Re: [Proftpd-user] mod_sftp slowness - how can I track this down

Michel> I recently upgraded a machine to RedHat 8 and used the
Michel> provided proftpd rpm. This installs version 1.3.6e with some
Michel> patches. I use the mod_sftp module to provide access to a
Michel> small number of people. Prior to this version of the OS, on
Michel> RedHat 7, this worked just fine (version 1.3.5e). However, on
Michel> this version, browsing directories and accessing file using
Michel> the OpenSSH_8.4 sftp client is dreadfully slow.

John> Do you have selinux setup on your RHEL8 system?

Yes, but it's set to permissive.

Michel> I tried bunch of things, such as FSCachePolicy, FSOptions,
Michel> turning off SFTPExtensions, different advertized SFTPDigests and
Michel> SFTPCiphers, changed channelWindowSize, channelPacketSize, but
Michel> nothing seems to help. I turned on the Tracelog but that did not
Michel> tell *me* anything, though there's information there that
Michel> I don't understand.

John> Can you share the log? Or better yet, can you compare it
John> with the same log using the 1.3.5 version?

I'll recreate that in a bit and send it along later.

Michel> I then created an updated rpm for version 1.3.7a and I get the
Michel> same thing.

John> Smells like a RHEL8 issue, not a proftpd issue.

Could very well be :-)

Michel> Before I go off and downgrade to 1.3.5e (which I'd have to
Michel> recreate an RPM) I'm curious to know if there's anything I can
Michel> do to track this down. Of course I'm also curious if
Michel> downgrading would fix this anyway, or if there's something
Michel> else that's getting in the way.

John> Can you just compile and do a test install of 1.3.5e by
John> hand and install it to /opt/... so you can do tests on a
John> different port?

I can give that a try. I'll need to check into the library requirements.

Michel> I'll attach my current WIP configuration below. Any insights on how to
Michel> track this down would be much appreciated.

John> The config looks fine to me, but I'm not an expert.  Can you give a
John> better estimate of how slow directory operations are?  And maybe you
John> can turn off selinux as a test and see if that makes a difference?

It takes about 10 seconds to list 200 or so files.

I replicated the issue on a RedHat 8 VM with selinux fully enabled.
I'll checkpoint it and turn selinux off to see if that's the issue.

Thanks for the response.



_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html