Thank you for the reply. The server machine I was using as a test bed was a PII-400
with a fwe other jobs running, so it's pretty lame on the CPU end. The (single)
client I was using was a perl interpreter on a PII-266, so my numbers are going to be
low anyway.
Given some of the information you gave me, it looks like my findings are inline with
what I should be getting. I'll do a few more benchmarks on production boxes (which
are more powerful than my test machine, and see what kind of difference I get.
Thanks again.
-----Original Message-----
From: David Rees [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 31, 2000 5:24 PM
To: [EMAIL PROTECTED]
Subject: RE: benchmarks SSL vs non-SSL
> Can anyone point me to a document that compares SSL performance
> to non-SSL performance?
> I recently compiled up modssl-2.6.1 against 1.3.12 on Win32, and
> I get speeds about 1/20th of what I get from the same server
> without SSL enabled. That doesn't seem right.
Depending on how much CPU power you have, its not too far off. I usually
see about 1/5th the performance when running SSL vs unsecure pages.
> I have read Mark Cox's document at
> <http://www.awe.com/mark/apcon2000/> , it is very good, but it
> didn't solve my problem, as it doesn't talk about non-SSL.
> Although to be fair, I am not compiling RC4 into openssl, so I am
> probably using 3DES, which will hurt me a bit according to the
> above document.
>
> I have enabled dbm SSLSessionCache, and I doubt if enabled a
> shared memory cache will improve my performance greatly.
> (Especially since my real quick benchmark that I used only made 1
> keepalive connection.
You should run better tests. Get a couple machines as clients, (not the
same one as the web server!) and go download WebBench from ZDNet or
something similar.
Serving SSL pages is mainly CPU power limited, so multiple fast CPUs will
help a lot.
I found that using openssl-0.9.6 gave me a significant speed boost over
previous versions, about 50-60% if I remember correctly.
FWIW, on a SGI Origin 200 with dual 180MHz CPUs, it topped out around 145
hits/second on a small static data set (small files, most around 1K in size)
running Apache/1.3.14 mod_ssl/2.7.1 OpenSSL/0.9.6.
-Dave
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
