FASP has built-in security mechanisms that do not affect the transmission speed. The encryption algorithms used are based exclusively on open standards. Some product implementation use secure key exchange and authentication such as SSH.
The data is optionally encrypted or decrypted immediately before sending and receiving with the AES-128. To counteract attacks by monitoring the encrypted information during long transfers, the AES is operated in cipher feedback mode with a random, public initialization vector for each block. In addition, an integrity check of each data block takes place, in which case, for example, a man-in-the-middle attack would be noticed.
FASP's control port is TCP port 22 – the same port that SSH uses. For data transfer, it begins at UDP port 33001, which increments with each additional connection thread.9
FASP's flow control algorithm, unlike TCP's, completely ignores packet drops. Instead, it acts on changes in measured packet delivery time. When that is growing, queues are getting longer and channel bandwidth is exceeded; falling, queues are getting shorter. Acting on this information is complicated because the receiver has it and the sender needs it, but its lifetime is often less than the transmission delay; and measurements are noisy. Thus, the sender uses a predictive filter fed updates from the receiver.10
The transmission rate is chosen to match and not exceed the available channel bandwidth, and trigger no drops, accounting for all traffic on the channel.11 By contrast, TCP slowly increases its rate until it sees a packet drop and falls back, interpreting any drop as congestion. On a channel with long delay and frequent packet loss, TCP never approaches the actual bandwidth available. FASP cooperates with TCP flows on the same channel, using up bandwidth TCP leaves unused.
"Aspera high speed file transfer: Let the cloud protocol wars begin". The Register. https://www.theregister.co.uk/2015/10/01/aspera/ ↩
"European Nucleotide Archive: Downloading using Aspera". https://www.ebi.ac.uk/ena/browse/read-download#downloading_files_aspera ↩
"Method and system for aggregate bandwidth control". https://patents.google.com/patent/US20090063698 ↩
"Aspera - High-speed file transfer software -". downloads.asperasoft.com. http://downloads.asperasoft.com/en/technology/shortcomings_of_TCP_2/the_shortcomings_of_TCP_file_transfer_2 ↩
"FASP transfer protocol speeds data transmission to the cloud". https://gcn.com/Articles/2014/05/15/FOSE-Data-transfer-protocol.aspx ↩
"NCBI 1000 Genomes: Aspera Download". https://www.ncbi.nlm.nih.gov/projects/faspftp/1000genomes/ ↩
"Aspera Joint Partner Solutions". asperasoft.com. 20 January 2018. http://asperasoft.com/partners/joint-partner-solutions/ ↩
"Ex Aspera Dev here. I did the encryption and early parallel work. There is a lot... | Hacker News". https://news.ycombinator.com/item?id=21909190 ↩
Klimek, Ivan (2011). Wide Area Network Traffic Optimization. Faculty of Electrical Engineering and Informatics. Košice: Technical University of Košice. p. 49. https://www.yumpu.com/en/document/view/53450087/technicka-univerzita-v-kosiciach-stargatecnlsk ↩