SSH G3 architecture
SSH G3 is a third-generation Secure Shell protocol implementation, which has been optimized for higher performance in demanding file transfer and application tunneling environments. The SSH G3 architecture provides unparalleled Secure Shell encryption throughput and scalability for large organizations.
SSH G3 implements an n x m server process architecture for optimized server-side memory consumption and performance. While each server process (total amount n) can handle multiple (m) connections, the memory consumption per connection is considerably lower than in the second-generation Secure Shell implementations, making SSH Tectia an ideal solution especially for large-scale application tunneling.
The SSH G3 architecture has been designed to minimize internal data handling such as data copy operations to minimize the throughput time in large file transfers.
SSH G3 utilizes multi-threaded programming to fully leverage multi- processor servers for improved performance.
Client-side connection broker
The Connection Broker is a key component in the SSH G3 architecture, handling all protocol and cryptographic operations. Client-side memory consumption is reduced since there needs to be only a single Connection Broker instance running per user. Security is also further improved by isolating all security-critical operations including authentication data handling in a single component.
What to read next:
Reduce Secure Shell risk. Get to know the NIST 7966.
The NISTIR 7966 guideline from the Computer Security Division of NIST is a direct call to action for organizations regardless of industry and is a mandate for the US Federal government.
ISACA Practitioner Guide for SSH
With contributions from practitioners, specialists and SSH.COM experts, the ISACA “SSH: Practitioner Considerations” guide is vital best practice from the compliance and audit community.