If you have compiled without assembler optimizations, this is entirely
possible for that class of hardware. I know that on my dual-PII 450Mhz
Linux box, I can only initiate somewhat less than 10 new SSL connections
per second. Others who are using stuff like Covalent's RavenSSL module
(commercial version of mod_ssl, basically) have concurred that setting
up SSL connections is *SLOW*.
To compare, a webbench-type program tells me that the same server can do
somewhere upwards of 800 new connections per second using plain HTTP.
A uni-processor PII-300 running Microsoft's IIS under NT4.0 (with more
than enough RAM...) could only start about 2 or 3 SSL sessions per
second.
So, unless I'm completely missing something, this is precisely why
hardware cryptographic coprocessors exist.
...Comments invited.
-Adam Thompson
<[EMAIL PROTECTED]>
Timothy Canfield wrote:
>
> Hi,
>
> I would love to use apache and mod ssl for new site I'm putting up.
> However I ran some performance tests on it and am a little worried about
> the numbers I saw.
>
> I was only able to open about 8 connections per second, and this was
> swamping the processor (p3 450).
>
> With 20K files, I was able to get less than 1 Mbit per second (about 7
> hits per second, and again this was swamping the processor).
>
> Are these the type of numbers I should expect, or does it seem as if I
> have things misconfigured?
>
> Thanks,
> Tim
--
Adam Thompson, MCNE, MCSE, CWT, A+
Vice-President / Chief Technology Officer, Commerce Design Inc.
<[EMAIL PROTECTED]>
tel: (204) 942-1648, fax: (204) 989-8080, cell: (204) 782-6198
begin:vcard
n:Thompson;Adam
tel;pager:(204) 931-2678
tel;cell:(204) 782-6198
tel;fax:(204) 989-8080
tel;work:(204) 942-1648
x-mozilla-html:FALSE
url:http://www.commerced.com/
org:Commerce Design Inc.
adr:;;Unit #2, 90 Market Ave.;Winnipeg;MB;R3B 0P3;Canada
version:2.1
email;internet:[EMAIL PROTECTED]
title:Vice-President / Chief Technology Officer
fn:Adam Thompson
end:vcard
S/MIME Cryptographic Signature
