[paramiko] Paramiko performance doubts

[Robey Pointer]

On 10 Sep 2007, at 16:04, Daniel Morilha wrote:

> Hello everyone,
>
> I developed a solution using paramiko and a similar Telnetlib class to
> access a several number of network devices in replacement of using
> Pexpect library and openssh client. It worked so well but the bad
> performance made me think in how to improve Paramiko.
>
> Is there some way to do that, for example using some C extension or
> even other library? I would like to continue using Paramiko, but in
> production environment it could be compiled in a different way. Is
> this possible? Maybe using pyOpenSSL library.

Paramiko already uses pycrypto, so the crypto code is already in C.  
There's going to be extra overhead for opening an encrypted tunnel  
(vs. cleartext telnet pipe) to a machine, and it's unfortunately  
unavoidable. Setting up an SSL or SSH transport involves several  
round-trips of handshaking at the start, which can be painful on high- 
latency links (speaking from experience) but most of it really is  
required to make the security aspect work.

robey