Skip to content

Setting SSH cipher to "none"

Info

HyperCloud 2.1.1+ adds the ability to enable the "none" Cipher over SSH. This is especially helpful for remote application configurations where performance outweighs security, as SSH serves as both the authentication mechanism and the transport for remote backups.

Warning

This should only EVER be enabled when absolutely necessary. The default configuration is the disabled state. SoftIron recommends never changing this setting. Never enable it if the cluster is on a non-trusted network.

Enabling the "none" cipher

  • On the HyperCloud dashboard, create the following file:

    /var/run/cluster-control/facts/ssh-allow-cipher-none

  • Reboot the dashboard.