>>> 在 10:23 下午 的 5/24/2011 上，在讯息 <20110524142324.ga29...@panix.com> 中，Thor Lancelot Simon <t...@panix.com> 写入：> On Tue, May 24, 2011 at 05:10:03PM +0800, GuanJun He wrote: >> Hi, >> >> This is a patch to add a switch to openssl's compression >> methords(if compression methords are configured to compile in, 'config >> zlib').Add an environment variable to control compression methords on >> and off.As you know,more and more architectures have hardware >> compression methords already, to get benifit from the hardware >> compression, and to get a good performance,we need a switch as this. > > I don't understand this. Are you suggesting that some hardware mechanism > is trying to compress data _after_ OpenSSL handles it? Turning off > compression in OpenSSL won't help with this, since the resulting SSL/TLS > stream will stil be basically uncompressible. > > Or, are you suggesting that some hardware mechanism has compressed the > application-layer data _before_ OpenSSL sees it, and thus the compression > in OpenSSL is just a waste of cycles?
thank you very much for your reply! And sorry for my unclear descriptions. I mean OpenSSL compresses data before the encryption(zlib compiled in), having a massive performance impact (throughput decrease, CPU load increase) on platforms with cryptographic hardware.So, when using openssl with zlib compiled in, we expect to have a switch provided to user to configure whether compression is on or off.then, if on platforms with cryptographic hardware, users can simply turn the compression off. Do you have any advice to this? and please feel free to comment. > > Either way, it might be better to add explicit support for offloading > compression to hardware. This can be done through /dev/crypto on NetBSD, > for example, but unfortunately OpenSSL's engine for /dev/crypto is old and > does not know how to use this feature. This may be another feature I think.And also, I'm interested in it. thanks a lot, Guanjun > > Thor > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > Development Mailing List openssl-dev@openssl.org > Automated List Manager majord...@openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org
