This client quickly transfers content from your local system to NetStorage using Asperasoft's accelerated transfer protocol, “FASP.”

Aspera Upload Acceleration (Aspera) utilizes a high-speed, third-party client (the "Aspera Client") that has been developed for Akamai by Asperasoft. This protocol consists of two channels:

• Control Channel. This channel grants access to the Aspera binary via an SSH connection.
• Transfer Channel. This channel conducts the transfer via a negotiated port (encrypted or unencrypted) using Aspera's UDP-based protocol.

---

Aspera client installation

To use Aspera, you need the "Aspera Client" application (or an equivalent).

Download a compatible Aspera Client

This table lists the Aspera Clients that NetStorage supports. Any client not listed is unsupported and may have problems authenticating.

Legacy Aspera versions

❗️

Legacy Aspera Clients - Cipher Deprecation

As part of Akamai’s process for improving security, these vulnerable ciphers used by legacy Aspera 3.x clients were deprecated on April 22nd, 2022:

• diffie-hellman-group-exchange-sha1
• diffie-hellman-group14-sha1
• diffie-hellman-group1-sha1

Legacy clients will fail to connect. Upgrade to a supported version.

Install the client

With the client installable obtained, you can perform an install on your local system.

Linux

1. Run the installer via a terminal session based on the Linux distribution in use:

   • Linux: $ dpkg -i aspera-scp-client-[version].deb

2. Follow the prompts to perform the install.

Mac OS X

1. Double-click the client installer to begin the installation.
2. Follow the prompts to install the client.

Microsoft Windows

1. Installation and use of the Aspera Client requires that the current user be Administrator-level. To begin, right-click the install file, select Run as Administrator, and input appropriate login credentials.
2. When prompted to Choose Setup Type, click “Typical”.
3. In the Aspera Service Account dialog, input the following:
   • User name. Input the name of a valid, Administrator-level user for the system (for example, the current login).
   • Password. Input the associated password for the user.

📘

These values are not actually used when using the Aspera Client with NetStorage, but they must be defined to complete the installation

4. Follow the remaining prompts to complete the installation. Ensure that the “Launch Aspera Client” checkbox is deselected, to stop the client from automatically opening upon completion.
5. Navigate to the “bin” folder within Client install directory. For example, with a default install, this would be C:\Program Files(x86)\Aspera\Client\bin.
6. Locate the “asperascp.exe” file, right-click it and select “Properties”.
7. Select the Compatibility tab, enable 'Run this program as administrator" and click the OK button.
8. Launch the Aspera Client (Start > All Programs > Aspera > Client > Client), and input appropriate Administrator login credentials.
9. Click Close to complete the process.

---

Aspera key configuration

With the Aspera client (or equivalent) installed, you need to configure it for use with NetStorage.

Configuration is required in both the NetStorage Groups UI in Control Center, as well as in the Aspera Client (or equivalent).

Generate an SSH key and enable Aspera

You need to generate an SSH key, and then access an applicable upload account to apply the key and enable Aspera Upload Acceleration.

Here, you apply an SSH key to an upload account that has been configured to access the desired storage group.

• The "Public" instance of the key is applied to the account.
• The "Private" instance of the key resides on the system using the Aspera Client, and the two are resolved when connecting.

This process uses a combination of the Aspera Client and the NetStorage Groups UI to accomplish this task. You must have the Aspera Client installed on your local system.

How to generate an Aspera SSH key

The Aspera Client application offers a built-in SSH key generator. For simplicity, we recommend that you use this tool to generate a new key.

1. Launch the Aspera Client:
   • Linux (Debian/RedHat). From a Terminal Session, issue the asperascp command.
   • Mac OSX. Navigate to Macintosh HD > Applications > Aspera Client.
   • Microsoft Windows. Select Start Menu > All Programs > Aspera > Client > Client, and input appropriate Administrator login credentials.
2. Select Tools > Manage Keys...
3. Click the button in the upper left corner to create a new SSH key pair.
4. Input these values:
   • Identity. Input a name for the key. Both Public and Private key files will be labeled with this name.
   • Passphrase (Optional). If desired, input a passphrase (password) to protect the key. Each time the key is used for access, this value will be requested.
   • Confirm Passphrase. Input the same value set for Passphrase (Optional).
   • Type. Set to “RSA”.
   • Access. Ensure that this checkbox de-selected

5. Click OK.
6. The new key will display in the table, with the Public instance of it displayed. Leave this window open, as you will use it later in the process.

