Re: [Xen-devel] [RFC][PATCH] Secure XML-RPC for Xend

[Anil Madhavapeddy <anil@xxxxxxxxxx>]

On Fri, Jun 09, 2006 at 04:41:48AM -0400, Daniel Veillard wrote:
> 
>    SSH authentication is really expensive especially when you compare to
> other cost in the XML-RPC. I would really like some persistency
> of the connection if possible, especially for operations like monitoring,
> it's okay to reopen from time to time, but without reuse it would just not
> work.

Yes, but the right place to do it is not in Xend.  The auth caching
can be set up outside of Xend much more robustly depending on your
version of OpenSSH.  If done in Xend, then it definitely needs to
use the wildcard support in ControlPath to avoid the authentication
race condition, and an OpenSSH version check.

As Ian says, stunnel/SSL is probably easier from the client's point
of view (although I do like the easier SSH key management this patch
allows).

Anil

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel