
               arcfour256 aes192-cbc aes256-cbc aes128-ctr aes192-ctr aes256-ctr
SFTPCompression on

User			ftp
Group			ftp
DelayEngine		off
Umask			022

DefaultRoot		/www/html
ExtendedLog		/var/log/proftpd/extended.log AUTH sshlog
# ExtendedLog		/var/log/proftpd/extended.log AUTH,DIRS,READ,WRITE sshlog

SFTPOptions		IgnoreSFTPUploadPerms
SFTPAuthMethods		password
SFTPHostKey            	/etc/proftpd/proftpd_host_rsa_key
SFTPHostKey		/etc/proftpd/proftpd_host_dsa_key
AuthUserFile		/etc/proftpd/passwd
AuthGroupFile		/etc/group

RequireValidShell	off
ListOptions		"-a"
TimesGMT		off
CommandBufferSize	2047
AllowStoreRestart	on

# Do not allow .ftpaccess to be uploaded
PathDenyFilter		"\\.ftpaccess$"

# Normally, we want files to be overwriteable.
<Directory /*>
     AllowOverwrite	on
     HideUser		nobody
</Directory>

# fix for bug in WS_FTP client
SFTPClientMatch ".*" channelWindowSize 1GB
SFTPClientMatch ".*" channelPacketSize 256Kb
SFTPClientMatch ".*WinSCP.*" sftpProtocolVersion 3

# SFTP has its own commands, which we'll limit
<Limit LOCK SYMLINK>
     DenyAll
</Limit>



_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html