🚧

Individual SSH keys can't be shared between NetStorage upload accounts

You must create individual, separate keys for each upload account using Aspera Upload Acceleration.

Apply the SSH key and enable Aspera

This process assumes you used the built-in SSH key generator in the Aspera Client.

1. Open the application. Go to ☰ ⇒ ORIGIN SERVICES ⇒ NetStorage.
2. Access the Upload Accounts entity.
3. Click + Add New Upload Account or edit an existing account.
4. In the Access Methods content panel for an upload account, access the SSH and Aspera tab.
5. Click + Add SSH key.
6. Return to the SSH Key window of the Aspera Client interface, select the applicable key and click Edit.
7. Once the key loads, click Copy to Clipboard.

8. Return to the NetStorage Groups UI in Control Center, and paste the key into the SSH key field.
9. Input Notes for the key (optional) and click Save.
10. Set the Aspera Upload Acceleration slider switch to On.
11. Continue with creating (or editing) the account as necessary and then click Save to save the upload account.

At this point, you need to wait for provisioning to complete. Here are some specifics on what will happen next.

• Did you create a new Upload Account? If so, the Contact Email Address set for the account will receive a verification email including a link you must click. The account will then enter propagation, which takes roughly 60 minutes to complete. After completion (the same email address will receive a
  confirmation email), you can move on to configure the Aspera Client.
• Did you edit an existing Upload Account? If so, the account will simply enter propagation, which takes roughly 60 minutes to complete. After completion, the Contact Email Address for the account will receive a confirmation email. At this point, you can move on to configure the Aspera Client.

---

Configure the Aspera Client application

You need to create a “Connection” in the Aspera Client UI.

1. If necessary, launch the Aspera Client:

   • Linux (Debian/RedHat). From a Terminal Session, issue the asperascp command.
   • macOS. In your dock, click Applications then double-click Aspera Client.
   • Windows. Select Start > All Programs > Aspera > Client > Client and enter appropriate Administrator login credentials.

2. Click the Connections icon to open the Connection Manager.

3. At the top of the Connection Manager interface, click "" to create a new connection.

4. Select Create a standard connection.

5. Click New Connection and rename it to something unique and easy to recognize. For example, you could use "NetStorage Aspera [CP Code]".

6. Ensure that the Connection tab is selected and define these fields:

   • Host. Use <Domain name prefix>.aspera.upload.akamai.com for the storage group you're looking to access.
   • User. You must input sshacs in this field. (Do not input your Control Center user login.)
   • Authentication. Click the Public Key radio button.

7. Click Manage Keys

8. You should see accessible “Private” keys. Select the one you created earlier.

9. The associated “Public” instance of the key is displayed. Click Close.

10. Set Storage Type to Akamai NetStorage.

11. The Target Directory is where content will be uploaded in NetStorage. Enter the complete path to the desired directory, including the CP code root. This can be any existing subdirectory that's accessible to the upload account.

Increase the Default Target Rate

By default, the Aspera Client has a "Default Target Rate" setting for upload speeds of 45 Mbps. If your environment can support it, we recommended that you increase these values to allow for faster transfer rates.

1. If necessary, launch the Aspera Client.
2. Select Tools > Preferences...
3. Set the Upload/Download instances of the Default Target Rate to a higher value, applicable to your environment.

🚧

Don't set the default target rate to a value higher than your data pipe can provide

Take non-Aspera upload acceleration traffic into consideration, as well. Failure to accommodate your environment’s limitations will result in high client-side error rates.

Use your access method

You can use Aspera once your upload account changes have propagated. View usage examples and limitations.