> Can anyone point me to a document that compares SSL performance
> to non-SSL performance?
> I recently compiled up modssl-2.6.1 against 1.3.12 on Win32, and
> I get speeds about 1/20th of what I get from the same server
> without SSL enabled. That doesn't seem right.
Depending on how much CPU power you have, its not too far off. I usually
see about 1/5th the performance when running SSL vs unsecure pages.
> I have read Mark Cox's document at
> <http://www.awe.com/mark/apcon2000/> , it is very good, but it
> didn't solve my problem, as it doesn't talk about non-SSL.
> Although to be fair, I am not compiling RC4 into openssl, so I am
> probably using 3DES, which will hurt me a bit according to the
> above document.
>
> I have enabled dbm SSLSessionCache, and I doubt if enabled a
> shared memory cache will improve my performance greatly.
> (Especially since my real quick benchmark that I used only made 1
> keepalive connection.
You should run better tests. Get a couple machines as clients, (not the
same one as the web server!) and go download WebBench from ZDNet or
something similar.
Serving SSL pages is mainly CPU power limited, so multiple fast CPUs will
help a lot.
I found that using openssl-0.9.6 gave me a significant speed boost over
previous versions, about 50-60% if I remember correctly.
FWIW, on a SGI Origin 200 with dual 180MHz CPUs, it topped out around 145
hits/second on a small static data set (small files, most around 1K in size)
running Apache/1.3.14 mod_ssl/2.7.1 OpenSSL/0.9.6.
-Dave
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
