4 ms·

Thanks. I didn't consider that the mere act of having sshd deny attempts is a performance cost. I guess one could potentially dos a server by flooding the sshd

by troels 13y ago

Thanks. I didn't consider that the mere act of having sshd deny attempts is a performance cost. I guess one could potentially dos a server by flooding the sshd with bogus attempts?

mburns 13y ago
well, sshd denying requests isn't a performance cost, in itself. But having a script like denyhosts or fail2ban that analyzes auth logs for IPs to block requires memory for the interpreter running the script, as well as however much of the log gets read into memory. Blocking external ssh connections can avoid that performance hit, however large or small it ends up being.