Hi, On Tue, Oct 04, Rajesh Mahajan wrote: > ======================== HAPROXY ============================================ > httpress -n 5000 -t 100 -c 500 https://192.168.57.30/test.html ... > SSL INFO: DHE_RSA_AES_256_CBC_SHA1 > - Protocol: TLS1.0 > - Key Exchange: DHE-RSA > - Ephemeral DH using prime of 2048 bits > - Cipher: AES-256-CBC ... > ============================================ NGINX PERFORMANCE > ===================== > > httpress -n 5000 -t 100 -c 500 https://192.168.57.30:8443/test.html ... > SSL INFO: DHE_RSA_3DES_EDE_CBC_SHA1 > - Protocol: TLS1.0 > - Key Exchange: DHE-RSA > - Ephemeral DH using prime of 1024 bits > - Cipher: 3DES-CBC
Haproxy uses 2048bit DH prime and nginx 1024bit. AFAIK SSL handshake will be (much?) slower with haproxy. BTW are serving the test.html straight from nginx ? -Jarno -- Jarno Huuskonen
