Re: Followup on openssl 3.0 note seen in another thread

2022-12-15 Thread Willy Tarreau
On Thu, Dec 15, 2022 at 08:40:59PM -0700, Shawn Heisey wrote: > On 12/15/22 09:47, Shawn Heisey wrote: > > The version of curl with http3 support is not available in any of the > > distro repos for my Ubuntu machines, so I found a docker image with it. > > That works in cases where a browser won't

Re: Followup on openssl 3.0 note seen in another thread

2022-12-15 Thread Willy Tarreau
On Thu, Dec 15, 2022 at 09:47:36AM -0700, Shawn Heisey wrote: > Just got a look at the patch. One line code fixes are awesome. We all love them. Sometimes I even suspect we unconsciously create such bugs to have the pleasure of contemplating these fixes :-) Willy

Re: Followup on openssl 3.0 note seen in another thread

2022-12-15 Thread Willy Tarreau
On Fri, Dec 16, 2022 at 01:44:15AM -0500, John Lauro wrote: > What exactly is needed to reproduce the poor performance issue with openssl > 3? I was able to test 20k req/sec with it using k6 to simulate 16k users > over a wan. The k6 box did have openssl1. Probably could have sustained > more, b

Re: Followup on openssl 3.0 note seen in another thread

2022-12-15 Thread Willy Tarreau
On Thu, Dec 15, 2022 at 11:39:16PM -0700, Shawn Heisey wrote: > On 12/15/22 21:49, Willy Tarreau wrote: > > There's currently a great momentum around WolfSSL that was already > > adopted by Apache, Curl, and Ngtcp2 (which is the QUIC stack that > > powers most HTTP/3-compatible agents). Its support

Re: Followup on openssl 3.0 note seen in another thread

2022-12-15 Thread John Lauro
What exactly is needed to reproduce the poor performance issue with openssl 3? I was able to test 20k req/sec with it using k6 to simulate 16k users over a wan. The k6 box did have openssl1. Probably could have sustained more, but that's all I need right now. Openssl v1 tested a little faster,

Re: Followup on openssl 3.0 note seen in another thread

2022-12-15 Thread Willy Tarreau
On Fri, Dec 16, 2022 at 07:29:23AM +0100, Vincent Bernat wrote: > On 2022-12-16 05:49, Willy Tarreau wrote: > > There's currently a great momentum around WolfSSL that was already > > adopted by Apache, Curl, and Ngtcp2 (which is the QUIC stack that > > powers most HTTP/3-compatible agents). Its sup

Re: Followup on openssl 3.0 note seen in another thread

2022-12-15 Thread Shawn Heisey
On 12/15/22 21:49, Willy Tarreau wrote: There's currently a great momentum around WolfSSL that was already adopted by Apache, Curl, and Ngtcp2 (which is the QUIC stack that powers most HTTP/3-compatible agents). Its support on haproxy is making fast progress thanks to the efforts on the two sides

Re: Followup on openssl 3.0 note seen in another thread

2022-12-15 Thread Vincent Bernat
On 2022-12-16 05:49, Willy Tarreau wrote: There's currently a great momentum around WolfSSL that was already adopted by Apache, Curl, and Ngtcp2 (which is the QUIC stack that powers most HTTP/3-compatible agents). Its support on haproxy is making fast progress thanks to the efforts on the two sid

Re: Followup on openssl 3.0 note seen in another thread

2022-12-15 Thread Willy Tarreau
On Thu, Dec 15, 2022 at 08:58:29PM -0700, Shawn Heisey wrote: > I'm sure the performance issue has been brought to the attention of the > OpenSSL project ... what did they have to say about the likelihood and > timeline for providing a fix? They're still working on it for 3.1. 3.1-alpha is "less w

Re: Followup on openssl 3.0 note seen in another thread

2022-12-15 Thread Shawn Heisey
On 12/15/22 02:19, Willy Tarreau wrote: I guess you'll get them only while the previous version remains maintained (i.e. use a package from the previous LTS distro). But regardless you'll also need to use executables linked with that version and that's where it can become a pain. When I upgrade

Re: Followup on openssl 3.0 note seen in another thread

2022-12-15 Thread Shawn Heisey
On 12/15/22 09:47, Shawn Heisey wrote: The version of curl with http3 support is not available in any of the distro repos for my Ubuntu machines, so I found a docker image with it. That works in cases where a browser won't switch, but that's because it never tries TCP, it goes straight to UDP. 

RE: Global Gaming Expo - Interested?

2022-12-15 Thread Brenda Jerez
Hi-there!! If you're interested in knowing more about the event, reply with " Send Estimate details " I'll contact you with more information. Thanks Brenda From: Brenda Jerez Sent: Tuesday, December 13, 2022 1:18 PM To: haproxy@formilux.org Subject: Global Gaming Expo - Interested? Greeting

RE: Global Gaming Expo - Interested?

2022-12-15 Thread Brenda Jerez
Hi-there!! If you're interested in knowing more about the event, reply with " Send Estimate details " I'll contact you with more information. Thanks Brenda From: Brenda Jerez Sent: Tuesday, December 13, 2022 1:18 PM To: haproxy@formilux.org Subject: Global Gaming Expo - Interested? Greeting

Re: Followup on openssl 3.0 note seen in another thread

2022-12-15 Thread Shawn Heisey
On 12/15/22 00:58, Amaury Denoyelle wrote: I seem to be able to reach your website with H3 currently. Did you revert to an older version ? Regarding this commit, it rejects requests with invalid headers (with uppercase or non-HTTP tokens in the field name). Have you tried with several browsers an

Re: Followup on openssl 3.0 note seen in another thread

2022-12-15 Thread Amaury Denoyelle
On Thu, Dec 15, 2022 at 09:20:01AM +0100, Amaury Denoyelle wrote: > On Thu, Dec 15, 2022 at 09:03:18AM +0100, Amaury Denoyelle wrote: > > On Thu, Dec 15, 2022 at 08:58:16AM +0100, Amaury Denoyelle wrote: > > > On Wed, Dec 14, 2022 at 11:20:44PM -0700, Shawn Heisey wrote: > > > > On 12/14/22 21:23,

Re: Followup on openssl 3.0 note seen in another thread

2022-12-15 Thread Willy Tarreau
On Thu, Dec 15, 2022 at 08:56:13AM +0100, Vincent Bernat wrote: > On 2022-12-14 15:15, Willy Tarreau wrote: > > Possibly, yes. It's more efficient in every way from what we can see. > > For users who build themselves (and with QUIC right now you don't have > > a better choice), it should not change

Re: Followup on openssl 3.0 note seen in another thread

2022-12-15 Thread Amaury Denoyelle
On Thu, Dec 15, 2022 at 09:03:18AM +0100, Amaury Denoyelle wrote: > On Thu, Dec 15, 2022 at 08:58:16AM +0100, Amaury Denoyelle wrote: > > On Wed, Dec 14, 2022 at 11:20:44PM -0700, Shawn Heisey wrote: > > > On 12/14/22 21:23, Илья Шипицин wrote: > > > > Can you try to bisect? > > > I had made some i

Re: Followup on openssl 3.0 note seen in another thread

2022-12-15 Thread Amaury Denoyelle
On Thu, Dec 15, 2022 at 08:58:16AM +0100, Amaury Denoyelle wrote: > On Wed, Dec 14, 2022 at 11:20:44PM -0700, Shawn Heisey wrote: > > On 12/14/22 21:23, Илья Шипицин wrote: > > > Can you try to bisect? > > I had made some incorrect assumptions about what's needed to use > > bisect. With a little b