Hacker News Reader

OpenSSH's SFTP server is significantly slower than FTP over Wireguard (or FTP over TLS) without the OpenSSH HPN patches (which upstream refuses to merge) on connections with >100ms latency.

FTP has sendfile support for data transfers since there is no framing in the data connection. (OpenSSL 3.0 has sendfile support so FTP over TLS would also benefit as well).

View on HN

If you want to serve private content, you have to encrypt stuff and authenticate users.

If you want to serve public content, you still need to encrypt it to avoid a MITM attack.

SSH solves the first problem trivially, but is slower. HTTPS solves the second problem trivially, and the first problem with some work (login flow or client certificates).

I only see a case for FTP for underpowered hardware like older RPi serving stuff locally. But I suspect the bottleneck would be in the USB-connected NIC, not even im the CPU.

Are you really moving so many files over SFTP that it's a concern? Why not use rsync over SSH?

Reply on news.ycombinator.com