Grove performance for handling TLS requests with Certificates using RSA encryption is very poor. At transaction rates around 2000 request per second or greater, the CPU on the host pegs and most requests time out and there connections are dropped. The problem is due to a poorly performing implementaion of the 'math/big.addMulVVW()' function in go versions prior to go 1.11. In go 1.11, this function has been re-implemented and performs better by a factor of 10. When grove is built with go 1.11, tests have shown that grove can process 50% TLS traffic using RSA certificates at nearly 40Gbps on a host with a 100g NIC.
[ Full content available at: https://github.com/apache/trafficcontrol/issues/2780 ] This message was relayed via gitbox.apache.org for [email protected]
