Hi Grant.
Am 14-01-2017 01:42, schrieb Grant Zhang:
Hi list,
This is to request comments regarding the support of openssl 1.1 async
mode and
async-capable engine.
openssl s_time utility is used to compare the performance:
#> openssl s_time -new -cipher ECDHE-RSA-AES128-GCM-SHA256 -nbio
With single haproxy process,
software only: ~500 connections per second
Intel QAT engine[1] and async mode on: ~2000 connections per second
Your feedback and comments are greatly appreciated.
[code snipped]
Cool I always learn something on this list ;-)
I'm not the coder but is
#ifdef USE_OPENSSL
enough to check for this feature in openssl?
How about to add also a OPENSSL_VERSION check to avoid some 'function
not found' errors or at worst case haproxy crashes.
Does this async stuff only works with Intel QAT engine or is it also on
some other devices and platforms available?
BR Aleks
