VETO! Re: heads up: tcpwrappers support going away

Nico Kadel-Garcia nkadel at
Sun Apr 27 03:45:39 EST 2014

On Sat, Apr 26, 2014 at 1:01 PM, Darren Tucker <dtucker at> wrote:
> On Sat, Apr 26, 2014 at 12:14 PM, Nico Kadel-Garcia <nkadel at>
> wrote:
>> Isn't it significantly more efficient to allow sshd to do its own
>> forks, rather than doing 'ssd -D'
> sshd -i

Good point, yes.

>> and having one new daemon running
>> for every connection?
> In the common case, probably not, since sshd re-execs itself on each
> connection (using a lot of code originally for -i) to provide randomization
> of the runtime environment (ASLR and such). Protocol 1 connections will need
> to generate an ephemeral server key so they'll probably be noticeably
> slower.

Has anyone actually using this approach, with or without tcp_wrappers,
gathered any statistics for the current release?

More information about the openssh-unix-dev mailing list