On 06.02.2015 07:38, Shawn Heisey wrote: > On 2/5/2015 5:54 AM, Klavs Klavsen wrote: >> Adding nbproc 4, improved performance of https from 511 req/s to 1296 >> req/s.. >> >> not quite an exponential scaling.. >> >> We tested with 8 cores and got 1328 req/s.. so it seems we're hitting >> "something else" already after 2,5 core.. >> >> vmstat 1 - also reveals a lot of cpu-idle time.. > > For cleartext performance I really don't know for sure what you can do, > except maybe using bare metal rather than a virtual machine. Other > people have been around this community a lot longer than I have and may > have better ideas. > > Getting that cleartext performance up to a reasonable level will be your > first step. Once that's done, there are a lot of things that will help > with performance using SSL. This is an AWESOME video on that subject: > > https://www.youtube.com/watch?v=0EB7zh_7UE4 > > The current haproxy version implements almost every > performance-enhancing method mentioned in that video, as long as your > openssl is new enough.
Has somebody ever posted a working example configuration for haproxy that applies the improvements mentioned in the video? I tried to implement these recommendations but didn't seem to get results I was expecting. How exactly does one reliably test that the 1-RTT handshake is actually working? Regards, Dennis
