FTP speed

[Pawel001]

My Proxmox is a part of VPN. Connection between 2 sites is 100Mb/s
I want to upload my VM backups to external FTP server.
I tried ftp, wput etc.
For example this:
wput $FILE ftp://$FTPUSER:$FTPPASS@$FTPHOST:/$FILENAME

The problem is that the upload is always somehow limited to 20Mb/s. Does not matter what program I use.

On the other side I made a test with running proftpd on host and uploading backups from there... it was 100Mb/s (so as expected)

What can I check to fix that issue?

 

[LnxBil]

Check the bandwidth with iperf or netcat.

FTP in 2016? Seriously? For unencrypted backups????

 

[Pawel001]

Thanks for hints!
The limit was caused by VPN channel encryption. It has nothing to do with proxmox.

And yes, I use FTP in 2016

 

[LnxBil]

And yes, I use FTP in 2016

We cannot do this in Germany due to regulation in the data privacy act (Bundesdatenschutzgesetz Anlage zu §9 Satz 1 Abs. 1 Nr. 3)

 

[Pawel001]

This Bundesdatenschutzgesetz Anlage zu §9 Satz 1 Abs. 1 Nr. 3 is very interesting. Unfortunately my german skills are now quite bad ;( Especially when it comes to read legal papers....

What does "data privacy act" say ?
You can not send send plain text data over insecure channel ?

 

[LnxBil]

Yes, you have to ensure that nobody can read or alter information (even in a backup). It does not apply to every backup, only to machines which work with data of human being and have things like (name, birthday, all kinds of medical, religious, ... things).

Of course this law only applies if you live in Germany or work for a german company. In the EU, there will be something similar in 2017/2018.

 

[LnxBil]

Ah, and of course IP and date, so every logfile of e.g. apache matters.

 

[fabian]

Ah, and of course IP and date, so every logfile of e.g. apache matters.

IANAL, but AFAIR IPs are not per se "personenbezogene Daten", but the classification depends on the context (and as usual with legal matters, things get complicated). Not transferring/storing sensitive information in plain text seems like a good recommendation regardless of the legal situation though

 

[Pawel001]

I have more like startup idea infrastructure prototype and i'm doing backup to my Raspberry PI "server" (hehe!) at my home.
If this startup will be worth investing some more time and money, I'll definitely go to sftp or some other strong solutions.

Now it was just annoying that "via internet" bandwidth was 100Mb/s and via VPN 20Mb/s....
I have tweaked it a little, now it's 40Mb/s.
Anyway FTP server port is not exposed to the public.

 

[LnxBil]

IANAL, but AFAIR IPs are not per se "personenbezogene Daten", but the classification depends on the context (and as usual with legal matters, things get complicated).

IPs are only in direct association with date and time "personenbezogene Daten", because the ISP can determine the person (legally responsible) behind the IP - BDSG §3 Abs. 1 ("bestimmbaren Person").