Without purchasing specific expensive add-on cards [1], is there something specific to some modern CPUs which will accelerate SSL handling in haproxy 1.5?
That is, should I be looking for something in a CPU which will improve performance considerably? There is an Intel instruction set called AES-NI but I don't know if that applies to HTTPS traffic. As I understand, the initial negotiation in SSL is rsa/dsa but then the payload is transported using symmetric key encryption (like AES?). I'm only looking to handle about 50Mb/s of SSL traffic, so I'm not aiming very high. But it would be nice to know the headroom is there. Cheers Ari [1] http://www.cavium.com/processor_security_nitrox-III.html -- --------------------------> Aristedes Maniatis ish http://www.ish.com.au Level 1, 30 Wilson Street Newtown 2042 Australia phone +61 2 9550 5001 fax +61 2 9550 4001 GPG fingerprint CBFB 84B4 738D 4E87 5E5C 5EFA EF6A 7D2E 3E49 102A
