On Tue, Jan 09, 2001 at 11:03:14AM -0500, Colin Devine wrote:
> Hello, I have just installed apache with mod_ssl (and open_ssl and mm as
> well) onto a solaris 5.7 sparc machine. I configured the certificates and
> the install was pretty straight forward. The problem is that the server
> is really, really slow. It takes forever to get the smallest pages. Here
> is the info I have:
>
> apache: 1.3.14
> mod_ssl: mod_ssl-2.7.1-1.3.14
> open_ssl: openssl-0.9.6
> m: mm-1.1.3
>
>
> I have these settings in my httpd.conf:
>
> SSLSessionCache dbm:/www/secure_apache/logs/ssl_scache
Whoa there! Why do you have dbm for your session cache, when you
compiled with mm support? It should be set to shm (especially on
Solaris which has fairly decent shm support) - see
http://www.modssl.org/docs/2.7/ssl_reference.html#ToC5
> SSLSessionCacheTimeout 300
> SSLRandomSeed startup builtin
> SSLRandomSeed connect builtin
You could go for the full /dev/urandom support from Sun - see the
thread from today on openssl-users about Solaris prng:
http://marc.theaimsgroup.com/?t=97872512100003&w=2&r=1
>
> which I have read to be the problems in others instalations but do not
> appear so in mine (they are the default). The only odd thing about this
> install is that the total partition is NFS mounted. However, this doesn't
> seem to be a problem with our other non-mod_ssl installation of apache.
> Any thoughts or ideas would be greatly welcomed. Thanks, and have a nice
> day.
>
Is your SSLSessionCache dbm file from above placed on nfs? That could definetely
explain why you get lousy performance.
There is a short paper on SSL performance which compares a couple
of different processors ... and the Sparc's is not a real preformance
winner ;-) http://www.awe.com/mark/apcon2000/apachecon2000.pdf
vh
Mads Toftum
--
`Darn it, who spiked my coffee with water?!' - lwall
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
