SSH連接卡頓
阿新 • • 發佈：2018-06-04
SSH連接關閉DNS反向解析。
備註：測試一下ssh鏈接卡在那個地方
在linux中，默認就是開啟了SSH的反向DNS解析,這個會消耗大量時間，因此需要關閉。
# vi /etc/ssh/sshd_config
UseDNS=no在配置文件中，雖然UseDNS yes是被註釋的，但默認開關就是yes
- 關閉SERVER上的GSS認證。
在authentication gssapi-with-mic有很大的可能出現問題，因此關閉GSS認證可以提高ssh連接速度。
# vi /etc/ssh/sshd_config
GSSAPIAuthentication no註意：修改之後記得重啟sshd服務service sshd restart
備註：測試一下ssh鏈接卡在那個地方
[xiao@localhost ~]$ ssh -v [email protected] OpenSSH_5.3p1, OpenSSL 1.0.1e-fips 11 Feb 2013 debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying options for * debug1: Connecting to 192.168.174.149 [192.168.174.149] port 22. debug1: Connection established. debug1: identity file /home/xiao/.ssh/identity type -1 debug1: identity file /home/xiao/.ssh/identity-cert type -1 debug1: identity file /home/xiao/.ssh/id_rsa type -1 debug1: identity file /home/xiao/.ssh/id_rsa-cert type -1 debug1: identity file /home/xiao/.ssh/id_dsa type -1 debug1: identity file /home/xiao/.ssh/id_dsa-cert type -1 debug1: identity file /home/xiao/.ssh/id_ecdsa type -1 debug1: identity file /home/xiao/.ssh/id_ecdsa-cert type -1 debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3 debug1: match: OpenSSH_5.3 pat OpenSSH* debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_5.3 debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: server->client aes128-ctr hmac-sha1 none debug1: kex: client->server aes128-ctr hmac-sha1 none debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<2048<8192) sent debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP debug1: SSH2_MSG_KEX_DH_GEX_INIT sent debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY The authenticity of host ‘192.168.174.149 (192.168.174.149)‘ can‘t be established. RSA key fingerprint is 01:e2:4c:36:39:b6:5a:de:28:87:92:1d:6a:74:2a:e0. Are you sure you want to continue connecting (yes/no)? Warning: Permanently added ‘192.168.174.149‘ (RSA) to the list of known hosts. debug1: ssh_rsa_verify: signature correct debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug1: SSH2_MSG_NEWKEYS received debug1: SSH2_MSG_SERVICE_REQUEST sent debug1: SSH2_MSG_SERVICE_ACCEPT received debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password debug1: Next authentication method: gssapi-keyex debug1: No valid Key exchange context debug1: Next authentication method: gssapi-with-mic debug1: Unspecified GSS failure. Minor code may provide more information Cannot determine realm for numeric host address debug1: Unspecified GSS failure. Minor code may provide more information Cannot determine realm for numeric host address
SSH連接卡頓