The only problem I have with that is that we previously had an
installation of Netscape suitespot installed and it was handling the ssl
just fine. Would it then be that mod_ssl is not good with sparc's? If
apache and mod_ssl isn't the solution, what is? Thanks for your help.
--Colin Devine
On Tue, 9 Jan 2001, Gonyou, Austin wrote:
> Solaris boxes don't do SSL well. Their FPU sucks. The reason I would say
> this, and NO, it's not just bias, is that Ralf S. Engalschall as well as
> myself and I'm sure a million other peopel out there have tested many
> platforms for SSL performance by using the "openssl speed" speed test. If
> you go to a prompt and type, openssl speed, if it is your path or ,
> /path/to/openssl speed, it will produce a speed test testing all the default
> algorythms it was compiled with and produce a summary report for you. What
> you will see is that ANY intel chip can handle about 100-200
> KeySigns/second, and that Sparcs will only handle about 25-30
> keysigns/second. This is the root of your problem. Also, if you go look at
> SSL acceleration websites, like rainbow, nCipher, etc. They have all this
> test data, all done with Sparcs or IBM's. Sparcs and IBM's don't do ssl
> well, until you add an ssl accelerator card. F5 uses them in their BigIP
> boxes, but their Intel Test data shows only a 5% increase in a Linux box
> running openssl on a 600 Mhz machine, where as there is approximately a 150%
> increase in the Sparc E4500 they tested. I wanted to find out for myself so
> I did the same test and they are right on. Run your web server on something
> else or use an ssl proxy mechanism of some sort.
> Austin
>
> -----Original Message-----
> From: Colin Devine
> To: [EMAIL PROTECTED]
> Sent: 1/9/01 10:03 AM
> Subject: solaris slow with mod_ssl
>
> Hello, I have just installed apache with mod_ssl (and open_ssl and mm as
> well) onto a solaris 5.7 sparc machine. I configured the certificates
> and
> the install was pretty straight forward. The problem is that the server
> is really, really slow. It takes forever to get the smallest pages.
> Here
> is the info I have:
>
> apache: 1.3.14
> mod_ssl: mod_ssl-2.7.1-1.3.14
> open_ssl: openssl-0.9.6
> m: mm-1.1.3
>
>
> I have these settings in my httpd.conf:
>
> SSLSessionCache dbm:/www/secure_apache/logs/ssl_scache
> SSLSessionCacheTimeout 300
> SSLRandomSeed startup builtin
> SSLRandomSeed connect builtin
>
> which I have read to be the problems in others instalations but do not
> appear so in mine (they are the default). The only odd thing about this
> install is that the total partition is NFS mounted. However, this
> doesn't
> seem to be a problem with our other non-mod_ssl installation of apache.
> Any thoughts or ideas would be greatly welcomed. Thanks, and have a
> nice
> day.
>
>
> --Colin Devine
>
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
>
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
